KubeZTs: uma implementação Zero Trust para o Kubernetes

• Autor(a) principal: Silva, Guilherme Egle Pegado Lima
• Data de Publicação: 2024
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Institucional da UFRN
• dARK ID: ark:/41046/001300001t74g
• Texto Completo: https://repositorio.ufrn.br/handle/123456789/59526
• topic: Kubernetes; Zero Trust; Security; Audit; RBAC; Audit Logging; KubernetesZeroTrustScanner; Cloud-native Security; CNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO

The use of Kubernetes as a platform for containerized application deployment and management has increased dramatically in recent years. To preserve sensitive data and the integrity of programs, new security issues have been brought about by this widespread usage, which must be resolved. The Kubernetes Zero Trust Scanner (KubeZTs), a unique tool created to confirm that Kubernetes cluster configurations adhere to the Zero Trust paradigm's tenets, is presented in this work. The Zero Trust paradigm necessitates ongoing security measure verification and highlights the need of assuming no implicit trust within a network. A collection of Python scripts is used in the tool's implementation to communicate with the Kubernetes API and carry out a number of security tests.