Kubescape – tool for testing if Kubernetes is deployed securely • Hacker News Board

Kubescape – tool for testing if Kubernetes is deployed securely

#1

Post by jkaftzan » Sat, Sep 04, 2021, 8:55 PM UTC

Kubescape – tool for testing if Kubernetes is deployed securely
github.com

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#2

Post by jkaftzan » Sat, Sep 04, 2021, 8:55 PM UTC

Kubescape is The first open-source tool for testing if Kubernetes is deployed securely as defined in the Kubernetes Hardening Guidance by NSA and CISA

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#3

Post by gravypod » Sat, Sep 04, 2021, 9:09 PM UTC

I love that since Kube is a standard API we can implement preflight checks like this that work for "any" kube cluster automatically.

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#4

Post by jkaftzan » Sat, Sep 04, 2021, 9:18 PM UTC

gravypod wrote: post #3

I love that since Kube is a standard API we can implement preflight checks like this that work for "any" kube cluster automatically.

cool! happy to hear that. if you have any ideas or comments about Kubescape, we would love to hear them

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#5

Post by _kec6 » Sat, Sep 04, 2021, 9:22 PM UTC

jkaftzan wrote: post #2

Kubescape is The first open-source tool for testing if Kubernetes is deployed securely as defined in the Kubernetes Hardening Guidance by NSA and CISA

Something about the capitalization in this comment + the above scares me somehow.

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#6

Post by jkaftzan » Sat, Sep 04, 2021, 9:24 PM UTC

_kec6 wrote: post #5

jkaftzan wrote: post #2

Kubescape is The first open-source tool for testing if Kubernetes is deployed securely as defined in the Kubernetes Hardening Guidance by NSA and CISA

Something about the capitalization in this comment + the above scares me somehow.

not sure i understand, can you explain?

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#7

Post by imw » Sat, Sep 04, 2021, 9:25 PM UTC

_kec6 wrote: post #5

jkaftzan wrote: post #2

Kubescape is The first open-source tool for testing if Kubernetes is deployed securely as defined in the Kubernetes Hardening Guidance by NSA and CISA

Something about the capitalization in this comment + the above scares me somehow.

May I introduce you to my friend and colleague, Hardening Guidance?

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#8

Post by torgard » Sat, Sep 04, 2021, 9:25 PM UTC

This couldn't have come at a better time! I have to do a report on hardening and such of our infrastructure next week.

Great!

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#9

Post by jkaftzan » Sat, Sep 04, 2021, 9:28 PM UTC

torgard wrote: post #8

This couldn't have come at a better time! I have to do a report on hardening and such of our infrastructure next week. Great!

excellent, good luck! let me know if you need any help

Re: Kubescape – tool for testing if Kubernetes is deployed securely

#10

Post by zxspectrum1982 » Sat, Sep 04, 2021, 9:31 PM UTC

How is this different from auditing and hardening your Kubernetes nodes with OpenSCAP data streams (AKA "profiles")?