TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Kubernetes Security Architecture Cheatsheet

18 pointsby xeor4 months ago

3 comments

arccy4 months ago
While it all falls under &quot;security&quot;, it feels too confused in what it&#x27;s trying to show.<p>I think it focuses too much on the happy path of security, typically you&#x27;ll want to focus on specific areas. For example, access to the kubernetes API and what you can do, effective bypasses of RBAC by impersonation because a user has access to something else like argocd or a job system. Or another example, network paths and how they&#x27;re all connected together.<p>Some boxes are weirdly disconnected, e.g. things point to the ingress but nothing flows out (hiding the potential that an ingress can be confused to route to your internal services), runtimes sit to the side when they should sit above the kernel, namespace is just a box to the side, etc.
xeor4 months ago
Took some time to make, looking for comment&#x27;s and suggestions
评论 #42658950 未加载
评论 #42658793 未加载
darkwater4 months ago
Nice job, I&#x27;ll have a deeper look at it when I&#x27;ll be back at the large screen.<p>SVG link for the impatient: <a href="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;lars-solberg&#x2F;kubesec-diagram&#x2F;4ed560803b7eb9f0263f8ecb1895c4e946352ac9&#x2F;kubesec-diagram.svg" rel="nofollow">https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;lars-solberg&#x2F;kubesec-diagr...</a>