K8s Security Playground on kind

Features

About Pod

Pod Security

Pod Security is verified by Conftest in CI, and by Gatekeeper in the cluster.
See this repository for policy details.

Private Registry

Application images are managed by DockerHub's private repository.

About Secret

Certificate Management

Certificates are managed by cert-manager.

Secret Management

Secrets are managed by AWS Secret Manager, and injected by External Secrets Operator.

About Network

Network Policy

Global network policy is managed by Calico.

TLS

TLS termination is managed by Ingress NGINX.
mTLS is managed by Linkerd.

Traffic Control

Traffic control is managed by Linkerd.

About Auth

Authn and Authz

Authentication is enabled with X509 Client Certs.
RBAC authorization is also enabled.