Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)
Что насчет того чтобы разбить все требования на уровнях жизненного цикла ПО или кубернетиса, создать модель уровней развития и определить какие из мер достаточны для первого уровня, аля как в модели DSOMM?
Так же платные решения перенести в качестве рекомендаций на верхние уровни модели.
Congrats on this list, there are plenty of resources available here!
Just want to signal that we are currently writing a security checklist a bit similar to this one on the Kubernetes documentation. If you ever want to participate, it's here kubernetes/website#33992. It's a bit different because we cannot link to third-party tools or projects but anyway.
Hi It is recommended to separate the cluster nodes interacting with the Internet (DMZ) from the cluster nodes interacting with internal services. Delimitation can be within one cluster, or within two different clusters (DMZ and VLAN)
Could you please describe the requirement in more detail, for example, by drawing a network diagram showing VLANs and network hosts. This is how I draw my diagrams: example .