kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #37492 from chrisnegus/20221024-mcngs-fix-concept-weight 

Add page weights to concepts -> security pages
This commit is contained in:
Kubernetes Prow Robot 2022-10-24 12:22:23 -07:00 committed by GitHub
parent 4b05eab8b9 0f9b65b429
commit 453dd71949
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
content/en/docs/concepts/security/api-server-bypass-risks.md
View File

@ -3,6 +3,7 @@ title: Kubernetes API Server Bypass Risks
description: > description: >
Security architecture information relating to the API server and other components Security architecture information relating to the API server and other components
content_type: concept content_type: concept
weight: 90
--- ---
<!-- overview --> <!-- overview -->
@ -143,4 +144,4 @@ control plane components.
that include the container runtime socket, either directly or by mounting a parent that include the container runtime socket, either directly or by mounting a parent
directory. Also `hostPath` mounts must be set as read-only to mitigate risks directory. Also `hostPath` mounts must be set as read-only to mitigate risks
of attackers bypassing directory restrictions. of attackers bypassing directory restrictions.
- Restrict user access to nodes, and especially restrict superuser access to nodes. - Restrict user access to nodes, and especially restrict superuser access to nodes.

2
content/en/docs/concepts/security/security-checklist.md
View File

@ -3,6 +3,7 @@ title: Security Checklist
description: > description: >
Baseline checklist for ensuring security in Kubernetes clusters. Baseline checklist for ensuring security in Kubernetes clusters.
content_type: concept content_type: concept
weight: 100
--- ---
<!-- overview --> <!-- overview -->
@ -12,6 +13,7 @@ comprehensive documentation on each topic. It does not claim to be exhaustive
and is meant to evolve. and is meant to evolve.
On how to read and use this document: On how to read and use this document:
- The order of topics does not reflect an order of priority. - The order of topics does not reflect an order of priority.
- Some checklist items are detailed in the paragraph below the list of each section. - Some checklist items are detailed in the paragraph below the list of each section.