How to Secure Kubernetes Pods Post-PSPs Deprecation

Few tips I bookmarked regarding that subject, that help me, hope it will help some of you as well

  • Scan containers and Pods for vulnerabilities or misconfigurations.

  • Run containers and Pods with the least privileges possible.

  • Use network separation to control the amount of damage a compromise can cause.

  • Use firewalls to limit unneeded network connectivity and encryption to protect confidentiality.

  • Use strong authentication and authorization to limit user and administrator access as well as to limit the attack surface.

  • Use log auditing so that administrators can monitor activity and be alerted to potential malicious activity.

  • Periodically review all Kubernetes settings and use vulnerability scans to help ensure risks are appropriately accounted for and security patches are applied.

/r/programming Thread Link - armosec.io