Projects:Kubernetes: verschil tussen versies

Projects:Kubernetes (bekijk bron)

69 bytes toegevoegd , 16 mrt 2019

205

bewerkingen

@@ Regel 482: / Regel 482: @@
 = To do =
-* Play with deployments.
-* Play with deployments with redundancy.
-* Play with volumes, including persistent volumes.
-* Play with services.
-* TCP ports ingressing.
-* Play with kubectl port-forward.
 * Kubectl set image for rolling release?
 * Kubernetes Dashboard
@@ Regel 494: / Regel 488: @@
 * Play with Statefulset / Daemonset
 * Security Contexts
+ * Refuse pods with host networking
+ * Refuse pods with hostpath mounts
+ * Allow K8s API communication from a pod, but only to receive information about itself
+ * Basically: Make it impossible to root a node even with "broad" privileges on the Kubernetes API server
 * Limiting pods in memory, CPU, I/O
 * Limiting pods in network communication