Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add DevSecOps in Action: Kubernetes Secrets blog post #45640

Open
wants to merge 43 commits into
base: main
Choose a base branch
from
Open

Add DevSecOps in Action: Kubernetes Secrets blog post #45640

wants to merge 43 commits into from

Conversation

efrikin
Copy link

@efrikin efrikin commented Mar 22, 2024

hello

This is a blog post about security Kubernetes Secret.
The purpose to of this post is to inspire the reader to a small step towards integrating DevSecOps methodology in the development lifecycle.

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Mar 22, 2024
@k8s-ci-robot
Copy link
Contributor

Welcome @efrikin!

It looks like this is your first PR to kubernetes/website 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes/website has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. area/blog Issues or PRs related to the Kubernetes Blog subproject labels Mar 22, 2024
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nate-double-u for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot requested a review from sftim March 22, 2024 10:26
@k8s-ci-robot k8s-ci-robot added language/en Issues or PRs related to English language sig/docs Categorizes an issue or PR as relevant to SIG Docs. labels Mar 22, 2024
@netlify Netlify
Copy link

netlify bot commented Mar 22, 2024 •
edited
Loading

✅ Pull request preview available for checking

Built without sensitive environment variables

Name Link
🔨 Latest commit 90588ec
🔍 Latest deploy log https://app.netlify.com/sites/kubernetes-io-main-staging/deploys/66eafa3e8b747e000997b2e7
😎 Deploy Preview https://deploy-preview-45640--kubernetes-io-main-staging.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@sftim sftim removed the area/blog Issues or PRs related to the Kubernetes Blog subproject label Mar 24, 2024
@sftim
Copy link
Contributor

sftim commented Mar 24, 2024

Thanks

/hold
pending assignment of publication date

@k8s-ci-robot k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Mar 24, 2024
@efrikin @dipesh-rawat
Fix kubernetes#45640 (comment)
8236255 
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
@k8s-ci-robot k8s-ci-robot added the area/blog Issues or PRs related to the Kubernetes Blog subproject label Mar 25, 2024
efrikin and others added 2 commits March 25, 2024 09:36
@efrikin @dipesh-rawat
Update content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secr…
15b9777 
…ets.md


Fix kubernetes#45640 (comment)

Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
@efrikin @sftim
Update content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secr…
5f9f3f8 
…ets.md


Fix kubernetes#45640 (comment)

Co-authored-by: Tim Bannister <tim@scalefactory.com>
@efrikin
Copy link
Author

efrikin commented Mar 25, 2024

hello,
@dipesh-rawat and @sftim

Thanks for your answers!
I applied your suggestions.

network-charles
network-charles reviewed Apr 16, 2024
View reviewed changes
Copy link
Contributor

@network-charles network-charles left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A few suggestions I have.

content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-04-15-devsecops-in-action-k8s-secrets.md Outdated Show resolved Hide resolved
@efrikin
Copy link
Author

efrikin commented May 13, 2024

hello @sftim

What about publication?

@efrikin
Copy link
Author

efrikin commented Jun 10, 2024

/cc @sftim

@k8s-ci-robot k8s-ci-robot requested a review from sftim June 10, 2024 15:49
@sftim
Copy link
Contributor

sftim commented Jun 10, 2024

Hi @efrikin

The blog team is short on capacity recently. We can hope to have this reviewed within 6 weeks, maybe sooner.

@efrikin
Copy link
Author

efrikin commented Aug 29, 2024

hello,
@sftim

What about publish?

@sftim
Copy link
Contributor

sftim commented Sep 8, 2024

Better to ask @kubernetes/sig-docs-blog-owners rather than an individual @efrikin.

How about 2024-09-17 as a publication date; let's see if we can hit that.

@efrikin
Copy link
Author

efrikin commented Sep 15, 2024

Better to ask @kubernetes/sig-docs-blog-owners rather than an individual @efrikin.

How about 2024-09-17 as a publication date; let's see if we can hit that.

Hello,
@sftim

Thank you for your answer!

Okay. I updated publication date.

@sftim
Copy link
Contributor

sftim commented Sep 15, 2024

/label tide/merge-method-squash

@k8s-ci-robot k8s-ci-robot added the tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges. label Sep 15, 2024
sftim
sftim reviewed Sep 15, 2024
View reviewed changes
Copy link
Contributor

@sftim sftim left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks.

The first key thing here is the link to the Red Hat article; I think you'd need to either declare an interest or drop the link.
The second is that we can't link to your personal Git repo and encourage people to run the code they find there. We'd need a different option.

content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated
security issues known as
[Security through obscurity](https://en.m.wikipedia.org/wiki/Security_through_obscurity).
To avoid it, it's necessary to integrate
[DevSecOps methodology](https://www.redhat.com/en/topics/devops/what-is-devsecops)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi. I think you need to declare an interest here? (have I got that right?)

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Right. I removed hyperlink

content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Outdated Show resolved Hide resolved
content/en/blog/_posts/2024-09-17-devsecops-in-action-k8s-secrets/index.md Show resolved Hide resolved
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Sep 18, 2024
@efrikin
Copy link
Author

efrikin commented Sep 18, 2024

Hello,
@sftim

Thank for your remarks!
I applied your suggestion.

divya-mohan0209
divya-mohan0209 reviewed Oct 31, 2024
View reviewed changes
Copy link
Contributor

@divya-mohan0209 divya-mohan0209 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @efrikin , is this ready for review?

@efrikin
Copy link
Author

efrikin commented Nov 11, 2024

hello, @divya-mohan0209

Yes, of course :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Ankurk99 Ankurk99 Ankurk99 left review comments

@shannonxtreme shannonxtreme shannonxtreme left review comments

@network-charles network-charles network-charles left review comments

@sftim sftim sftim left review comments

@divya-mohan0209 divya-mohan0209 divya-mohan0209 left review comments

@dipesh-rawat dipesh-rawat dipesh-rawat left review comments

@nate-double-u nate-double-u Awaiting requested review from nate-double-u

Assignees
No one assigned
Labels
area/blog Issues or PRs related to the Kubernetes Blog subproject cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. language/en Issues or PRs related to English language sig/docs Categorizes an issue or PR as relevant to SIG Docs. sig/security Categorizes an issue or PR as relevant to SIG Security. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
9 participants
@efrikin @k8s-ci-robot @sftim @network-charles @reylejano @dipesh-rawat @divya-mohan0209 @shannonxtreme @Ankurk99