Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update hardening Kubernetes clusters URL in website to the latest version 1.2 #44031

Merged
merged 10 commits into from
Dec 27, 2023
Merged

Update hardening Kubernetes clusters URL in website to the latest version 1.2 #44031

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
c87152f
Update 2021-10-05-nsa-cisa-hardening.md
seifrajhi Nov 22, 2023
95cca8c
Add the changes as an aside to the article text
seifrajhi Nov 22, 2023
15cb272
Update formatting per suggestion
seifrajhi Nov 22, 2023
60fabbf
make changes in font
seifrajhi Nov 30, 2023
cc814b9
update formatting
seifrajhi Nov 30, 2023
892f05f
more changes in formatting
seifrajhi Nov 30, 2023
66fd42f
more changes in formatting
seifrajhi Nov 30, 2023
b5872e5
Update 2021-10-05-nsa-cisa-hardening.md
seifrajhi Nov 30, 2023
fd4bb22
Update 2021-10-05-nsa-cisa-hardening.md
seifrajhi Nov 30, 2023
b5a8275
Update 2021-10-05-nsa-cisa-hardening.md
seifrajhi Nov 30, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion content/en/blog/_posts/2021-10-05-nsa-cisa-hardening.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ and are in no way a direct recommendation from the Kubernetes community or autho

USA's National Security Agency (NSA) and the Cybersecurity and Infrastructure
Security Agency (CISA)
released, "[Kubernetes Hardening Guidance](https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/1/CTR_KUBERNETES%20HARDENING%20GUIDANCE.PDF)"
released Kubernetes Hardening Guidance
on August 3rd, 2021. The guidance details threats to Kubernetes environments
and provides secure configuration guidance to minimize risk.

Expand All @@ -29,6 +29,14 @@ _Note_: This blog post is not a substitute for reading the guide. Reading the pu
guidance is recommended before proceeding as the following content is
complementary.

{{% pageinfo color="primary" %}}
**Update, November 2023:**

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released the 1.0 version of the Kubernetes hardening guide in August 2021 and updated it based on industry feedback in March 2022 (version 1.1).

The most recent version of the Kubernetes hardening guidance was released in August 2022 with corrections and clarifications. Version 1.2 outlines a number of recommendations for [hardening Kubernetes clusters](https://media.defense.gov/2022/Aug/29/2003066362/-1/-1/0/CTR_KUBERNETES_HARDENING_GUIDANCE_1.2_20220829.PDF).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Even better, IMO:

Suggested change
The most recent version of the Kubernetes hardening guidance was released in August 2022 with corrections and clarifications. Version 1.2 outlines a number of recommendations for [hardening Kubernetes clusters](https://media.defense.gov/2022/Aug/29/2003066362/-1/-1/0/CTR_KUBERNETES_HARDENING_GUIDANCE_1.2_20220829.PDF).
A more recent version of the Kubernetes hardening guidance was released in August 2022 with corrections and clarifications. Version 1.2 outlines a number of recommendations for [hardening Kubernetes clusters](https://media.defense.gov/2022/Aug/29/2003066362/-1/-1/0/CTR_KUBERNETES_HARDENING_GUIDANCE_1.2_20220829.PDF).

{{% /pageinfo %}}

## Introduction and Threat Model

Note that the threats identified as important by the NSA/CISA, or the intended audience of this guidance, may be different from the threats that other enterprise users of Kubernetes consider important. This section
Expand Down