Kubescape – tool for testing if Kubernetes is deployed securely

Re:Kubescape – tool for testing if Kubernetes is deployed se... by gravypod on Saturday September 04, 2021 @05:09PM (#28419241)

I love that since Kube is a standard API we can implement preflight checks like this that work for "any" kube cluster automatically.

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by jkaftzan on Saturday September 04, 2021 @05:18PM (#28419329)

cool! happy to hear that. if you have any ideas or comments about Kubescape, we would love to hear them

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by gravypod on Saturday September 04, 2021 @05:35PM (#28419490)

If you could check for container signing and providence on all materials and make sure that only a single registry is being used (ex only `internal.company.com:443`) and make sure it's not possible to schedule pods with unsigned/untrusted containers that would be awesome.

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by eris_agx on Saturday September 04, 2021 @05:46PM (#28419596)

For materials you can use syft https://github.com/anchore/syft

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by jkaftzan on Saturday September 04, 2021 @05:50PM (#28419622)

interesting, I'll send that to our dev team. BTW - you can suggest these things on Kubescape page @ Github and see status etc.

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by dwertent on Sunday September 05, 2021 @09:51AM (#28424342)

Yes, we are working on integration with anchore :)

[ Parent | on HN ]

Re:Kubescape – tool for testing if Kubernetes is deployed se... by leeoniya on Saturday September 04, 2021 @07:12PM (#28420231)

s/providence/provenance

[ Parent | on HN ]