Read Security Audit & Use Findings

[davidz627]

Read: https://github.com/kubernetes/community/blob/master/wg-security-audit/findings/Kubernetes%20Final%20Report.pdf

From a quick skim some things already stand out as directly applicable to this driver.
See
8) Pervasive world-accessible file permissions
34) Hardcoded use of insecure gRPS transport (TBC)
23) Hard-coded credential paths

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[davidz627]

/remove-lifecycle stale
/lifecycle frozen