Skip to content

Instantly share code, notes, and snippets.

@dejanu

dejanu/sabin.md

Last active June 11, 2025 13:38
Show Gist options
  • Save dejanu/ebeedf99b2274363dd502a410f2a971a to your computer and use it in GitHub Desktop.
Save dejanu/ebeedf99b2274363dd502a410f2a971a to your computer and use it in GitHub Desktop.
Download ZIP
maybe some guidelines
Raw
sabin.md

Kubernetes security tool

Purpose

Establish what are the Attack Surfaces in K8S and which ones would you like to address.

Can be created as:

  • Kubernetes Operator (basically an app deployed in the cluster)
  • kubectl plugin (extend kubectl CLI with new features): every API call to k8s goes through a 3-step process (authentication,authorization,admission controllers)

Ecosystem and Tools

  • Istio service mesh: Istio manages traffic flows between microservices, enforces access policies, mTLS and aggregates telemetry data, all without requiring changes to application code
  • K8S network policies: Vanilla kubernetes object that describes what network traffic is allowed for a set of Pods
  • Falco Runtime Security: it uses syscalls to monitor the state of pods and nodes in the cluster
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment