Privileged Docker containers—do you really need them?

→ https://snyk.io/blog/privileged-docker-containers

helm-sudo plugin is a helm plugin that uses impersonating to execute helm-commands on clusters within the admin context.

More https://github.com/cloudogu/helm-sudo

Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure to use Azure Key Vault secrets, keys and certificates in Kubernetes

→ https://github.com/SparebankenVest/azure-key-vault-to-kubernetes

Suspicious pods is a very simple tool, which does a very simple task: print a list of pods in your Kubernetes cluster that might not be working correctly, along with a reason on why that pod is considered suspicious

Read more: https://github.com/edrevo/suspicious-pods

Kubernetes External Secrets allows you to use external secret management systems, like AWS Secrets Manager or HashiCorp Vault, to securely add secrets in Kubernetes.

Read on: https://github.com/external-secrets/kubernetes-external-secrets

secrets-manager reads the secrets from Vault and compares them to Kubernetes secrets creating and updating them as needed

More https://github.com/tuenti/secrets-manager

The right way to authenticate to your clusters from your CI/CD pipelines

More: https://tremolosecurity.com/post/pipelines-and-kubernetes-authentication

NetworkPolicy Editor: Create, Visualize, and Share Kubernetes NetworkPolicies

More: https://editor.cilium.io/

Analysing Kubernetes audit logs using Falco

Read on: https://github.com/developer-guy/falco-analyze-audit-log-from-k3s-cluster