211 Open source projects that are alternatives of or similar to k8s-security-demos

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

Add digests to container and init container images in Kubernetes pod and pod template specs. Use either as a mutating admission webhook, or as a client-side KRM function with kpt or kustomize.

This repository guides you through deploying a private GKE cluster and provides a base platform for hands-on exploration of several GKE related topics which leverage or integrate with that infrastructure. After completing the exercises in all topic areas, you will have a deeper understanding of several core components of GKE and GCP as configure…

A walk through of RBAC on a Google GKE Kubernetes 1.6 cluster.

Just a simple port of renoki-co/php-k8s for easier access in Laravel

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC a…

All things Atlassian and Kubernetes

Migrate to Containers samples and best practices

GKE CIS 1.1.0 Benchmark InSpec Profile

Reproducible infrastructure to showcase GitOps workflows and evaluate different GitOps Operators on Kubernetes

Build a platform with the Kubernetes resource model!

OldSchool Library (OSLib) MODv2, a 2D graphics library for the PSP.

Full Isolation in Multi-Tenant SaaS with Kubernetes + Istio

This demo builds two GKE Clusters and guides you through using secrets in Vault, using Kubernetes authentication from within a pod to login to Vault, and fetching short-lived Google Service Account credentials on-demand from Vault within a pod.

Inventorise your environment through PowerShell

Placeholder for training material related to TA usage of Vault for securing Kubernetes apps.

Knativeのコンポーネントを理解しながらFaaSプラットフォームをDIYするワークショップです

Creates a kubernetes cluster with istio enabled on GKE

基于RBAC的自动化部署平台

Deploy an ingress with SSL termination out of the box!

an opinionated, production-ready, isomorphic express/knex/objection starter with centralized configuration

This project demonstrates how to use an Istio service mesh in a single Kubernetes Engine cluster alongside Prometheus, Jaeger, and Grafana, to monitor cluster and workload performance metrics. You will first deploy the Istio control plane, data plane, and additional visibility tools using the provided scripts, then explore the collected metrics …

Nominatim for Kubernetes on Google Container Engine (GKE).

Deploy HashiCorp Vault with Terraform in GKE.

Securely access AWS services from GKE cluster

Lightweight library in C# for implementing roles-based access control (RBAC). With Gatekeeper, you can define users, roles, resources, and permissions, and authorize requests.

基于egg.js编写的node平台,演示地址不要乱搞啊

DEPRECATED: How to use Google Managed SSL Certificates on GKE

Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

Spelunky remake for Sony PSP.

K8s deployment rollback system based on system observability principles of modern stacks

🆔🛂🉑 Identity and Access Management System

GKE ingress with GCP managed certificates

GKE Kubernetes cluster with node pool submodule

Instant Kubernetes-Native Application Observability

一个tp5的RBAC库，使用composer来安装和更新你的项目对于RBAC的需求。同时支持jwt方式的验证。包含了RBAC需要的数据表的数据迁移，能够很方便的开始开发。

This project describes the steps required to deploy a sample application to Kubernetes Engine that forwards log events to Stackdriver Logging. As a part of the exercise, you will create a Cloud Storage bucket and a BigQuery dataset for exporting log data.

This is the code repo for Networking and Kubernetes: A Layered Approach. https://learning.oreilly.com/library/view/networking-and-kubernetes/9781492081647/

Kubernetes Native, Runtime Container Image Scanning

基于shiro的分布式权限管理系统。超级管理员：admin 密码：123456q 试用账号：test_001 密码：123456q； QQ交流群:333597649 Rbac Shiro

Run Hashicorp Vault on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.

This project demonstrates how a third party solution, like Datadog, can be used to monitor a Kubernetes Engine cluster and its workloads. Using the provided manifest, you will install Datadog and a simple nginx workload into your cluster. The Datadog agents will be configured to monitor the nginx workload, and ship metrics to your own Datadog ac…

企业数据管理系统 【Django组件开发】【权限、路由组件】可拆卸系统组件，适用性强

A set of terraform modules for building GKE clusters.

Simple RBAC/ACL for Laravel 8 caching and permission groups.

Angular 12-based front-end UI for k8s Golang observability project: https://github.com/garystafford/k8s-istio-observe-backend/tree/2021-istio

Open Source Routing Machine (OSRM) osrm-backend for Kubernetes on Google Container Engine (GKE).

Tool to generate tmuxp configs that help to switch between multiple Kubernetes contexts safely.

The shield that every Next.js project needs.

Kubernetes Elastic agent plugin for GoCD

Notes from 100 days with Kubernetes

No description or website provided.

Demo to use Traefik as GKE loadbalancer

Croc Hunter demo, deployed with Jenkins X

User management scaffolding, integration: User password login, mobile login, one-click login, OAuth2 login(Based on JustAuth), jwt, validate code(image, sms, sliderCode), RBAC, Support multi-tenancy, SLF4J-MDC, sign etc...

In this project, you will leverage Kubernetes Engine and Google Compute Engine to explore how Istio can manage services that reside outside of the Kubernetes Engine environment. You will deploy a typical Istio service mesh in Kubernetes Engine, then configure an externally deployed microservice to join the mesh.

基于Yii2+layui的后台框架模板，实现了完善的RBAC权限控制

index and API RBAC for Elasticsearch and Kibana via reverse proxy. DEPRECATED

Role Based Access Control for eggjs

A multicloud demonstration presented at KubeCon 2019 EU featuring the Hipster Shop across AKS, GKE, and On-Premises