diff --git a/content/posts/2024/06/pwning-kubernetes.md b/content/posts/2024/06/pwning-kubernetes.md index 2fff5bc..55d268a 100644 --- a/content/posts/2024/06/pwning-kubernetes.md +++ b/content/posts/2024/06/pwning-kubernetes.md @@ -547,10 +547,9 @@ for more info. ### Take Home Points 🏠 -Kubernetes by default lets anyone who can create pods to create pods that can easily take over the -entire cluster. +By default, Kubernetes allows anyone who can create pods to potentially take over the entire cluster. First, be very mindful about who can create pods on your cluster. Second, consider introducing a policy engine like Kyverno to prevent pods from requesting -elevated permissions unless they really need them to perform their job. \ No newline at end of file +elevated permissions unless they really need them to perform their job. diff --git a/topics.md b/topics.md index eb70cb9..0687540 100644 --- a/topics.md +++ b/topics.md @@ -1,8 +1,5 @@ # Blog post topics - -## Pwning Kubernetes - ## Fixing the OpenAI Function Calling API https://github.com/openai/openai-openapi/issues/259