News for hackers. Stuff that matters.

A comment on Kubernetes Security – Best Practice Guide.

Re:Kubernetes Security – Best Practice Guide by mcdan on Thursday April 05, 2018 @11:46AM (#16765948)
Another tool that can help here: https://github.com/aquasecurity/kube-bench
[ Parent | on HN ]
Re:Kubernetes Security – Best Practice Guide by jaytaylor on Thursday April 05, 2018 @12:05PM (#16766141)
This looks potentially very useful, thanks for sharing!

There appear to be several of these worth investigating. Ordered by highest to lowest apparent activity level and update frequency:

https://github.com/aquasecurity/kube-bench (Go)

https://github.com/neuvector/kubernetes-cis-benchmark (Bash)

https://github.com/dev-sec/cis-kubernetes-benchmark (Ruby)

[ Parent | on HN ]
Re:Kubernetes Security – Best Practice Guide by raesene9 on Thursday April 05, 2018 @02:56PM (#16767890)
I'll add https://github.com/nccgroup/kube-auto-analyzer to that list (disclaimer, I for my sins, wrote it :) )
[ Parent | on HN ]
Re:Kubernetes Security – Best Practice Guide by kylegalbraith on Thursday April 05, 2018 @12:24PM (#16766302)
This is quite useful, thank you for pointing me in this direction!
[ Parent | on HN ]
Re:Kubernetes Security – Best Practice Guide by aboutsimon on Thursday April 05, 2018 @02:59PM (#16767922)
Super useful thanks, added it to the guide
[ Parent | on HN ]