Kubernetes Cluster Component Security

Kubernetes Components

Reference: https://kubernetes.io/images/docs/components-of-kubernetes.svg

Control Plane Components

• kube-apiserver -it is the front end for the Kubernetes control plane.

• etcd - a consistent and highly-available key value store used as Kubernetes' backing store for all cluster data.

• kube-scheduler - component that watches for newly created Pods with no assigned node, and selects a node for them to run on.

• kube-controller-manager - component that runs controller processes (e.g. Node controller, Job controller, etc.)

• cloud-controller-manager - component that embeds cloud-specific control logic. It only runs controllers that are specific to your cloud provider.

Node Components

• kubelet - an agent that runs on each node in the cluster. It makes sure that containers are running in a Pod.

• kube-proxy - is a network proxy that runs on each node in your cluster, implementing part of the Kubernetes Service concept.

• Container runtime - is responsible for managing the execution and lifecycle of containers within the Kubernetes environment.

References:

• https://kubernetes.io/docs/concepts/overview/components/

---

API Server

References:

• https://kubernetes.io/docs/concepts/security/controlling-access/

• https://kubernetes.io/docs/concepts/overview/kubernetes-api/

• https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/

Controller Manager

References:

• https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/

Scheduler

References:

• https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/

Kubelet

References:

• https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/

Container Runtime

References:

• https://kubernetes.io/docs/setup/production-environment/container-runtimes/

KubeProxy

References:

• https://kubernetes.io/docs/reference/command-line-tools-reference/kube-proxy/

Pod

References:

• https://kubernetes.io/docs/concepts/workloads/pods/

Etcd

References:

• https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/

Container Networking

References:

• https://kubernetes.io/docs/concepts/cluster-administration/networking/

Client Security

References:

• https://kubernetes.io/docs/concepts/security/security-checklist/

Storage

References:

• https://kubernetes.io/docs/concepts/storage/