• Documentação
  • Kubernetes Blog
  • Parceiros
  • Comunidade
  • Casos de estudo
  • Versões
    Release Information v1.22 v1.21 v1.20 v1.19 v1.18
  • Português
    English 中文 Chinese 한국어 Korean 日本語 Japanese Français Español Bahasa Indonesia
    • Home
      • Versões Suportadas da Documentação do Kubernetes
    • Instalação
    • Conceitos
      • Visão Geral
        • O que é Kubernetes?
        • Componentes do Kubernetes
        • The Kubernetes API
        • Objetos do Kubernetes
          • Understanding Kubernetes Objects
          • Kubernetes Object Management
          • Nomes
          • Namespaces
          • Labels and Selectors
          • Annotations
          • Field Selectors
          • Finalizers
          • Owners and Dependents
          • Recommended Labels
      • Volumes Persistentes
      • Arquitetura do Kubernetes
          Nodes (EN)
        • Comunicação entre Nó e Control Plane
        • Conceitos sobre Cloud Controller Manager
        • Controladores
        • Garbage Collection (EN)
      • Contêineres
        • Imagens
        • Ambiente de Contêiner
        • Classes de execução
        • Hooks de Ciclo de Vida do Contêiner
      • Workloads (EN)
      • Serviços, balanceamento de carga e conectividade
        • Service
        • Topology-aware traffic routing with topology keys
        • DNS for Services and Pods
        • Connecting Applications with Services
        • Ingress
        • Ingress Controllers
        • EndpointSlices
        • Service Internal Traffic Policy
        • Topology Aware Hints
        • Políticas de rede
        • IPv4/IPv6 dual-stack
      • Storage (EN)
      • Configuração
        • Melhores Práticas de Configuração
        • ConfigMaps
        • Secrets
        • Managing Resources for Containers
        • Organizando o acesso ao cluster usando arquivos kubeconfig
      • Segurança
        • Pod Security Standards
        • Visão Geral da Segurança Cloud Native
        • Pod Security Admission
        • Controlling Access to the Kubernetes API
      • Escalonamento
        • Assigning Pods to Nodes
        • Taints and Tolerations
        • Escalonador do Kubernetes
        • Pod Priority and Preemption
        • Sobrecarga de Pod
        • Node-pressure Eviction
        • API-initiated Eviction
        • Resource Bin Packing for Extended Resources
        • Scheduling Framework
        • Scheduler Performance Tuning
      • Policies (EN)
      • Administração de Cluster
        • Visão Geral da Administração de Cluster
        • Certificates
        • Managing Resources
        • Conectividade do Cluster
        • Arquitetura de Log
        • Logs de Sistema
        • Metrics For Kubernetes System Components
        • Traces For Kubernetes System Components
        • Configurando o Garbage Collection do kubelet
        • Proxies in Kubernetes
        • API Priority and Fairness
        • Instalando Complementos
      • Extendendo o Kubernetes
        • Extendendo a API do Kubernetes
          • Custom Resources
          • Extendendo a API do Kubernetes com a camada de agregação
        • Extensões de Computação, armazenamento e redes
          • Plugins de rede
          • Device Plugins
        • Padrão Operador
        • Service Catalog
    • Tarefas
      • Install Tools
        • Install and Set Up kubectl on Linux
        • Install and Set Up kubectl on macOS
        • Install and Set Up kubectl on Windows
      • Administer a Cluster
        • Administration with kubeadm
          • Certificate Management with kubeadm
          • Configuring a cgroup driver
          • Upgrading kubeadm clusters
          • Adding Windows nodes
          • Upgrading Windows nodes
        • Migrating from dockershim
          • Check whether Dockershim deprecation affects you
          • Migrating telemetry and security agents from dockershim
        • Certificates
        • Manage Memory, CPU, and API Resources
          • Configure Default Memory Requests and Limits for a Namespace
