Generic Kubernetes and containers security:

This is an extra resources related to security topic for Kubernetes to keep your cluster is up-to-date and more secure.

Websites & Blogs

1. Kubernetes-security.info
2. Aquasecurity Blogs
3. Control-plane/Andrew Martin @sublimino: 11 ways not to get hacked
4. Simulator: A distributed systems and infrastructure simulator for attacking and debugging Kubernetes

Youtube Videos

1. Andrew Martin Attacking and Defending Cloud Native Infrastructure
2. How to Train your Red Team (for Cloud-Native) - Andrew Martin, ControPlane
3. InGuardians/Jay Beale: Kubernetes Practical attacks and defences

Publications

1. CNCF cloud-native security white paper Nov 2020
2. Free O'Reilly Kubernetes security book compliments of Aqua - by Liz Rice and Michael Hausenblas

CVEs

1. CNCF Kubernetes Security Anatomy and the Recently Disclosed CVEs (CVE-2020-8555, CVE-2020-8552)
2. Kubernetes Vulnerability Puts Clusters at Risk of Takeover (CVE-2020-8558)
3. CVE-2020-8559: Privilege escalation from compromised node to cluster
   • Proof of Concept
4. CVE-2020-8557: Node disk DOS by writing to container /etc/hosts

Playground

1. Madhu Akula's Kubernetes Goat - Vulnerable cluster environment to learn and practice Kubernetes security.
2. Kubernetes Capture the Flag vagrant environment - was hosted online on http://k8s-ctf.rocks/
3. KubeCon NA 2019 CTF Tutorial Guide