k3s/docs/reporting-security-issues.md

25 lines
1.4 KiB
Markdown
Raw Normal View History

2015-07-23 23:15:04 +00:00
# Security
2016-07-05 02:48:26 +00:00
If you believe you have discovered a vulnerability or have a security incident to report, please follow the steps below. This applies to Kubernetes releases v1.0 or later.
2015-07-23 23:15:04 +00:00
2015-07-24 21:52:18 +00:00
To watch for security and major API announcements, please join our [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group.
2015-07-23 23:15:04 +00:00
## Reporting a security issue
To report an issue, please:
- Submit a bug report [here](http://goo.gl/vulnz).
- Select “I want to report a technical security bug in a Google product (SQLi, XSS, etc.).”
2015-07-24 21:52:18 +00:00
- Select “Other” as the Application Type.
2015-07-23 23:15:04 +00:00
- Under reproduction steps, please additionally include
- the words "Kubernetes Security issue"
- Description of the issue
- Kubernetes release (e.g. output of `kubectl version` command, which includes server version.)
2015-07-24 21:52:18 +00:00
- Environment setup (e.g. which "Getting Started Guide" you followed, if any; what node operating system used; what service or software creates your virtual machines, if any)
2015-07-23 23:15:04 +00:00
An online submission will have the fastest response; however, if you prefer email, please send mail to security@google.com. If you feel the need, please use the [PGP public key](https://services.google.com/corporate/publickey.txt) to encrypt communications.
<!-- BEGIN MUNGE: GENERATED_ANALYTICS -->
[![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/reporting-security-issues.md?pixel)]()
<!-- END MUNGE: GENERATED_ANALYTICS -->