CKS 核心知识点概述

介绍

笔者曾经在本专栏分享了大量 CKA & CKS 考点相关的内容，由于某些原因被 jubao 下架，但考虑到很多网友和群友想进一步了解 CKS 相关的核心知识，因此在这里把笔者之前的记录整理了一下，希望对大家有一定的帮助。
如果想了解跟多相关知识，可以加入 K8S & 云原生交流 Q群(284134230)和大家一起学习进步…

知识点

  1. ServiceAccount 相关
    ​​​docs/tasks/configure-pod-container/configure-service-account/​​
  2. kube-bench 排错
    ​​​github.com/aquasecurity/kube-bench​​​​Kubernetes Documentation/Reference/Component tools/kube-apiserver​​​​Kubernetes Documentation/Reference/Component tools/kubelet​​​​Kubernetes Documentation/Tasks/Administer a Cluster/Operating etcd clusters for Kubernetes​​
  3. 默认 NetworkPolicy
    ​​​Kubernetes Documentation/Concepts/Services, Load Balancing, and Networking/Network Policies​​
  4. Pod安全策略-PodSecurityPolicy
    ​​​Configure a Security Context for a Pod or Container​​​​Kubernetes Documentation/Concepts/Policies/Pod Security Policies​​
  5. Role & RoleBinding
    ​​​Kubernetes Documentation/Reference/API Access Control/Using RBAC Authorization​​
  6. 日志审计audit-log
    ​​​Kubernetes Documentation/Tasks/Monitoring, Logging, and Debugging/Auditing​​
  7. secret
    ​​​Kubernetes Documentation/Concepts/Configuration/Secrets​​
  8. 优化Dockerfile 和 deployment.yaml
    ​​​Best practices for writing Dockerfiles​​​​Kubernetes Documentation/Concepts/Security​​​​Kubernetes Documentation/Tasks/Configure Pods and Containers/Configure a Security Context for a Pod or Container​​​​Dockerfile Security Best Practice​​​​Docker Container Security 101: Risks and 33 Best Practices​​
  9. RuntimeClass & gVisor
    ​​​github.com/google/gvisor​​​​Kubernetes Documentation/Concepts/Containers/Runtime Class​​
  10. pod安全-stateless & immutable
    ​​​Kubernetes Documentation/Tasks/Configure Pods and Containers/Configure a Security Context for a Pod or Container​​​​Kubernetes Documentation/Concepts/Security/Pod Security Standards​​
  11. 修改API-Server参数
    ​​​Kubernetes Documentation/Reference/Component tools/kube-apiserver​​​​k8s安全04–kube-apiserver 安全配置​​
  12. ImagePolicyWebhook
    ​​​Kubernetes Documentation/Reference/API Access Control/Using Admission Controllers​​
  13. Trivy 检测镜像
    ​​​github.com/aquasecurity/trivy​​​​trivy/v0.21.2/getting-started/quickstart/​​
  14. AppArmor
    ​​​Kubernetes 文档/教程/集群/使用 AppArmor 限制容器对资源的访问​​
  15. sysdig & falco
    ​​​docs.sysdig.com​​​​Kubernetes blogs/Monitoring Kubernetes with Sysdig​​

说明

  1. 本文只提供核心知识点相关的官方文档指引，不提供任何zhenti 信息，若需要了解最新考点信息可以参考​​github.com/cncf/curriculum​​ 中的pdf 。
  2. 请大家不要在本文评论区探讨zhenti 信息，谢谢大家配合!