Questions tagged [security]
For questions related to IT Security, Information Security or DevSecOps.
15
questions with no upvoted or accepted answers
2
votes
0
answers
97
views
What security loopholes does Istio tackle?
My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
- 203
2
votes
1
answer
82
views
How to avoid an avalanche of images in Openshift when security patches keep coming in?
Our applications are based on tomcat, strictly speaking on tomcat base s2i image provided by RedHat. This is updated quite frequently, and we need to comply to some regulations and apply the updates. ...
- 141
1
vote
0
answers
36
views
Opentelemetry-operator running as root on Openshift/Kubernetes
I need this opentelemetry-operator to run as non-root on the /,
https://github.com/open-telemetry/opentelemetry-operator/blob/main/autoinstrumentation/java/Dockerfile
I need to change the permission ...
- 11
1
vote
0
answers
35
views
Private certificate authority and container images
We have a internal domain name, let's say "mycompany.net" with a private CA which delivers all our internal application HTTPS certificates for this domain like "myapp.mycompany.net"...
- 111
1
vote
0
answers
29
views
HSM into cloud for windows authenticode signing - Cost benefits vs Security risks?
Our product has 4 apps (Windows, macOS, iOS & Android) with a partially combined build pipeline. 90% is run in the cloud (Android, iOS & macOS are built entirely on cloud infrastructure) but ...
- 111
0
votes
0
answers
7
views
What is the best practice to deploy single instance with http access on GCP
What is the best practice to deploy a single instance with HTTP access on GCP?
I want to deploy an app on a single GCP instance that doesn't need to be scalable, and only needs to have HTTP access, so ...
0
votes
0
answers
16
views
Secure boot on vmware workstation
We want to run a non-standard OS (not linux or windows) that boots via secure boot on VMware workstation.
We can successfully do this on virtualbox, but want to work out how to do the same in VMWare
...
- 101
0
votes
0
answers
19
views
how to secure Kong Admin Api?
I'm setting up the Kong gateway manager locally using Docker.
the requests will be sent to localhost:8000, and admin will be available in localhost:8002.
How can I secure these ports locally when ...
- 1
0
votes
0
answers
18
views
How can I add an exception to the RKE2 default security policy to allow a single pod in a namespace to run as a root user
Good afternoon.
So I have an RKE2 cluster with the security policy in place that does not allow root pods to run. I have a pod that has to run as root and have been trying to figure out how to allow ...
- 101
0
votes
0
answers
37
views
Encrypting Kubernetes cluster's admin.conf ($KUBECONFIG) at rest
I have been concerned about leaving /etc/kubernetes/admin.conf (i.e. $KUBECONFIG) unencrypted on disk, for it essentially contains a Kubernetes cluster's root credentials, and an intruder could ...
- 141
0
votes
0
answers
220
views
Why is detect-secrets-hook ignoring my audit selections?
detect-secrets-hook in my pre-commit is alerting on secrets that are already marked as safe to be committed in the baseline.
I'm running detect-secrets version 1.4.0 on Python 3.11.0 on Windows 11.
To ...
0
votes
0
answers
20
views
How do you ensure users do not bypass Kubernetes security and interact with the Container runtimes directly?
You could have Docker and Kubernetes installed on the same host and allow the user to access both binaries. A malicious user can potentially bypass Kubernetes security (e.g. PodSecurityPolicies), by ...
0
votes
0
answers
27
views
How do you isolate Kubernetes components in a network?
When I install Kubernetes on a host, all the core components (etcd, Kube manager, scheduler) are all installed on a host by default.
Is there a use case or need to deploy Kubernetes components ...
0
votes
1
answer
194
views
How to keep packages updated and keep in pace with security updates
In a project with multiple vms that run various applications from Wordpress to Django and various other things.
Is there a way or a tool to keep track of the packages that require updates or have ...
0
votes
1
answer
596
views
How are containers secured with MACVLAN networks?
Containers cannot be connected both to an internal bridge and to the host network at the same time, according to this question. However, this is what I need; I want a set of containers to be connected ...
- 11