4 ms·
Interesting! Do you document what security options you use with Telekube anywhere? One of the things I've noticed with the wide variety of k8s distros and ins
by raesene9 9y ago
Interesting!
Do you document what security options you use with Telekube anywhere?
One of the things I've noticed with the wide variety of k8s distros and installers that there are is that it's not always easy to establish what they've chosen to do in that regard, and as some of the options like RBAC are newer and have some operational overhead, not every distro uses them.
- old-gregg 9y agoYes, the security portion of our clusters is handled by Teleport, which is OSS and its architecture is well-documented here: http://gravitational.com/teleport/docs/2.0/architecture/ http://gravitational.com/teleport/docs/2.0/architecture/ Teleport maps your corporate groups/roles to both SSH and Kubernetes.
- raesene6 9y agothanks for that. I was perhaps more thinking of areas around how you configure kubernetes. for example, do you use RBAC, do you configure kubelet authentication/authorization, what certificates are used by the API server for etcd authentication? that kind of thing :) If there's manifests/pod speccs for the components that'd probably have the answers...