Readit Newsaboutsimon commented on Kubernetes Security – Best Practice Guide github.com/freach/kuberne... · Posted by u/aboutsimon
Have you seen CIS Kubernetes Benchmark? It has 100+ security check points.
Learned about them this morning, it covers almost all of my findings and more. Thanks for sharing!
aboutsimon commented on Kubernetes Security – Best Practice Guide github.com/freach/kuberne... · Posted by u/aboutsimon
Another tool that can help here: https://github.com/aquasecurity/kube-bench
Super useful thanks, added it to the guide
aboutsimon commented on Kubernetes Security – Best Practice Guide github.com/freach/kuberne... · Posted by u/aboutsimon
It would help a lot to have a Why for each section. For example, why use a private topology? Why block access to the AWS Metadata API?
I'm not saying it's wrong to do those things, but it would help to prioritize changes if you can understand the severity of the security vulnerabilities you're exposed to.
Indeed very helpful, I created issues on Github.
Yes I did several projects bringing Kubernetes to production. In the cloud a little easier then on-prem. But always a real enabler for everyone working with K8s.
aboutsimon commented on Ask HN: Freelancer? Seeking freelancer? (January 2017) · Posted by u/whoishiring
DevOps Engineer seeking work, Remote, Area Karlsruhe/Germany
My name is Simon, 32 years old with 10+ years experience in Dev and Ops combined with a battle proven stack of services to get shit done.
I'm here to assist you to tackle the challenges of the Digital Transformation. No matter if it's migrating an existing Software stack to a new System Architecture or platform, or building a new service from the ground up.
- Linux Debian/Ubuntu Server/CentOS
- CI/CD with Jenkins/Concourse, SaltStack, Docker
- Configuration Management with SaltStack
- Private Cloud with Docker, KVM
- Public Cloud AWS
- Log management on ELK Stack
- Web services on NGINX - uwsgi/unicorn/passenger/jetty
- ElasticSearch, Redis, MySQL, MongoDB, RethinkDB, etcd, OpenLDAP
- Python, Perl, JavaScript, C: +++
- Ruby, PHP, Java, Go: +
My specialty is architecting and building system and service infrastructures for "as a service" products.
LinkedIn: https://de.linkedin.com/in/simonpirschel