Tampering
Tampering is the act of changing something in a malicious way to cause one of the following:
- Denial of service: Tampering with the resource to make it unusable
- Elevation of privilege: Tampering with a resource to gain additional privileges
Tampering can be hard to avoid, so a common countermeasure is to make it obvious when something has been tampered with. A common non-Kubernetes example is packaging medication — most over-the-counter drugs are packaged with tamper-proof seals that make it obvious if the product has been tampered with.
Tampering with Kubernetes components
Tampering with any of the following Kubernetes components can cause problems:
- etcd
- Configuration files for the API server, controller-manager, scheduler, etcd, and kubelet
- Container runtime binaries
- Container images
- Kubernetes binaries
Generally speaking, tampering happens either in transit or at rest. In transit refers to data while it is being transmitted over the network...
