Open Source Tool for Checking K8s Configuration for NSA Hardening Guidance

Posted by chmod-777 on Sunday September 12, 2021 @10:55AM
from the self-post dept.

Hi All,

We have updated Kubescape (https://github.com/armosec/kubescape) so you can now easily integrate it with your Jenkins or other CI tools, and scan k8s manifest files so you can make sure you are up with the guidance as early as possible. Hope you like it! let us know.

( 1 comment | 2 points | on HN )

Re:Open Source Tool for Checking K8s Configuration for NSA H... by jkaftzan on Sunday September 12, 2021 @11:01AM (#28501764)

check this article by -Lachlan Evenson https://medium.com/@LachlanEvenson/kubernetes-hardening-usin...

You can also run Kubescape against Kubernetes manifests which is a great way to stop violations before the resources are deployed to a Kubernetes cluster. The output is identical as scanning a running Kubernetes cluster as seen above

[ Parent | on HN ]