gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2026-07-28 22:51:09 -07:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['.github/pull_request_template.md', 'src/pentesting-cloud/az

Browse Source
This commit is contained in:
Translator
2024-12-31 19:03:28 +00:00
parent 7770a50092
commit 44da2ea78f
244 changed files with 7940 additions and 10781 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
+10 -16
View File
@@ -1,35 +1,33 @@
# OpenShift - Basic information
# OpenShift - Taarifa za Msingi
## Kubernetes prior b**asic knowledge** <a href="#a94e" id="a94e"></a>
## Kubernetes maarifa ya awali b**asic knowledge** <a href="#a94e" id="a94e"></a>
Before working with OpenShift, ensure you are comfortable with the Kubernetes environment. The entire OpenShift chapter assumes you have prior knowledge of Kubernetes.
Kabla ya kufanya kazi na OpenShift, hakikisha uko sawa na mazingira ya Kubernetes. Sura nzima ya OpenShift inadhani una maarifa ya awali ya Kubernetes.
## OpenShift - Basic Information
## OpenShift - Taarifa za Msingi
### Introduction
### Utangulizi
OpenShift is Red Hat’s container application platform that offers a superset of Kubernetes features. OpenShift has stricter security policies. For instance, it is forbidden to run a container as root. It also offers a secure-by-default option to enhance security. OpenShift, features an web console which includes a one-touch login page.
OpenShift ni jukwaa la programu za kontena la Red Hat linalotoa seti ya vipengele vya Kubernetes. OpenShift ina sera kali za usalama. Kwa mfano, inakatazwa kuendesha kontena kama root. Pia inatoa chaguo salama kwa default ili kuimarisha usalama. OpenShift ina konsoli ya wavuti ambayo inajumuisha ukurasa wa kuingia kwa kugusa moja.
#### CLI
OpenShift come with a it's own CLI, that can be found here:
OpenShift inakuja na CLI yake mwenyewe, ambayo inaweza kupatikana hapa:
{{#ref}}
https://docs.openshift.com/container-platform/4.11/cli_reference/openshift_cli/getting-started-cli.html
{{#endref}}
To login using the CLI:
Ili kuingia kwa kutumia CLI:
```bash
oc login -u=<username> -p=<password> -s=<server>
oc login -s=<server> --token=<bearer token>
```
### **OpenShift - Security Context Constraints** <a href="#a94e" id="a94e"></a>
In addition to the [RBAC resources](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) that control what a user can do, OpenShift Container Platform provides _security context constraints_ (SCC) that control the actions that a pod can perform and what it has the ability to access.
Mbali na [RBAC resources](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) ambazo zinadhibiti kile ambacho mtumiaji anaweza kufanya, OpenShift Container Platform inatoa _security context constraints_ (SCC) ambazo zinadhibiti vitendo ambavyo pod inaweza kufanya na kile ambacho ina uwezo wa kufikia.
SCC is a policy object that has special rules that correspond with the infrastructure itself, unlike RBAC that has rules that correspond with the Platform. It helps us define what Linux access-control features the container should be able to request/run. Example: Linux Capabilities, SECCOMP profiles, Mount localhost dirs, etc.
SCC ni kitu cha sera ambacho kina sheria maalum zinazolingana na miundombinu yenyewe, tofauti na RBAC ambayo ina sheria zinazolingana na Jukwaa. Inatusaidia kufafanua ni vipengele gani vya udhibiti wa ufikiaji wa Linux ambavyo kontena linapaswa kuwa na uwezo wa kuomba/kufanya. Mfano: Linux Capabilities, SECCOMP profiles, Mount localhost dirs, n.k.
{{#ref}}
openshift-scc.md
@@ -38,7 +36,3 @@ openshift-scc.md
{{#ref}}
https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#security-context-constraints
{{#endref}}