https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/Recent content in Safety onHugo -- gohugo.ioTue, 06 Oct 2020 08:48:23 +0000https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/kyverno/Mon, 16 Oct 2023 22:42:52 +0300https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/kyverno/The Kyverno-based application configuration analysis module is designed to analyze cluster resources for compliance with configured policies. The module supports several types of policies: Generate - The policy adds the necessary data/configurations to the created resource Mutate - The policy modifies the resource being created. Validate - The policy validates the resource being created. The list of recommended policies for installation in a cluster can be found on the [Security Policies](/2.https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/trivy/Tue, 06 Oct 2020 08:49:31 +0000https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/trivy/In this section you can configure the Trivy vulnerability scanner. Trivy is a container image and file system vulnerability scanning tool used to develop and operate applications on the Docker platform. It is used to detect vulnerabilities in dependencies and packages used in containers. In a cluster, Trivy provides an automated scanning and reporting process for timely detection of possible vulnerabilities: in container images. More details on the Image Analysis page.https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-manager/Tue, 06 Oct 2020 08:49:31 +0000https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-manager/The TLS certificate management module is the controller of TLS (Transport Layer Security) certificates for applications and components in the Kubernetes cluster. The module is based on Cert Manager. The module provides: creating and updating certificates; renewal of certificates before their expiration; revocation of certificates. The module is a critical service for the operation of the Shturval platform (cannot be disabled). Installed by default in the management cluster and client clusters.https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-expiration/Tue, 06 Oct 2020 08:49:31 +0000https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-expiration/The Kubernetes components use multiple certificates to authenticate and securely communicate with each other. Expiring Kubernetes certificates are a common source of failure. The Kubernetes API certificate verification module based on X.509 Certificate Exporter provides monitoring of certificate expiration dates (secrets) in the Kubernetes cluster and on cluster nodes. The module controls certificates: ETCD server and client; Kubernetes CA; kube-apiserver; kubelet; kubeconfig files, which are used by various components for authentication to the API server; PEM files.https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-trust/Tue, 06 Oct 2020 08:49:31 +0000https://docs.shturval.tech/2.13/en/cluster-admin/ssc/general/security/cert-trust/The root certificate delivery module is based on Trust Manager. It allows you to manage and distribute chains of trusted Certificate Authority (CA) certificates. Trusted certificates are required to verify the authenticity of certificates when establishing a TLS connection. Trust Manager extends the functionality of Cert Manager and is used in addition to the TLS Certificate Management Module module. The root certificate delivery module is a critical service for the operation of the Shturval platform (cannot be disabled).