Detecting and analyzing compromised containers
Most organizations operate container architectures through Kubernetes since it offers many more scalable options and flexibility. Before we dive deeper into container analysis, it is essential to understand the components of Kubernetes, as they will play a pivotal role in your investigations.
About the Kubernetes orchestration platform
The following screenshot illustrates the basic architecture of a Kubernetes cluster; in summary, as we know, Kubernetes is an orchestration framework that manages one or more nodes that run one or more containers:
Figure 11.1 – Simple Kubernetes architecture
For the Kubernetes cluster, you need a master node that controls and orchestrates the cluster’s operations and worker nodes that run the pods and tasks assigned by the master node. Here are some critical components of a Kubernetes cluster:
- API server: This is the frontend of the cluster; developers...