Controller creating pods with hostNetwork enabled
hostNetwork when set to true allows the pod to use the network namespace and network resources of the node. In...
Blog
Controller creating pods with enabled hostPID, hostIPC, hostNetwork and with privileged Docker
Docker privileged mode grants a Docker container root capabilities to all devices on the host system. hostPID when set to...
Function app environment variables expose secrets
Azure Functions is Azure's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Web app environment variables expose secrets
Azure Functions is Azure's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Controller creating containers that are running as root or have the option to run as root
When assessing which user the controller allows its containers to run as, there are 3 parameters: 1. RunAsUser - define...
Controller creating containers with the NET_RAW capability enabled
Linux Capabilities refer to the division of the privileges, which are traditionally associated with superuser, into distinct units which can...
EC2 Instance with secrets in UserData Attribute
Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter...
Azure Automation account variables expose secrets
Automation account allows you to automate your Azure management tasks and to orchestrate actions across external systems from right within...
Privileged Group – User Management
An IAM Group is a collection of IAM Users. You can use groups to specify permissions for a collection of...