          • Configure Default CPU Requests and Limits for a Namespace
          • Configure Minimum and Maximum Memory Constraints for a Namespace
          • Configure Minimum and Maximum CPU Constraints for a Namespace
          • Configure Memory and CPU Quotas for a Namespace
          • Configure a Pod Quota for a Namespace
        • Install a Network Policy Provider
          • Use Antrea for NetworkPolicy
          • Use Calico for NetworkPolicy
          • Use Cilium for NetworkPolicy
          • Use Kube-router for NetworkPolicy
          • Romana for NetworkPolicy
          • Weave Net for NetworkPolicy
        • Access Clusters Using the Kubernetes API
        • Access Services Running on Clusters
        • Advertise Extended Resources for a Node
        • Autoscale the DNS Service in a Cluster
        • Change the default StorageClass
        • Change the Reclaim Policy of a PersistentVolume
        • Cloud Controller Manager Administration
        • Configure Quotas for API Objects
        • Control CPU Management Policies on the Node
        • Control Topology Management Policies on a node
        • Customizing DNS Service
        • Debugging DNS Resolution
        • Declare Network Policy
        • Developing Cloud Controller Manager
        • Enable Or Disable A Kubernetes API
        • Enabling Service Topology
        • Enabling Topology Aware Hints
        • Encrypting Secret Data at Rest
        • Guaranteed Scheduling For Critical Add-On Pods
        • IP Masquerade Agent User Guide
        • Limit Storage Consumption
        • Migrate Replicated Control Plane To Use Cloud Controller Manager
        • Namespaces Walkthrough
        • Operating etcd clusters for Kubernetes
        • Reconfigure a Node's Kubelet in a Live Cluster
        • Reserve Compute Resources for System Daemons
        • Running Kubernetes Node Components as a Non-root User
        • Safely Drain a Node
        • Securing a Cluster
        • Set Kubelet parameters via a config file
        • Set up a High-Availability Control Plane
        • Share a Cluster with Namespaces
        • Upgrade A Cluster
        • Use Cascading Deletion in a Cluster
        • Using a KMS provider for data encryption
        • Using CoreDNS for Service Discovery
        • Using NodeLocal DNSCache in Kubernetes clusters
        • Using sysctls in a Kubernetes Cluster
        • Utilizing the NUMA-aware Memory Manager
      • Configure Pods and Containers
        • Assign Memory Resources to Containers and Pods
        • Assign CPU Resources to Containers and Pods
        • Configure GMSA for Windows Pods and containers
        • Configure RunAsUserName for Windows pods and containers
        • Create a Windows HostProcess Pod
        • Configure Quality of Service for Pods
        • Assign Extended Resources to a Container
        • Configure a Pod to Use a Volume for Storage
        • Configure a Pod to Use a PersistentVolume for Storage
        • Configure a Pod to Use a Projected Volume for Storage
        • Configure a Security Context for a Pod or Container
        • Configure Service Accounts for Pods
        • Pull an Image from a Private Registry
        • Configure Liveness, Readiness and Startup Probes
        • Assign Pods to Nodes
        • Assign Pods to Nodes using Node Affinity
        • Configure Pod Initialization
        • Attach Handlers to Container Lifecycle Events
        • Configure a Pod to Use a ConfigMap
        • Share Process Namespace between Containers in a Pod
        • Create static Pods
        • Translate a Docker Compose File to Kubernetes Resources
        • Enforce Pod Security Standards by Configuring the Built-in Admission Controller
        • Enforce Pod Security Standards with Namespace Labels
        • Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller
      • Manage Kubernetes Objects
        • Declarative Management of Kubernetes Objects Using Configuration Files
