Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosRackspace maximizes data center space and compute power with AMD(24.09.2026 um 16:00 Uhr)
Podcasts & Audio BriefingsTechLinked: Android Laptops Are Here…(22.09.2026 um 02:45 Uhr)
Podcasts & Audio BriefingsTechLinked: They’re Really Doing It…(24.09.2026 um 02:56 Uhr)
Podcasts & Audio Briefings9to5Google: Googlebook Hands-On: Android's biggest step in years.(21.09.2026 um 15:00 Uhr)
Podcasts & Audio Briefings9to5Google: 30 days with Pixel 11: What we learned.(22.09.2026 um 17:45 Uhr)
AI & KI NachrichtenNeil Patel: 300 Reviews at 4.2 Beats 15 at 5.0 #shorts(21.09.2026 um 20:03 Uhr)
AI & KI NachrichtenNeil Patel: Google Just Quietly Killed Your Clicks #shorts(22.09.2026 um 20:01 Uhr)
YouTube Security VideosRackspace maximizes data center space and compute power with AMD(24.09.2026 um 16:00 Uhr)
Podcasts & Audio BriefingsTechLinked: Android Laptops Are Here…(22.09.2026 um 02:45 Uhr)
Podcasts & Audio BriefingsTechLinked: They’re Really Doing It…(24.09.2026 um 02:56 Uhr)
Podcasts & Audio Briefings9to5Google: Googlebook Hands-On: Android's biggest step in years.(21.09.2026 um 15:00 Uhr)
Podcasts & Audio Briefings9to5Google: 30 days with Pixel 11: What we learned.(22.09.2026 um 17:45 Uhr)
AI & KI NachrichtenNeil Patel: 300 Reviews at 4.2 Beats 15 at 5.0 #shorts(21.09.2026 um 20:03 Uhr)
AI & KI NachrichtenNeil Patel: Google Just Quietly Killed Your Clicks #shorts(22.09.2026 um 20:01 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Kubernetes Pods

cover image: Photo by Nilantha Ilangamuwa on Unsplash In this article, we’ll talk about Kubernetes pods. We'll discuss what they are, how they work, and why they’re essential in the Kubernetes ecosystem. What are Kubernetes Obj…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

cover image: Photo by Nilantha Ilangamuwa on Unsplash




In this article, we’ll talk about Kubernetes pods. We'll discuss what they are, how they work, and why they’re essential in the Kubernetes ecosystem.






What are Kubernetes Objects?




  • Kubernetes Objects are the foundational entities of Kubernetes

  • We can consider Kubernetes objects as the building blocks of the Kubernetes

  • Each Kubernetes object has its own specific attributes and responsibilities

  • There are many types of Kubernetes objects

  • The following are some of them


    • Pods

    • Deployments

    • Services











What is a Pod?




  • In Kubernetes, pods are the smallest deployable units of computing

  • Kubernetes pod is one type of the Kubernetes objects

  • A pod can contain one container or a group of tightly coupled containers

  • So, Pods can be considered as abstractions that encapsulate one or more containers

  • In most use cases, we use pods that contain a single container

  • Pods are ephemeral and disposable






Creating a Pod with a Manifest File



Here’s an example of a basic pod manifest file:




apiVersion: v1
kind: Pod
metadata:
name: nginx
spec:
containers:
- name: nginx
image: nginx:latest
ports:
- containerPort: 80






Then we can create this pod using kubectl with one of the following commands




kubectl create -f nginx.yaml






or




kubectl apply -f nginx.yaml







  • The above manifest file creates a pod with a single nginx container

  • In many use cases, we don't directly create and manipulate pods

  • Instead, we’ll use workload resources like Deployments or ReplicaSets to manage pods at scale



We can delete above pod using kubectl with one of the following commands




kubectl delete -f nginx.yaml






or




kubectl delete pod nginx









Multi-container pods




  • Containers that are tightly coupled and required to work together can be encapsulated into a single pod

  • These containers are automatically co-located and co-scheduled in the same physical or virtual machine

  • So, this allows them to


    • communicate and coordinate with each other

    • share resources and dependencies








Example Multi-Container Pod Manifest:




apiVersion: v1
kind: Pod
metadata:
name: nginx
spec:
containers:
- name: nginx
image: nginx:latest
ports:
- containerPort: 80
- name: redis
image: redis:latest
ports:
- containerPort: 6379







  • The above pod has two containers; nginx container and redis container


  • There are several types of multi-container pods



  • The following are 3 types used commonly




    • Sidecar Containers

    • Ambassador Containers

    • Adapter Containers











Sidecar Containers




  • Sidecar containers are the secondary containers that run along with the main application container within the same Pod

  • They provide additional services or functionalities such as logging, monitoring, etc.

  • In most cases, we don't directly manage sidecar containers

  • Instead, Helm charts manage sidecar containers






Init Container




  • Init container is a container that runs before the main application containers of the pod

  • They’re used for tasks required to be completed once before the application container startup

  • Init containers are also regular containers

  • But unlike regular containers,


    • Init containers always run to completion

    • Init containers run only at the pod startup






  • A pod can have multiple init containers and they execute sequentially


  • Init containers are specified within the initContainers section of the manifest file


  • Init containers run sequentially in the order of initContainers section of the manifest file


  • Only one init container runs at a time


  • If an init container fails, it'll be restarted until it succeeds


  • However, we can control the restart behavior by using restartPolicy of the pod


  • If an init container fails, the whole pod will fail



  • Example Kubernetes Manifest with Init Containers:







apiVersion: v1
kind: Pod
metadata:
name: myapp-pod
labels:
app.kubernetes.io/name: MyApp
spec:
containers:
- name: myapp-container
image: busybox:1.28
command: ['sh', '-c', 'echo The app is running! && sleep 3600']
initContainers:
- name: init-myservice
image: busybox:1.28
command: ['sh', '-c', "until nslookup myservice.$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace).svc.cluster.local; do echo waiting for myservice; sleep 2; done"]
- name: init-mydb
image: busybox:1.28
command: ['sh', '-c', "until nslookup mydb.$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace).svc.cluster.local; do echo waiting for mydb; sleep 2; done"]







  • In the above example init-myservice and init-mydb are init containers

  • Containers of the above manifest run in the following order,



    1. init-myservice init container starts first and runs to completion

    2. After successfully completing init-myservice init container, init-mydb init container starts and runs to the completion

    3. After successfully completing init-mydb init container, myapp-container container starts








Summary



In this article, we covered the basics of Kubernetes pods. We looked at what pods are, how they can encapsulate one or more containers, and the different types of containers that can run within a pod, including sidecar and init containers.






References




  1. https://kubernetes.io/docs/concepts/workloads/pods

  2. https://kubernetes.io/docs/concepts/overview/working-with-objects

  3. https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers

  4. https://kubernetes.io/docs/concepts/workloads/pods/init-containers

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Kubernetes Pods
id: eba98028-c7a8-4eb7-b283-e42ebe5c6e26
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Kubernetes Pods" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Kubernetes Pods.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Kubernetes Pods

Thematisch verwandte Begriffe: Kubernetes, Pods · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97360 | HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary fil…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick