[Slurm] Безопасность в Kubernetes

File Name

Size

Безопасность в Kubernetes.md

51 kB

ico/1c6d447e98cfbe5e.png

151 kB

ico/17cda3bbaf996ca1.png

177 kB

ico/1499da21f5a8b7b1.png

125 kB

ico/18096037b3350dde.png

79 kB

ico/22607952ca0abaa8.png

93 kB

ico/adc0750d9967521b.png

133 kB

ico/c53bc325b2b3e711.png

99 kB

ico/e1dce2f59d8407b4.png

78 kB

ico/e3cbe725c172879c.png

120 kB

ico/e80a44f4f97ae816.png

150 kB

ico/eccf5ff5699b4be8.png

138 kB

ico/f1a581f8572c7209.png

115 kB

seck8s/pipelines/pipelines.yml

801 B

seck8s/pipelines/README.md

1.2 kB

seck8s/pipelines/common/code-scan.yml

2.5 kB

seck8s/pipelines/common/init.yml

3.1 kB

seck8s/pipelines/common/variables.yml

364 B

seck8s/security_images/README.md

19 B

seck8s/security_images/bandit/Dockerfile

251 B

seck8s/security_images/gitleaks/Dockerfile

356 B

seck8s/security_images/semgrep/Dockerfile

250 B

seck8s/security_images/toolset/Dockerfile

88 B

seck8s/security_images/trufflehog3/Dockerfile

225 B

seck8s/slurm/lecture/Topic1_Introduction_to_project_security_on_Kubernetes.pdf

1.8 MB

seck8s/slurm/lecture/Topic2_Securing_control_plane.pdf

1.1 MB

seck8s/slurm/lecture/Topic3_Authentication_authorization.pdf

603 kB

seck8s/slurm/lecture/Topic4-5_Scanning_automation.pdf

3.2 MB

seck8s/slurm/lecture/Topic6-7_Using_Policy_Engine_and_Admission_Controllers.pdf

755 kB

seck8s/slurm/lecture/Topic8_Container_Security.pdf.pdf

1.9 MB

seck8s/slurm/lecture/Topic9_Secure Storage Secrets.pdf

1.2 MB

seck8s/slurm/lecture/Topic10_Network_Policy.pdf

1.3 MB

seck8s/slurm/lecture/Topic11_Threat Management in Kubernetes.pdf

1.8 MB

seck8s/slurm/practice/authentication_authorization/README.md

281 B

seck8s/slurm/practice/authentication_authorization/dex/cert_gen.sh

1.9 kB

seck8s/slurm/practice/authentication_authorization/dex/README.md

18 kB

seck8s/slurm/practice/authentication_authorization/dex/deploy/dex-configmap.yaml

1.2 kB

seck8s/slurm/practice/authentication_authorization/dex/deploy/dex-deployment.yaml

1.1 kB

seck8s/slurm/practice/authentication_authorization/dex/deploy/dex-ingress.yaml

481 B

seck8s/slurm/practice/authentication_authorization/dex/deploy/dex-rbac.yaml

637 B

seck8s/slurm/practice/authentication_authorization/dex/deploy/dex-service.yaml

219 B

seck8s/slurm/practice/authentication_authorization/dex/deploy/gangway-configmap.yaml

713 B

seck8s/slurm/practice/authentication_authorization/dex/deploy/gangway-deployment.yaml

1.6 kB

seck8s/slurm/practice/authentication_authorization/dex/deploy/gangway-ingress.yaml

501 B

seck8s/slurm/practice/authentication_authorization/dex/deploy/gangway-service.yaml

277 B

seck8s/slurm/practice/k8s_secrets/README.md

651 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul-persistent-volume.yml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul-values.yml

166 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/README.md

4.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault-values.yml

456 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/Chart.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/README.md

3.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/values.yaml

123 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/addons/gen.sh

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/addons/values/prometheus.yaml

390 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/assets/icon.png

7.8 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/_helpers.tpl

14 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-clusterrole.yaml

3.7 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-clusterrolebinding.yaml

661 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-deployment.yaml

10 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-podsecuritypolicy.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-service.yaml

779 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-controller-serviceaccount.yaml

687 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-gatewayclass.yaml

592 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-gatewayclassconfig.yaml

2.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/api-gateway-podsecuritypolicy.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/auth-method-clusterrole.yaml

449 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/auth-method-clusterrolebinding.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/auth-method-secret.yaml

523 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/auth-method-serviceaccount.yaml

506 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-config-configmap.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-daemonset.yaml

28 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-podsecuritypolicy.yaml

2.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-role.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-rolebinding.yaml

713 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-securitycontextconstraints.yaml

1.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-serviceaccount.yaml

773 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-snapshot-agent-deployment.yaml

13 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-snapshot-agent-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-snapshot-agent-role.yaml

835 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-snapshot-agent-rolebinding.yaml

810 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/client-snapshot-agent-serviceaccount.yaml

882 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-clusterrole.yaml

850 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-clusterrolebinding.yaml

592 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-daemonset.yaml

3.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-networkattachmentdefinition.yaml

937 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-podsecuritypolicy.yaml

805 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-resourcequota.yaml

583 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-securitycontextconstraints.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/cni-serviceaccount.yaml

487 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-clusterrole.yaml

2.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-clusterrolebinding.yaml

781 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-deployment.yaml

23 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-leader-election-role.yaml

863 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-leader-election-rolebinding.yaml

834 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-mutatingwebhookconfiguration.yaml

2.7 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-injector-disruptionbudget.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-service.yaml

744 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/connect-inject-serviceaccount.yaml

824 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-clusterrole.yaml

1.7 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-clusterrolebinding.yaml

613 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-deployment.yaml

12 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-leader-election-role.yaml

708 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-leader-election-rolebinding.yaml

631 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-mutatingwebhookconfiguration.yaml

5.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-podsecuritypolicy.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-serviceaccount.yaml

671 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/controller-webhook-service.yaml

617 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-exportedservices.yaml

5.7 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-ingressgateways.yaml

19 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-meshes.yaml

9.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-peeringacceptors.yaml

6.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-peeringdialers.yaml

6.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-proxydefaults.yaml

8.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-servicedefaults.yaml

23 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-serviceintentions.yaml

12 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-serviceresolvers.yaml

14 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-servicerouters.yaml

16 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-servicesplitters.yaml

8.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/crd-terminatinggateways.yaml

5.8 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/create-federation-secret-job.yaml

7.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/create-federation-secret-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/create-federation-secret-role.yaml

1.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/create-federation-secret-rolebinding.yaml

808 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/create-federation-secret-serviceaccount.yaml

677 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/dns-service.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/enterprise-license-job.yaml

5.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/enterprise-license-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/enterprise-license-role.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/enterprise-license-rolebinding.yaml

925 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/enterprise-license-serviceaccount.yaml

802 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/expose-servers-service.yaml

2.7 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/gossip-encryption-autogenerate-job.yaml

2.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/gossip-encryption-autogenerate-podsecuritypolicy.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/gossip-encryption-autogenerate-role.yaml

878 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/gossip-encryption-autogenerate-rolebinding.yaml

811 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/gossip-encryption-autogenerate-serviceaccount.yaml

668 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-deployment.yaml

22 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-role.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-rolebinding.yaml

807 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-service.yaml

1.8 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ingress-gateways-serviceaccount.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-clusterrole.yaml

998 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-clusterrolebinding.yaml

628 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-deployment.yaml

19 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-podsecuritypolicy.yaml

1.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-service.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/mesh-gateway-serviceaccount.yaml

670 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/NOTES.txt

789 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-init-job.yaml

7.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-init-podsecuritypolicy.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-init-role.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-init-rolebinding.yaml

951 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-init-serviceaccount.yaml

836 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-name-configmap.yaml

832 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/partition-service.yaml

1.9 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/prometheus.yaml

14 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-cleanup-job.yaml

3.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-cleanup-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-cleanup-role.yaml

1000 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-cleanup-rolebinding.yaml

917 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-cleanup-serviceaccount.yaml

784 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-job.yaml

18 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-role.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-rolebinding.yaml

885 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-acl-init-serviceaccount.yaml

768 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-config-configmap.yaml

7.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-disruptionbudget.yaml

973 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-podsecuritypolicy.yaml

1.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-role.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-rolebinding.yaml

713 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-securitycontextconstraints.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-service.yaml

2.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-serviceaccount.yaml

773 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/server-statefulset.yaml

23 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/sync-catalog-clusterrole.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/sync-catalog-clusterrolebinding.yaml

804 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/sync-catalog-deployment.yaml

13 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/sync-catalog-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/sync-catalog-serviceaccount.yaml

846 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/terminating-gateways-deployment.yaml

19 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/terminating-gateways-podsecuritypolicy.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/terminating-gateways-role.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/terminating-gateways-rolebinding.yaml

871 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/terminating-gateways-serviceaccount.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-cleanup-job.yaml

3.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-cleanup-podsecuritypolicy.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-cleanup-role.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-cleanup-rolebinding.yaml

1010 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-cleanup-serviceaccount.yaml

895 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-job.yaml

4.8 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-podsecuritypolicy.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-role.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-rolebinding.yaml

997 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tls-init-serviceaccount.yaml

898 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ui-ingress.yaml

3.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/ui-service.yaml

2.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-clusterrole.yaml

1.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-clusterrolebinding.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-configmap.yaml

2.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-deployment.yaml

3.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-podsecuritypolicy.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/webhook-cert-manager-serviceaccount.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/consul/templates/tests/test-runner.yaml

2.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/CHANGELOG.md

22 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/Chart.yaml

555 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/CONTRIBUTING.md

9.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/LICENSE.md

16 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/Makefile

3.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/README.md

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/values.openshift.yaml

416 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/values.schema.json

34 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/values.yaml

41 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/_helpers.tpl

30 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/csi-clusterrole.yaml

483 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/csi-clusterrolebinding.yaml

671 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/csi-daemonset.yaml

4.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/csi-serviceaccount.yaml

595 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-certs-secret.yaml

507 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-clusterrole.yaml

572 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-clusterrolebinding.yaml

677 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-deployment.yaml

6.9 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-disruptionbudget.yaml

804 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-mutating-webhook.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-network-policy.yaml

705 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-psp.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-psp-role.yaml

650 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-psp-rolebinding.yaml

710 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-role.yaml

839 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-rolebinding.yaml

860 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-service.yaml

709 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/injector-serviceaccount.yaml

470 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/NOTES.txt

353 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/prometheus-prometheusrules.yaml

963 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/prometheus-servicemonitor.yaml

1.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-clusterrolebinding.yaml

806 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-config-configmap.yaml

1.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-discovery-role.yaml

622 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-discovery-rolebinding.yaml

918 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-disruptionbudget.yaml

993 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-ha-active-service.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-ha-standby-service.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-headless-service.yaml

1.1 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-ingress.yaml

2.5 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-network-policy.yaml

742 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-psp.yaml

1.3 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-psp-role.yaml

625 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-psp-rolebinding.yaml

671 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-route.yaml

1.0 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-service.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-serviceaccount.yaml

519 B

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/server-statefulset.yaml

8.4 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/ui-service.yaml

1.2 kB

seck8s/slurm/practice/k8s_secrets/1_vault_install/vault/templates/tests/server-test.yaml

1.6 kB

seck8s/slurm/practice/k8s_secrets/2_vault_init_unseal/README.md

1.5 kB

seck8s/slurm/practice/k8s_secrets/3_vault_userpass_auth/README.md

4.9 kB

seck8s/slurm/practice/k8s_secrets/3_vault_userpass_auth/userpass_full_access.hcl

169 B

seck8s/slurm/practice/k8s_secrets/3_vault_userpass_auth/userpass_read_list_policy.hcl

101 B

seck8s/slurm/practice/k8s_secrets/4_vault_secrets_operator/operator-values.yml

259 B

seck8s/slurm/practice/k8s_secrets/4_vault_secrets_operator/README.md

5.5 kB

seck8s/slurm/practice/k8s_secrets/4_vault_secrets_operator/secret.yml

125 B

seck8s/slurm/practice/k8s_secrets/4_vault_secrets_operator/vault_secrets_operator_policy.hcl

48 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/gpg-key

200 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/README.md

2.9 kB

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/secrets.yaml

41 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/example-chart/Chart.yaml

77 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/example-chart/secrets.yaml.bak

41 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/example-chart/values.yaml

29 B

seck8s/slurm/practice/k8s_secrets/5_helm_secrets/example-chart/templates/secret.yaml

196 B

seck8s/slurm/practice/network_policy/1.deny_all.yml

143 B

seck8s/slurm/practice/network_policy/2.allow_pod.yml

242 B

seck8s/slurm/practice/network_policy/3.allow_port.yml

212 B

seck8s/slurm/practice/network_policy/4.allow_port_pod.yml

290 B

seck8s/slurm/practice/network_policy/5.allow_port_ns_pod.yml

370 B

seck8s/slurm/practice/network_policy/6.bad.egress_deny.yml

326 B

seck8s/slurm/practice/network_policy/6.egress_deny_53.yml

410 B

seck8s/slurm/practice/network_policy/7.ok.egress_deny.yml

354 B

seck8s/slurm/practice/network_policy/8.allow_ingress-nginx.yml

329 B

seck8s/slurm/practice/network_policy/9.allow_host_network.yml

270 B

seck8s/slurm/practice/network_policy/prepare.sh

621 B

seck8s/slurm/practice/network_policy/README.md

4.3 kB

seck8s/slurm/practice/open_policy_agent/README.md

3.9 kB

seck8s/slurm/practice/open_policy_agent/1.check_privileges/bad_pod.yaml

522 B

seck8s/slurm/practice/open_policy_agent/1.check_privileges/constraint.yaml

378 B

seck8s/slurm/practice/open_policy_agent/1.check_privileges/good_pod.yaml

159 B

seck8s/slurm/practice/open_policy_agent/1.check_privileges/template.yaml

1.9 kB

seck8s/slurm/practice/open_policy_agent/2.check_repo/constraint.yaml

274 B

seck8s/slurm/practice/open_policy_agent/2.check_repo/pod.yaml

471 B

seck8s/slurm/practice/open_policy_agent/2.check_repo/template.yaml

1.2 kB

seck8s/slurm/practice/open_policy_agent/3.opa_in_cicd/input.json

708 B

seck8s/slurm/practice/open_policy_agent/3.opa_in_cicd/rule.rego

1.5 kB

seck8s/slurm/practice/securing_control_plane/kube-bench-job.yaml

2.9 kB

seck8s/slurm/practice/securing_control_plane/README.md

2.3 kB

seck8s/slurm/practice/security_analysis/README.md

6.2 kB

seck8s/slurm/practice/security_analysis/answer/1.md

353 B

seck8s/slurm/practice/security_analysis/answer/2.md

552 B

seck8s/slurm/practice/security_analysis/answer/3.md

116 B

seck8s/slurm/practice/security_analysis/answer/6.md

164 B

seck8s/slurm/practice/security_analysis/answer/8.md

129 B

seck8s/slurm/practice/security_analysis/answer/9.md

36 B

seck8s/slurm/practice/security_analysis/img/1.1.png

81 kB

seck8s/slurm/practice/security_analysis/img/1.2.png

80 kB

seck8s/slurm/practice/security_analysis/img/2.1.png

91 kB

seck8s/slurm/practice/security_analysis/img/2.2.png

121 kB

seck8s/slurm/practice/security_analysis/img/2.3.gif

1.1 MB

seck8s/slurm/practice/security_analysis/img/3.1.gif

3.9 MB

seck8s/slurm/practice/security_analysis/img/3.2.png

82 kB

seck8s/slurm/practice/security_analysis/img/4.1.png

104 kB

seck8s/slurm/practice/security_analysis/img/4.2.gif

694 kB

seck8s/slurm/practice/security_analysis/img/5.1.png

108 kB

seck8s/slurm/practice/security_analysis/img/6.1.png

100 kB

seck8s/slurm/practice/security_analysis/img/7.1.png

297 kB

seck8s/slurm/practice/security_analysis/img/8.1.png

93 kB

seck8s/slurm/practice/security_analysis/img/8.2.png

106 kB

seck8s/slurm/practice/security_analysis/img/9.1.png

110 kB

seck8s/slurm/practice/security_analysis/img/9.2.png

62 kB

seck8s/slurm/practice/security_analysis/img/9.3.gif

2.9 MB

Тема 1. Введение в безопасность проекта на Kubernetes/1.1 Введение в безопасность проекта на Kubernetes.mp4

196 MB

Тема 1. Введение в безопасность проекта на Kubernetes/1.2 Безопасность Kubernetes.mp4

277 MB

Тема 1. Введение в безопасность проекта на Kubernetes/1.3 Модели нарушителей и угроз.mp4

192 MB

Тема 1. Введение в безопасность проекта на Kubernetes/1.4 Анализ рисков в Kubernetes.mp4

336 MB

Тема 1. Введение в безопасность проекта на Kubernetes/1.5 Эшелонированная оборона.mp4

