Ensuring cluster security and compliance
There are lots of moving parts and configurations that affect Kubernetes cluster security. And after deploying the security add-ons and adding more configurations, we need to make sure of the following:
- The cluster security configuration is valid and intact
- The cluster is compliant with the standard security guidelines according to the Center of Internet Security (CIS) benchmark
- The cluster passes the conformance tests defined by the CNCF and its partners and community
In this section, you will learn how to validate and guarantee each of the previous points through using the relevant tools.
Executing Kubernetes conformance tests
The Kubernetes community and CNCF have defined a set of tests that you can run against any Kubernetes cluster to ensure that this cluster passes tests in terms of specific storage features, performance tests, scaling tests, provider tests, and other types of validation that are defined by...
