DevOps Hunter Security Automation

Hello everyone! Welcome back to the Kubernetes Security Series . In this article, we'll explore the Kubernetes CertificateSigningRequest (CSR) API , an important security feature that helps Kubernetes administrators securely manage user authentication using certificates. If you're preparing for the CKA (Certified Kubernetes Administrator) exam, working in a DevOps/DevSecOps role, or managing Kubernetes clusters in production, understanding the CSR workflow is essential. What You'll Learn By the end of this blog tutorial, you will be able to: Understand the role of Certificate Authorities (CA) in Kubernetes Generate private and public key pairs Create a Certificate Signing Request (CSR) Submit a CSR to Kubernetes Review, approve, or deny certificate requests Retrieve and decode signed certificates Understand how Kubernetes Controller Manager handles certificate operation User Certificate Approval process What is the Kubernetes Certificate API? Kubernetes uses certificates t...

What is Docker registry? There are various situations where a team could work on the microservices. Every time you connect to the internet and pull the images will be cost & time-consuming process. In an organization level if we set up the docker registry, where we can pull the images and all team members will reuse it by using the internal network. Docker  public registry A central place to store all organizational required docker images were distributed. There are several implementations of docker registries where it is build up with the following: A simple webserver to make access to docker images available A complete web application with user access Docker builds are available in two services: DockerHub, Docker Trusted Registry DockerHub is a public repository where you publish your contribution to any image that you made with tag [versions] which can be downloaded by anyone from the internet. It should be searchable.  It all depends on the stars , the num...