NodyHub / docker-k8s-resources

A collection of Docker and Kubernetes resources

Docker & Kubernetes Readings

The following resources are from time-to-time referred in lectures, workshops or talks that have been performed in the past. For the sake of ease the following categories contains the references.

Docker Analysis

• Docker Image Layer
• Am I contained

Additional Kubernetes readings

• RBAC
• Kubernetes RBAC 101: Authentication
• RAFT Algorithm
• Trouble Shooting Kubernetes
• Kubernetes Certificate Rotation
• Kubernetes Networking
• SecComp
• Recommended Steps to Secure a DigitalOcean Kubernetes Cluster | DigitalOcean
• Kubernetes Seccomp Operator

Cluster Analysis

• CIS Kubernetes Benchmark
• Popeye
• Kube Query
• Security Assessment techniques
• botb

Cluster Distribution // Runtime Environments

• k9s
• k3s
• runq

Background

• AppArmor
• GitOps
• Keyctl-unmask: "Going Florida" on The State Of Containerizing Linux Keyrings

Research // Talks

• DevSecOps
• CICD Securty
• OpenShift security
• Official kubernetes Pentest

Docker Images

A collection of Docker images for testing, hacking and building purposes

• amass – OWASP Amass in a container image on Docker Hub (nodyd/amass)
• ami – amicontained in a container image on Docker Hub (nodyd/ami)
• ana – Container environment analysis tool in an image, pre-build on Docke Hub (nodyd/ana)
• botb – Break out the Box (BOtB) in a container image, pre-build on Docke Hub (nodyd/botb)
• crtsh – Docker image that crawls the content from crt.sh, pre-build on Docker Hub (nodyd/crtsh)
• hello – Docker image that offers a simple webpage, pre-build on Docker Hub (nodyd/hello)
• httprobe – Docker image that probes webserver, pre-build on Docker Hub (nodyd/httprobe)
• kubiscan – KubiScan in a container image, pre-build on Docker Hub (nodyd/kubiscan)
• ssh – Docker image that starts a SSH daemon on startup as user, prebuild on Docker Hub (nodyd/ssh)
• ssl-fwd – Socat in a container that wraps TLS arround another port, pre-build on Docker Hub (nodyd/ssl-fwd)