        • Declarative Management of Kubernetes Objects Using Kustomize
        • Managing Kubernetes Objects Using Imperative Commands
        • Imperative Management of Kubernetes Objects Using Configuration Files
        • Update API Objects in Place Using kubectl patch
      • Gerenciando Secrets
        • Gerenciando Secret usando kubectl
        • Gerenciando Secret usando Arquivo de Configuração
        • Gerenciando Secret usando Kustomize
      • Inject Data Into Applications
        • Define a Command and Arguments for a Container
        • Define Dependent Environment Variables
        • Define Environment Variables for a Container
        • Expose Pod Information to Containers Through Environment Variables
        • Expose Pod Information to Containers Through Files
        • Distribute Credentials Securely Using Secrets
      • Run Applications
        • Run a Stateless Application Using a Deployment
        • Run a Single-Instance Stateful Application
        • Run a Replicated Stateful Application
        • Scale a StatefulSet
        • Delete a StatefulSet
        • Force Delete StatefulSet Pods
        • Horizontal Pod Autoscaler
        • Horizontal Pod Autoscaler Walkthrough
        • Specifying a Disruption Budget for your Application
        • Accessing the Kubernetes API from a Pod
      • Run Jobs
        • Running Automated Tasks with a CronJob
        • Coarse Parallel Processing Using a Work Queue
        • Fine Parallel Processing Using a Work Queue
        • Indexed Job for Parallel Processing with Static Work Assignment
        • Parallel Processing using Expansions
      • Access Applications in a Cluster
        • Deploy and Access the Kubernetes Dashboard
        • Accessing Clusters
        • Configure Access to Multiple Clusters
        • Use Port Forwarding to Access Applications in a Cluster
        • Use a Service to Access an Application in a Cluster
        • Connect a Frontend to a Backend Using Services
        • Create an External Load Balancer
        • List All Container Images Running in a Cluster
        • Set up Ingress on Minikube with the NGINX Ingress Controller
        • Communicate Between Containers in the Same Pod Using a Shared Volume
        • Configure DNS for a Cluster
      • Monitoring, Logging, and Debugging
        • Application Introspection and Debugging
        • Auditing
        • Debug a StatefulSet
        • Debug Init Containers
        • Debug Pods and ReplicationControllers
        • Debug Running Pods
        • Debug Services
        • Debugging Kubernetes nodes with crictl
        • Determine the Reason for Pod Failure
        • Developing and debugging services locally
        • Get a Shell to a Running Container
        • Monitor Node Health
        • Resource metrics pipeline
        • Tools for Monitoring Resources
        • Troubleshoot Applications
        • Troubleshoot Clusters
        • Troubleshooting
      • Extend Kubernetes
        • Configure the Aggregation Layer
        • Use Custom Resources
          • Extend the Kubernetes API with CustomResourceDefinitions
          • Versions in CustomResourceDefinitions
        • Set up an Extension API Server
        • Configure Multiple Schedulers
        • Use an HTTP Proxy to Access the Kubernetes API
        • Set up Konnectivity service
      • TLS
        • Configure Certificate Rotation for the Kubelet
        • Manage TLS Certificates in a Cluster
        • Manual Rotation of CA Certificates
      • Manage Cluster Daemons
        • Perform a Rolling Update on a DaemonSet
        • Perform a Rollback on a DaemonSet
      • Service Catalog
        • Install Service Catalog using Helm
        • Install Service Catalog using SC
      • Networking
        • Adding entries to Pod /etc/hosts with HostAliases
        • Validate IPv4/IPv6 dual-stack
      • Configure a kubelet image credential provider
      • Extend kubectl with plugins
      • Manage HugePages
      • Schedule GPUs
    • Tutoriais
      • Olá, Minikube!
