Privileged Docker containers—do you really need them?
→ https://snyk.io/blog/privileged-docker-containers
→ https://snyk.io/blog/privileged-docker-containers
Snyk
Privileged Docker containers—do you really need them? | Snyk
I dropped down a rabbit hole doing some testing with Podman around why running a certain container in a rootless configuration required the --privileged flag.
helm-sudo plugin is a helm plugin that uses impersonating to execute helm-commands on clusters within the admin context.
More https://github.com/cloudogu/helm-sudo
More https://github.com/cloudogu/helm-sudo
GitHub
GitHub - cloudogu/helm-sudo: A Helm plugin for running commands with the security privileges of another user
A Helm plugin for running commands with the security privileges of another user - GitHub - cloudogu/helm-sudo: A Helm plugin for running commands with the security privileges of another user
Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure to use Azure Key Vault secrets, keys and certificates in Kubernetes
→ https://github.com/SparebankenVest/azure-key-vault-to-kubernetes
→ https://github.com/SparebankenVest/azure-key-vault-to-kubernetes
GitHub
GitHub - SparebankenVest/azure-key-vault-to-kubernetes: Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure…
Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure to use Azure Key Vault secrets, keys and certificates in Kubernetes. - SparebankenVest/azure-key-vault-to-kubernetes
Suspicious pods is a very simple tool, which does a very simple task: print a list of pods in your Kubernetes cluster that might not be working correctly, along with a reason on why that pod is considered suspicious
Read more: https://github.com/edrevo/suspicious-pods
Read more: https://github.com/edrevo/suspicious-pods
GitHub
GitHub - edrevo/suspicious-pods: Prints a list of k8s pods that might not be working correctly
Prints a list of k8s pods that might not be working correctly - edrevo/suspicious-pods
Kubernetes External Secrets allows you to use external secret management systems, like AWS Secrets Manager or HashiCorp Vault, to securely add secrets in Kubernetes.
Read on: https://github.com/external-secrets/kubernetes-external-secrets
Read on: https://github.com/external-secrets/kubernetes-external-secrets
secrets-manager reads the secrets from Vault and compares them to Kubernetes secrets creating and updating them as needed
More https://github.com/tuenti/secrets-manager
More https://github.com/tuenti/secrets-manager
GitHub
GitHub - tuenti/secrets-manager: A daemon to sync Vault secrets to Kubernetes secrets
A daemon to sync Vault secrets to Kubernetes secrets - tuenti/secrets-manager
The right way to authenticate to your clusters from your CI/CD pipelines
More: https://tremolosecurity.com/post/pipelines-and-kubernetes-authentication
More: https://tremolosecurity.com/post/pipelines-and-kubernetes-authentication
NetworkPolicy Editor: Create, Visualize, and Share Kubernetes NetworkPolicies
More: https://editor.cilium.io/
More: https://editor.cilium.io/
editor.networkpolicy.io
Network Policy Editor for Kubernetes
editor.networkpolicy.io makes it easy to build, visualize, and make sense of Network Policies, which can then be downloaded as YAML and run in any Kubernetes cluster with a Network Policy-aware CNI.