37 MB

Тема 2. Защита Control Plane кластера/2.1 Защита Control Plane кластера.mp4

216 MB

Тема 2. Защита Control Plane кластера/2.2 Общие рекомендации.mp4

202 MB

Тема 2. Защита Control Plane кластера/2.3 Адмишен плагины.mp4

242 MB

Тема 2. Защита Control Plane кластера/2.4 Шифрование данных в ETCD.mp4

168 MB

Тема 2. Защита Control Plane кластера/2.5 Автоматизация проверки.mp4

300 MB

Тема 2. Защита Control Plane кластера/2.6 Ответы на вопросы.mp4

70 MB

Тема 2. Защита Control Plane кластера/kube-bench-main.zip

1.2 MB

Тема 3. Авторизация, аутентификация и аккаунтинг в Kubernetes/3.1 Авторизация, аутентификация и аккаунтинг в Kubernetes.mp4

281 MB

Тема 3. Авторизация, аутентификация и аккаунтинг в Kubernetes/3.2 Практика.mp4

828 MB

Тема 3. Авторизация, аутентификация и аккаунтинг в Kubernetes/3.3 Аккаунтинг.mp4

517 MB

Тема 4. Scaning Automation/4.1 Введение.mp4

60 MB

Тема 4. Scaning Automation/4.2 Задание 1.mp4

46 MB

Тема 4. Scaning Automation/4.3 Задание 2.mp4

171 MB

Тема 4. Scaning Automation/4.4 Задание 3-4.mp4

215 MB

Тема 4. Scaning Automation/4.5 Промежуточный обзор.mp4

40 MB

Тема 4. Scaning Automation/4.6 Задание 5-6.mp4

75 MB

Тема 4. Scaning Automation/4.7 Задание 7-8.mp4

141 MB

Тема 4. Scaning Automation/4.8 Задание 9-11.mp4

198 MB

Тема 4. Scaning Automation/4.9 Комментарии к заданию.mp4

154 MB

Тема 4. Scaning Automation/4.10 Ответы на вопросы.mp4

219 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.1 Использование Policy Engine и Admission Controller’ов.mp4

186 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.2 Pod security Polices.mp4

262 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.3 Устанавливаем Gatekeeper.mp4

176 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.4 Разбираем Gatekeeper.mp4

182 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.5 Практика. Установка Gatekeeper в кластер.mp4

530 MB

Тема 5. Использование Policy Engine и Admission Controller’ов/5.6 Создаем первые политики.mp4

277 MB

Тема 6. Безопасность контейнера/6.1 Контейнер в Kubernetes.mp4

283 MB

Тема 6. Безопасность контейнера/6.2 Нарушение изоляции контейнера.mp4

289 MB

Тема 6. Безопасность контейнера/6.3 Усиление безопасности контейнера.mp4

416 MB

Тема 6. Безопасность контейнера/6.4 Ответы на вопросы.mp4

397 MB

Тема 7. Безопасное хранение Secrets/7.1 Что такое Secrets.mp4

151 MB

Тема 7. Безопасное хранение Secrets/7.2 Hashicorp Vault features and arch.mp4

264 MB

Тема 7. Безопасное хранение Secrets/7.3 Vault seal - unseal.mp4

156 MB

Тема 7. Безопасное хранение Secrets/7.4 Vault basics.mp4

226 MB

Тема 7. Безопасное хранение Secrets/7.5 Vault secrets operator.mp4

252 MB

Тема 7. Безопасное хранение Secrets/7.6 Helm secrets.mp4

200 MB

Тема 7. Безопасное хранение Secrets/7.7 Wrup up.mp4

30 MB

Тема 8. Kubernetes Networking/8.1 Kubernetes Networking.mp4

138 MB

Тема 8. Kubernetes Networking/8.2 Network policy.mp4

925 MB

Тема 8. Kubernetes Networking/8.3 Итоги.mp4

59 MB

Тема 9. Управление угрозами в Kubernetes/9.1 Шаг 1.mp4

423 MB

Тема 9. Управление угрозами в Kubernetes/9.2 5 стадий защиты.mp4

299 MB

Тема 9. Управление угрозами в Kubernetes/9.3 Правила безопасности.mp4

103 MB

Тема 9. Управление угрозами в Kubernetes/9.4 Ответы на вопросы.mp4

818 MB