Kubernetes Security Concepts

Internal

• Kubernetes Concepts

Transport Security

• https://kubernetes.io/docs/reference/access-authn-authz/#transport-security

Service Account

A service account provides an identity for processes that run in a Pod.

TODO:

• https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
• https://kubernetes.io/docs/reference/access-authn-authz/service-accounts-admin/

Role Based Access Control (RBAC)

In Kubernetes, granting a role to an application-specific service account is a best practice to ensure that the application is operated in a specified scope. TODO: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#service-account-permissions.