agxp / cloudflix Goto Github PK

Greetings,

We are some security researchers who have built a scanner to detect configurations that can be used to conduct attacks for Kubernetes pods. For your repository, we have found a few misconfigurations in the following locations:

Misconfiguration name: INSECURE_HTTP
Location-1:

Misconfiguration name: INSECURE_HTTP
Location-2:

Misconfiguration name: INSECURE_HTTP
Location-3:

Misconfiguration name: INSECURE_HTTP
Location-4:

Misconfiguration name: TRUE_HOST_PID
Location-5:

Misconfiguration name: HOSTPATH
Location-7:

Please give us feedback. Do you think these are valid instances of misconfigurations? Will you fix them?

Greetings,

We are some security researchers who have built a scanner to detect configurations that can be used to conduct attacks for Kubernetes pods. For your repository, we have found a few misconfigurations in the following locations:

Misconfiguration name: TRUE_HOST_PID
Location-1:

Misconfiguration name: TRUE_HOST_NET
Location-2:

Please give us feedback. Do you think these are valid instances of misconfigurations? Will you fix them?

Dear Colleague,

We are looking to find ways to help developers find security anti-patterns, i.e., violation of security best practices in Kubernetes manifests.

We have noticed an instance of not using rolling updates. Rolling updates helps to automatically apply continuous updates. Without continuous updates, a Kubernetes cluster will be susceptible to a denial of service attack, according to researchers: https://arxiv.org/pdf/2006.15275.pdf .

Location of anti-pattern: