Annotation Checking References

Jump to bottom

Christa edited this page Nov 12, 2023 · 5 revisions

sidecar.istio.io/proxyImage, sidecar.istio.io/userVolumeMount:
- https://istio.io/latest/news/security/istio-security-2022-002/
- https://mp.weixin.qq.com/s/Y4F72s0JSyvjLBN3iNyUZg
security.alpha.kubernetes.io/sysctls:
- https://access.redhat.com/documentation/en-us/openshift_container_platform/3.3/html/cluster_administration/admin-guide-sysctls
- https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/
seccomp.security.alpha.kubernetes.io/allowedProfileNames, apparmor.security.beta.kubernetes.io/allowedProfileNames:
- https://kubernetes.io/id/docs/concepts/policy/pod-security-policy/
nginx.ingress.kubernetes.io/server-snippet:
- https://github.com/kubernetes/ingress-nginx/blob/cf156c73905792c6ce1f02822fe9ffca24381d3b/docs/user-guide/nginx-configuration/annotations.md#server-snippet
nginx.ingress.kubernetes.io/permanent-redirect:
- https://seclists.org/oss-sec/2023/q4/183
- https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/