Skip to main content

Kubernetes

Audience: Platform Engineers and DevOps teams.

Purpose: Container orchestration and deployment.

Overview​

Kubernetes is an open-source container orchestration platform for automating deployment, scaling, and management of containerized applications.

Resources​

ResourceDescription
Kubernetes DocumentationOfficial documentation
GitOps DeploymentGitOps approach guide
werfCI/CD tool for Kubernetes

Security Guidance​

NSA/CISA Kubernetes Hardening​

The NSA and CISA have released comprehensive Kubernetes hardening guidance:

ResourceLink
Feature ArticleNSA Kubernetes Hardening Guidance
Full Report (PDF)Kubernetes Hardening Guidance

Key Security Recommendations​

CategoryRecommendations
Pod SecurityUse Pod Security Standards, avoid privileged containers
NetworkImplement network policies, use encrypted communications
AuthenticationUse strong authentication, avoid default service accounts
Audit LoggingEnable audit logging, monitor for suspicious activity
UpgradesKeep clusters and dependencies updated