Kube Cluster and Container security

[Kempy]

How are folk auditing and securing kubernetes clusters and containers in general??

I have struggled to get kube-bench to run in fully containerized control planes such as rancher and openshift.

[Kempy]

Wow that's a lot of people not using docker and kubernetes or using them out of the box with defaults.

[leersums]

As with the growth of the use of docker/containers this sounds to me as an interesting topic. 

Can we come up with an suggested audit procedure?

[Kempy]

I don't have an answer at this point, I start with CIS baselines as rule of thumb to cover hardening aspects.

[Caute_cautim]

Hunting around: 

https://kubernetes.io/docs/tasks/debug-application-cluster/audit/

https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/

https://kubernetes.io/docs/concepts/policy/pod-security-policy/

I agree, understand the technology, the Pod Security; Container security and then Kubernetes.

This looks like fun.

Regards

Caute_cautim