chmod-777
Re:Kubernetes ingress-nginx controller vulnerability
on Saturday October 23, 2021 @03:20PM (#28971383)
I see you can also download it from Git and try it out, probably just tried to make it easier for people.
Re:NSA and CISA Kubernetes Security Guidance – A Critical Review
on Monday September 13, 2021 @03:45AM (#28508841)
Hi, you do not have to use the curl | bash options, completely understand the concern (I am also like that), but we wanted to make it easy for those who like it easy :-)
It is completely open source, you can take the executables and run it yourself, compile it, change it, however you feel like :-)
If you do try it, let us know how it is, happy to get feedback!
Re:NSA and CISA Kubernetes Security Guidance – A Critical Review
on Sunday September 12, 2021 @11:02AM (#28501776)
Thanks for sharing, we created an open source that takes any cluster and checks it against these guidelines, check it out, hope you find it useful:
https://github.com/armosec/kubescape
Re:Kubescape – tool for testing if Kubernetes is deployed securely
on Sunday September 05, 2021 @08:29AM (#28423832)
I see a lot of questions here about CIS and other frameworks, Kubescape put out a survey to ask what framework would be most beneficial next, you can impact it here:
https://docs.google.com/forms/d/1ZitQztCQ3xHFQnywUerPj3LmjmX...
Re:Kubescape – tool for testing if Kubernetes is deployed securely
on Sunday September 05, 2021 @08:25AM (#28423814)
There is also an implementation difference between the two, while KubeBench requires installation within the cluster, Kubescape runs as CLI from any computer using Kube API, so it can be added to any CI/CD pipeline very easily, also the latest version enables you to scan YAML files before you deploy them so you know early on whether you are compliant.