      • Aprenda as noções básicas do Kubernetes
        • Crie um Cluster
          • Usando Minikube para criar um cluster
          • Tutorial interativo - Criando um cluster
        • Implantar um aplicativo
          • Usando kubectl para criar uma implantação
          • Tutorial interativo - implantando um aplicativo
        • Explore seu aplicativo
          • Visualizando Pods e Nós (Nodes)
          • Tutorial Interativo - Explorando seu aplicativo
        • Exponha publicamente seu aplicativo
          • Utilizando um serviço para expor seu aplicativo
          • Tutorial Interativo - Expondo seu aplicativo
        • Escale seu aplicativo
          • Executando múltiplas instâncias de seu aplicativo
          • Tutorial Interativo - Escalando seu aplicativo
        • Update Your App
          • Performing a Rolling Update
          • Interactive Tutorial - Updating Your App
      • Configuration
        • Example: Configuring a Java Microservice
          • Externalizing config using MicroProfile, ConfigMaps and Secrets
          • Interactive Tutorial - Configuring a Java Microservice
        • Configuring Redis using a ConfigMap
      • Stateless Applications
        • Exposing an External IP Address to Access an Application in a Cluster
        • Example: Deploying PHP Guestbook application with Redis
      • Stateful Applications
        • StatefulSet Basics
        • Example: Deploying WordPress and MySQL with Persistent Volumes
        • Example: Deploying Cassandra with a StatefulSet
        • Running ZooKeeper, A Distributed System Coordinator
      • Clusters
        • Restrict a Container's Access to Resources with AppArmor
        • Restrict a Container's Syscalls with seccomp
      • Services
        • Using Source IP
    • Referência
      • Glossary
      • API Overview
        • Kubernetes API Concepts
        • Server-Side Apply
        • Client Libraries
        • Kubernetes Deprecation Policy
        • Deprecated API Migration Guide
        • Kubernetes API health endpoints
      • Autenticação
      • API Access Control
        • Authenticating
        • Authenticating with Bootstrap Tokens
        • Certificate Signing Requests
        • Using Admission Controllers
        • Dynamic Admission Control
        • Managing Service Accounts
        • Authorization Overview
        • Using RBAC Authorization
        • Using ABAC Authorization
        • Using Node Authorization
        • Webhook Mode
      • Autenticando com Tokens de Inicialização
      • Well-Known Labels, Annotations and Taints
      • Kubernetes API
        • Workload Resources
          • Pod
          • PodTemplate
          • ReplicationController
          • ReplicaSet
          • Deployment
          • StatefulSet
          • ControllerRevision
          • DaemonSet
          • Job
          • CronJob
          • HorizontalPodAutoscaler
          • HorizontalPodAutoscaler v2beta2
          • PriorityClass
        • Service Resources
          • Service
          • Endpoints
          • EndpointSlice
          • Ingress
          • IngressClass
        • Config and Storage Resources
          • ConfigMap
          • Secret
          • Volume
          • PersistentVolumeClaim
          • PersistentVolume
          • StorageClass
          • VolumeAttachment
          • CSIDriver
          • CSINode
          • CSIStorageCapacity v1beta1
        • Authentication Resources
          • ServiceAccount
          • TokenRequest
          • TokenReview
          • CertificateSigningRequest
        • Authorization Resources
          • LocalSubjectAccessReview
          • SelfSubjectAccessReview
          • SelfSubjectRulesReview
          • SubjectAccessReview
          • ClusterRole
          • ClusterRoleBinding
          • Role
          • RoleBinding
        • Policy Resources
          • LimitRange
          • ResourceQuota
          • NetworkPolicy
          • PodDisruptionBudget
          • PodSecurityPolicy v1beta1
        • Extend Resources
          • CustomResourceDefinition
          • MutatingWebhookConfiguration
          • ValidatingWebhookConfiguration
        • Cluster Resources
          • Node
          • Namespace
          • Event
          • APIService
          • Lease
          • RuntimeClass
          • FlowSchema v1beta1
