Rory McCune comments

Results 58 comments of


                                            Rory McCune

Crafted CN fields in CSRs can create confusing results in kubectl output

/reopen

Fix inputrc

Think this should be working now...

Feature Reqest: Don't bind the admin.conf user to system:masters

With the lifetime on the certificate being a year, it seems likely that in many cases users who had valid access to the credential when the cluster was created, may...

Feature Reqest: Don't bind the admin.conf user to system:masters

done :)

kube-public information disclosure hunter

It'll depend on the exact Kubernetes distribution in use. for a modern version of kubeadm, these paths are likely to be visible ``` - /healthz - /livez - /readyz -...

OpenTelemetry Tracing Configuration not being applied.

So I think/hope I can clear up the confusion :) I'm using a containerd instance which was installed as part of a docker install. This installation uses a systemd service...

[EKS] [request]: Disable anonymous-auth to kube-apiserver

So a bit more context might be useful here (I'll update that post as it's proving of interest :) ) From a security perspective there are two risks that I...

[EKS] [request]: Disable anonymous-auth to kube-apiserver

So from a CIS benchmark perspective automation/scoring is slightly academic in relation to EKS as there's an EKS specific benchmark which doesn't mention this setting, as it's not available for...

[EKS] [request]: Disable anonymous-auth to kube-apiserver

@Rvarman0110 so you *could* delete cluster roles and bindings, but there are two potential problems that I can think of, and possibly others I've not thought of :D 1. There's...

All vulnerable clusters fail on TASK [Start a kind cluster]

hi all, sorry I missed this issue when it first opened, thanks @mrintern for the ping :) So at the moment `ansible-playbook insecure-port.yml` and `ansible-playbook etcd-noauth.yml` are working for me,...