search

datasci-osu / dsosuk8s

DataScience@OregonState
2 stars 1 forks source link

enhance eksctl cluster security #40

Closed oneilsh closed 4 years ago

oneilsh commented 4 years ago

with https://github.com/weaveworks/eksctl/issues/1460#issuecomment-576366059

oneilsh commented 4 years ago

And this? https://kubernetes.io/docs/tasks/administer-cluster/securing-a-cluster/#preventing-containers-from-loading-unwanted-kernel-modules

oneilsh commented 4 years ago

And a network policy to restrict access to nfs servers from authorized pods (will require a label per access-group/hub) https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/

oneilsh commented 4 years ago

done :)