          • PriorityLevelConfiguration v1beta1
          • Binding
          • ComponentStatus
        • Common Definitions
          • DeleteOptions
          • LabelSelector
          • ListMeta
          • LocalObjectReference
          • NodeSelectorRequirement
          • ObjectFieldSelector
          • ObjectMeta
          • ObjectReference
          • Patch
          • Quantity
          • ResourceFieldSelector
          • Status
          • TypedLocalObjectReference
        • Common Parameters
      • Kubernetes Issues and Security
        • Kubernetes Issue Tracker
        • Kubernetes Security and Disclosure Information
      • Ports and Protocols
      • Setup tools
        • Kubeadm
          • kubeadm init
          • kubeadm join
          • kubeadm upgrade
          • kubeadm config
          • kubeadm reset
          • kubeadm token
          • kubeadm version
          • kubeadm alpha
          • kubeadm certs
          • kubeadm init phase
          • kubeadm join phase
          • kubeadm kubeconfig
          • kubeadm reset phase
          • kubeadm upgrade phase
          • Implementation details
      • Component tools
        • Feature Gates
        • kubelet
        • kube-apiserver
        • kube-controller-manager
        • kube-proxy
        • kube-scheduler
        • Kubelet authentication/authorization
        • TLS bootstrapping
      • kubectl CLI
        • Overview of kubectl
        • JSONPath Support
        • kubectl
        • kubectl Cheat Sheet
        • kubectl Commands
        • kubectl for Docker Users
        • kubectl Usage Conventions
      • Configuration APIs
        • Client Authentication (v1beta1)
        • kube-apiserver Audit Configuration (v1)
        • kube-apiserver Configuration (v1alpha1)
        • kube-proxy Configuration (v1alpha1)
        • kube-scheduler Configuration (v1beta1)
        • kube-scheduler Configuration (v1beta2)
        • kube-scheduler Policy Configuration (v1)
        • kubeadm Configuration (v1beta2)
        • kubeadm Configuration (v1beta3)
        • Kubelet Configuration (v1beta1)
        • WebhookAdmission Configuration (v1)
      • Scheduling
        • Scheduling Policies
        • Scheduler Configuration
      • Other Tools
      • Ferramentas
    • Contribuir
      • Suggesting content improvements
      • Contributing new content
        • Overview
        • Opening a pull request
        • Documenting for a release
        • Blogs and case studies
      • Reviewing changes
        • Reviewing pull requests
        • For approvers and reviewers
      • Localizing Kubernetes documentation
      • Participating in SIG Docs
        • Roles and responsibilities
        • PR wranglers
      • Documentation style overview
        • Content guide
        • Style guide
        • Writing a new topic
        • Page content types
        • Content organization
        • Custom Hugo Shortcodes
      • Reference Docs Overview
        • Contributing to the Upstream Kubernetes Code
        • Quickstart
        • Generating Reference Documentation for the Kubernetes API
        • Generating Reference Documentation for kubectl Commands
        • Generating Reference Pages for Kubernetes Components and Tools
      • Advanced contributing
      • Visualizando Analytics do Site
    • Docs smoke test page (EN)
    • Resultados da pesquisa
  1. Documentação
  2. Conceitos
  3. Segurança

Segurança


Visão Geral da Segurança Cloud Native

Comentários

Esta página foi útil?

Obrigado pelo feedback. Se você tiver uma pergunta específica sobre como utilizar o Kubernetes, faça em Stack Overflow. Abra um bug no repositório do GitHub se você deseja reportar um problema ou sugerir uma melhoria.

Última modificação April 19, 2021 at 9:10 PM PST : Move portuguese content to pt-br to correct shortcode problems and add redirection (#27413) (ae197690d)
Editar essa página Criar uma subpágina Abra um bug Imprimir toda essa seção
Home Blog Parceiros Comunidade Casos de estudo
© 2021 Os autores do Kubernetes | Documentação Distribuída sob CC BY 4.0
Copyright © 2021 A Fundação Linux ®. Todos os direitos reservados. A Linux Foundation tem marcas registradas e usa marcas registradas. Para uma lista de marcas registradas da The Linux Foundation, por favor, veja nossa Página de uso de marca registrada
ICP license: 京ICP备17074266号-3