Kubernetes Security(CKS)1: CIS Benchmarking with Kube Bench

发布人

https://www.youtube.com/watch?v=jvmShTBSBoA&amp;list=PLFkEchqXDZx6Bw3B2NRVc499j1TavjOvm&amp;index=2
kubectl command 1：https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands
kubectl command 2：https://cheatsheet.dennyzhang.com/cheatsheet-kubernetes-A4
kubectl command 3：https://smoothies.com.cn/kubernetes-docs/%E7%BB%84%E4%BB%B6/Kubectl/kubectl-command.html

kubernetes CIS Benchmarks 笔记: https://blog.csdn.net/xixihahalelehehe/article/details/116006742


https://www.cisecurity.org/benchmark/kubernetes
https://github.com/aquasecurity/kube-bench
#本地安装

https://github.com/aquasecurity/kube-bench/blob/main/docs/installation.md

curl -L https://github.com/aquasecurity/kube-bench/releases/download/v0.6.9/kube-bench_0.6.9_linux_amd64.deb -o kube-bench_0.6.9_linux_amd64.deb

apt install ./kube-bench_0.6.9_linux_amd64.deb -f

kube-bench

根据检测报错，编号指导修改错误。

#kubernetes 安装

#master

kubectl apply -f https://raw.githubusercontent.com/aquasecurity/kube-bench/main/job-master.yaml

#node:

kubectl apply -f https://raw.githubusercontent.com/aquasecurity/kube-bench/main/job-node.yaml

kubectl get job
kubectl get po
kubectl log xxxx

打开封面下载高清视频观看高清视频视频下载器

Kubernetes Security(CKS)1: CIS Benchmarking with Kube Bench

Kubernetes Security （CKS） - Verify platform binaries before deploying

Kubernetes Security(CKS) - Network Policies

【helm】什么是 Helm 和 Helm Charts？何时使用 Helm 以及如何使用它

Kubernetes Security(CKS) 2: Ingress with TLS

KubernetesSecurity(CKS)23: Ensure immutability of containers at runtime

Kubernetes Security（CKS） - Disable Automount Service Account Token

KubernetesSecurity(CKS)12: Open Policy Agent - OPA Gatekeeper

KubernetesSecurity(CKS)10: Restrict a Container's Syscalls with seccomp

KubernetesSecurity(CKS)15: ContainerRuntime Sandboxes gVisor runsc katacontainer

KubernetesSecurity(CKS)11: Pod Security Policies (PodSecurityPolicy)

KubernetesSecurity(CKS)13: Security Context for a Pod or Container

KubernetesSecurity(CKS)22: 使用Falco & Slack警报检测系统调用等文件恶意活动

KubernetesSecurity(CKS)9: Restrict Container Access with AppArmor

【运维教程】CICD流水线实战，使用Git+Jenkins+Harbor+Docker实现自动化！开发丨测试丨DevOps丨K8S丨持续交付丨容器化技术丨IT

KubernetesSecurity(CKS)16: mTLS实现pod到pod加密

KubernetesSecurity(CKS)21: Trivy、anchore-cli、clair-scanner 扫描镜像查找已知漏洞

KubernetesSecurity(CKS)24: 使用 Audit Logs 监控访问情况

2小时搞定K8s企业级DevOps实践，最新云计算运维教程，手把手教

KubernetesSecurity(CKS)8: Minimize host OS footprint Reduce Attack Surface

KubernetesSecurity(CKS)17: 最小化基本镜像(images)占用空间

Kubernetes Security - Pod安全准入控制- PodSecurityPolicy

Kubernetes上最Cool的网络方案Cilium快速入门

CKS Exam Experience, Topics to Focus & Tips

KubernetesSecurity(CKS)19: 对镜像(images)进行签名和验证

Kubernetes Security（CKS） - 限制访问 Kubernetes API

Docker快速入门到项目部署，docker微服务镜像+K8S架构原理+DockerCompos项目实战一套搞定！（2024最新版）

KubernetesSecurity(CKS)14: Manage Kubernetes secrets and secret types

Kubernetes Security（CKS） -自定义RBAC 用户访问 dashboard

用Podman 取代 Docker，你同意吗？

k8s(kubernetes)常见运维面试题-k8s专题150题

【Linux三剑客超全超详细教程】（grep、sed、awk入门到精通有这一套足够了）目前B站最完整的Linux三剑客系统课程，包含所有干货内容，无废话！

Mark Laita对黑帽黑客-Gummo第二次访谈

90分钟一口气学完docker+k8s！带你掌握docker+k8s所有核心知识点，让你面试少走99%弯路【通俗易懂，附源码笔记及面试宝典】

openstack 搭建详细版

Lens 介绍 - The Kubernetes IDE

我的24小时牛马：云服务器！

一小时玩转Kubernetes的网络附件Flannel

腾讯资深运维工程师打造10天深度掌握docker+k8s

【B站强推Linux三剑客课程】80%人都要懂的网络知识！从入门到精通，【grep、sed、awk】三天学会进大厂，运维工程师必看！学不会我推出IT界

50.运维GO开发--client-go操作k8s资源1