polaris
awesome-kubernetes-security
| polaris | awesome-kubernetes-security | |
|---|---|---|
| 11 | 1 | |
| 3,096 | 885 | |
| 0.6% | 0.3% | |
| 6.8 | 3.1 | |
| 16 days ago | 5 months ago | |
| Go | ||
| Apache License 2.0 | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
polaris
- Is OPA Gatekeeper the best solution for writing policies for k8s clusters?
-
Securing Kubernetes clusters using OSS tools
I'll also plug Polaris as a way to monitor and enforce best practices for Deployments, StatefulSets, and other developer-controlled resources.
-
All about Komodor :- A Kubernetes Troubleshooting Platform and more
It's open source repository is https://github.com/FairwindsOps/polaris
-
Monthly: Who is hiring?
Come help us build great open source and commercial software for Kubernetes! You may know us from projects like Polaris and Goldilocks. We're building an inclusive, learning-driven, remote-first culture and are looking to grow our team.
-
Top 6 Kubernetes Security Tools
Here's a link to Polaris on Github
-
NSA Kubernetes Hardening Guidance [pdf]
so... a lot of this can be done with Fairwind's OSS tool Polaris... https://github.com/FairwindsOps/polaris
feels good that we've been addressing this for a bit already tbh.
- Show HN: Polaris 4.0 – Policy for Kubernetes Resources
-
Looking for k8s security tools that run outside of the cluster
Polaris has various tools that run inside and outside your cluster: https://github.com/FairwindsOps/polaris
-
An automatic diagnostic tool for Kubernetes cluster
KubeEye is an open-source diagnostic tool for identifying various Kubernetes cluster issues automatically, such as misconfigurations, unhealthy components and node failures. It empowers cluster operators to manage and troubleshoot clusters in a timely and graceful manner. Developed in Go on the basis of Polaris and Node Problem Detector, KubeEye is equipped with a series of built-in rules for exception detection. Besides pre-defined rules, KubeEye also supports customized rules.
-
Top 20 useful k8s tools
Link : https://github.com/FairwindsOps/polaris
awesome-kubernetes-security
-
Looking for k8s security tools that run outside of the cluster
There are some more projects on the Awesome Kubernetes Security GitHub page: https://github.com/ksoclabs/awesome-kubernetes-security
What are some alternatives?
kube-score - Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
kubernetes-goat - Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
datree - Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
polaris - Shopify’s design system to help us work together to build a great experience for all of our merchants.
gatekeeper - 🐊 Gatekeeper - Policy Controller for Kubernetes
DevSecOps - Ultimate DevSecOps library
popeye - 👀 A Kubernetes cluster resource sanitizer
checkov - Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
awesome-kubectl-plugins - Curated list of kubectl plugins
kube-no-trouble - Easily check your clusters for use of deprecated APIs
awesome-argo - A curated list of awesome projects and resources related to Argo (a CNCF graduated project)