GKE Cluster Audit

user_16982050 0
Viewed 36
  1. What are the points to be reviewed while auditing a GKE cluster? We have a production cluster and I would like to what all points need to be reviewed while auditing my GKE cluster. What needs to be configured/removed for better security and HA.
google-kubernetes-engine kubernetes audit security
1 Answers

This is a very broad topic.

Short answer(Main points):

  • Apply Least privilege principle for IAM entities and RBAC entities
  • Enable binary authorizarion
  • Limit privileges on Containers
  • Enable image scanner
  • Use the Secret Manager
  • Create private clusters when possible
  • Spread your work nodes between AZs

But I strongly recommend you verify Google official docs:

https://cloud.google.com/kubernetes-engine/docs/concepts/security-overview#node_upgrades

See ya

user_25252750
Related