Skip to content

Commit ed0951f

Browse files
author
Tim Bannister
committed
Warn people about privilege escalation via Pod creation
1 parent 9f32751 commit ed0951f

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

content/en/docs/concepts/security/security-checklist.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -405,8 +405,12 @@ alpha state but could be considered for certain use cases:
405405

406406
## What's next
407407

408-
- [RBAC Good Practices](/docs/concepts/security/rbac-good-practices/) for
409-
further information on authorization.
408+
- [Privilege escalation via Pod creation](/docs/reference/access-authn-authz/authorization/#privilege-escalation-via-pod-creation)
409+
warns you about a specific access control risk; check how you're managing that
410+
threat.
411+
- If you use Kubernetes RBAC, read
412+
[RBAC Good Practices](/docs/concepts/security/rbac-good-practices/) for
413+
further information on authorization.
410414
- [Securing a Cluster](/docs/tasks/administer-cluster/securing-a-cluster/) for
411415
information on protecting a cluster from accidental or malicious access.
412416
- [Cluster Multi-tenancy guide](/docs/concepts/security/multi-tenancy/) for

0 commit comments

Comments
 (0)