A work in progress collection of resources for securing a kubernetes cluster.
A good understanding of the k8s architecture and automating operations of your cluster is probably the best place to start:
- https://github.com/kubernetes/kubernetes/blob/release-1.3/docs/design/security.md
- https://github.com/kelseyhightower/kubernetes-the-hard-way
It should also be noted that the kubelet api has no authentications and allows for remote code execution (this is how kubectl exec works).
- https://coreos.com/etcd/docs/latest/security.html
- https://github.com/coreos/etcd/blob/master/Documentation/op-guide/security.md
- http://kubernetes.io/docs/user-guide/production-pods/#authenticating-with-a-private-image-registry
- Image vulnerability management