Jimmy Mesta comments

Results 6 comments of


                                            Jimmy Mesta

As a user I need to be able to exploit an kubelet API with no authentication

This is complete for GCP/KOPS https://github.com/ksoclabs/kube-goat/commit/bed32699a39ed4aafb7222273e826071e3e48f8a

As a user I am able to log in to the cluster anonymously.

This is complete using KOPS on GCP with the following lines: https://github.com/ksoclabs/kube-goat/blob/0f77c6fc77154f2fcbdf22b3c0d29849636a822f/examples/kops/gcp/kops_gcp_config.yaml#L10 https://github.com/ksoclabs/kube-goat/blob/0f77c6fc77154f2fcbdf22b3c0d29849636a822f/examples/kops/gcp/kops_gcp_config.yaml#L27

As a user I need to be able to see what is mounted in a sensitive volume mount

This is complete for gcp / kops

As a user I need to be able to read data on a Redis instance running inside of the cluster

Redis is now configured and seeded with 1000 values (we can change the values to be more "fun" and PII-related later). https://github.com/ksoclabs/kube-goat/tree/master/examples/kops/gcp/manifests/redis

Cloud Native Top 10

I propose that we fold in a rendition of the Kubernetes Top Ten into this proposal as a broader "Cloud Native Top Ten Security Risks" project. I am willing to...

Add support for Git LFS.

+1 I am also running into issues on Docker Hub when building images from a repo that uses git lfs. I will have to setup a wget workaround for now.