gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2026-07-28 22:51:09 -07:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['.github/pull_request_template.md', 'src/README.md', 'src/pe

Browse Source
This commit is contained in:
Translator
2025-01-02 11:43:11 +00:00
parent b43d62ebcb
commit 5669651b7e
194 changed files with 1238 additions and 1253 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
+4 -4
View File
@@ -1,6 +1,6 @@
# OpenShift - Taarifa za Msingi
## Kubernetes maarifa ya awali b**asic knowledge** <a href="#a94e" id="a94e"></a>
## Kubernetes maarifa ya awali <a href="#a94e" id="a94e"></a>
Kabla ya kufanya kazi na OpenShift, hakikisha uko sawa na mazingira ya Kubernetes. Sura nzima ya OpenShift inadhani una maarifa ya awali ya Kubernetes.
@@ -8,7 +8,7 @@ Kabla ya kufanya kazi na OpenShift, hakikisha uko sawa na mazingira ya Kubernete
### Utangulizi
OpenShift ni jukwaa la programu za kontena la Red Hat linalotoa seti ya vipengele vya Kubernetes. OpenShift ina sera kali za usalama. Kwa mfano, inakatazwa kuendesha kontena kama root. Pia inatoa chaguo salama-kwa-default ili kuboresha usalama. OpenShift ina konsoli ya wavuti ambayo inajumuisha ukurasa wa kuingia kwa kugusa moja.
OpenShift ni jukwaa la programu za kontena la Red Hat linalotoa seti ya vipengele vya Kubernetes. OpenShift ina sera kali za usalama. Kwa mfano, inakatazwa kuendesha kontena kama root. Pia inatoa chaguo salama kwa default ili kuimarisha usalama. OpenShift ina konsoli ya wavuti ambayo inajumuisha ukurasa wa kuingia kwa kugusa moja.
#### CLI
@@ -23,9 +23,9 @@ Ili kuingia kwa kutumia CLI:
oc login -u=<username> -p=<password> -s=<server>
oc login -s=<server> --token=<bearer token>
```
### **OpenShift - Muktadha wa Usalama wa Muktadha** <a href="#a94e" id="a94e"></a>
### **OpenShift - Muktadha wa Usalama wa Mipaka** <a href="#a94e" id="a94e"></a>
Mbali na [rasilimali za RBAC](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) zinazodhibiti kile ambacho mtumiaji anaweza kufanya, OpenShift Container Platform inatoa _muktadha wa usalama wa muktadha_ (SCC) zinazodhibiti vitendo ambavyo pod inaweza kutekeleza na kile ambacho ina uwezo wa kufikia.
Mbali na [rasilimali za RBAC](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) zinazodhibiti kile ambacho mtumiaji anaweza kufanya, OpenShift Container Platform inatoa _muktadha wa usalama wa mipaka_ (SCC) zinazodhibiti vitendo ambavyo pod inaweza kutekeleza na kile ambacho ina uwezo wa kufikia.
SCC ni kitu cha sera ambacho kina sheria maalum zinazolingana na miundombinu yenyewe, tofauti na RBAC ambayo ina sheria zinazolingana na Jukwaa. Inatusaidia kufafanua ni vipengele gani vya udhibiti wa ufikiaji wa Linux ambavyo kontena linapaswa kuwa na uwezo wa kuomba/kutekeleza. Mfano: Uwezo wa Linux, profaili za SECCOMP, Mount localhost dirs, n.k.