Cookies Policy

General Use

We use cookies, tracking pixels and related technologies on our website. Cookies are small data files that are served by our platform and stored on your device. Our site uses cookies dropped by us or third parties for a variety of purposes including to operate and personalize the website. Also, cookies may also be used to track how you use the site to target ads to you on other websites.

Third Parties

Our website employs the use the various third-party services. Through the use of our website, these services may place anonymous cookies on the Visitor's browser and may send their own cookies to the Visitor's cookie file. Some of these services include but are not limited to: Google, Facebook, Twitter, Adroll, MailChimp, Sucuri, Intercom and other social networks, advertising agencies, security firewalls, analytics companies and service providers. These services may also collect and use anonymous identifiers such as IP Address, HTTP Referrer, Unique Device Identifier and other non-personally identifiable information and server logs.

risks

What risks can be hidden within a container infrastructure?

Inadequate Container and Image Security Practices in Kubernetes

Requirements Logging, Monitoring and Alarming

Inadequate Audit Logging Configuration in Kubernetes

Mismanagement of Authorization Mechanisms in Kubernetes

Upgrade Policy

Retention Policy for Installation Artifacts in Kubernetes

Back-Ups in Kubernetes

Resource Exhaustion and Cluster Instability in Kubernetes

Uncontrolled Resource Usage in Kubernetes

Unrestricted Command Execution and File Access in Kubernetes

Auto-Mounting the Default ServiceAccount Token in Kubernetes Pods

Misconfiguration or Lack of Admission Controllers in Kubernetes

Active Profiling in Kubernetes Control Plane Components

Allowing Anonymous Requests to the Kubernetes API Server

Unrestricted Use of NodePort Services in Kubernetes

Insufficient Logging of Kubernetes Control Plane Events

Neglecting Regular Upgrades in Kubernetes Clusters

Enabling HTTP Application Routing in Kubernetes Clusters

Using the Latest Tag in Container Image Versioning

Misuse of HELM Commands in Kubernetes

Mishandling of Logs and Monitoring Data in Kubernetes

Unauthorized Access and Exploitation of Static Pods

Unauthorized Access to the Kubernetes API Server

Mismanagement of Namespaces in Kubernetes

Using Untrusted or Non-Verified Container Images

Mismanagement of Labels in Kubernetes

Unencrypted Communication in Kubernetes CNIs

Unrestricted Node-Level Communication in Calico CNI

Unverified Artifacts in Container Images

Using Unverified Container Images in Production Environments

How to Secure Kubernetes with RBAC and Avoid Risks with kubectl

Unauthorized Access to Kubeadm Commands

Protecting Important Directories in a Kubernetes Cluster

Adding Privileged Processes in Kubernetes Pods

Unauthorized Access and Exposure of Sensitive Information via Kubernetes Dashboards

Unauthorized Access to ETCD in Kubernetes

Uncontrolled Pod Placement in Kubernetes Clusters

Unauthorized Access or Modification of Kubernetes Configuration Files

Vulnerability of Modifiable Secrets in Kubernetes

Unrestricted Pod Communication in Kubernetes Clusters

Overlapping UIDs Between Kubernetes Containers and Host VM