Hacking Kubernetes

Appendix B. Resources

General

References

• The official Kubernetes documentation

• The Kubernetes community on GitHub

Books

• Container Security by Liz Rice (O’Reilly)

• Kubernetes: Up and Running by Kelsey Hightower, Brendan Burns, and Joe Beda (O’Reilly)

• Cloud Native DevOps with Kubernetes by John Arundel and Justin Domingus (O’Reilly)

• Managing Kubernetes by Brendan Burns and Craig Tracey (O’Reilly)

• Kubernetes Cookbook by Sébastien Goasguen and Michael Hausenblas (O’Reilly)

• Cybersecurity Ops with bash by Paul Troncone and Carl Albing (O’Reilly)

Further Reading by Chapter

Intro

For Chapter 1 we suggest the following resources:

• Threat Modeling Manifesto

• Open Source Intelligence Methods and Tools: A Practical Guide to Online Intelligence by Nihad Hassan and Rami Hijazi (Apress)

• The Tao of Open Source Intelligence by Stewart Bertram (IT Governance Publishing)

• “SANS SEC487: Open-Source Intelligence (OSINT) Gathering and Analysis”

Pods

For Chapter 2 we suggest the following resources:

• Awesome Kubernetes Security

• “My Arsenal of Cloud Native (Security) Tools”

• “5 Must-Have Kubernetes Security Tools”

• Kubernetes YAML Generator

• Google Cloud’s “Why Container Security Matters to Your Business”

• A comprehensive Kubernetes FAQ

• “Attacking Kubernetes Clusters Through Your Network Plumbing”

• Kubernetes Volumes Guide

Further, tooling relevant in this context:

• Cloud Container Attack Tool (CCAT)

• Peirates (Kubernetes penetration testing tool)