cost-model VS trivy

Kubecost gives you insight into where your Kubernetes spend is going. You can view your spend per namespace, service, or even team, and you can set budgets and get real-time alerts. Kubecost can also track other cloud spend from things like RDS and S3, and it also works with on-prem k8s clusters. Kubecost also offers an open source version.

kubecost - analyse cost of the cluster https://kubecost.com/

> No inheritance - no more digging through the massive world-tree of objects to find the code that actually does things.

That's not 100% accurate; as a concrete example, tell me which files (to say nothing of the actual downstream types!) contain the implementations of this interface method: https://github.com/kubecost/cost-model/blob/v1.88.0/pkg/clou... (err, without using github's fancy new SourceGraph-lite integration, of course, that'd be cheating)

I find the sibling "No declared interfaces - they are defined at the point of use, not declared elsewhere" similarly suspicious, but suspect we'd having a nomenclature mismatch

Kubecost (Stackwatch) | Senior Support Engineer | Remote (US-East/Central preferred) | https://kubecost.com

Our tooling and intelligence empowers teams to efficiently operate Kubernetes at scale—helping them manage cost, performance, and reliability. We're avid contributors to the open source community.

We're looking to add a second Senior Support Engineer to help us build a scalable, user-first support process, troubleshoot complex infrastructure issues, and influence the direction of our product by tracking and communicating user needs. Be one of our first 20 teammates!

Feel free to apply or reach out to us directly with your CV at [email protected] if you're interested!

Check out all of our open roles here: https://angel.co/company/kubecost/jobs

Kubecost (Stackwatch) | Senior Support Engineer | Remote (US-East/Central preferred) | Full time | https://kubecost.com

Stackwatch is a tight-knit, fast-growing team on the leading edge of cloud infrastructure technology. Starting with our flagship product Kubecost, we build tooling and intelligence that empowers teams to efficiently operate Kubernetes at scale—helping them manage cost, performance, and reliability.

As our second Senior Support Engineer, you’ll help us build a scalable, customer-first support process, troubleshoot complex infrastructure issues for our users, and influence the direction of our product by tracking and communicating customer needs. We’re looking for someone who is as passionate about our product and customers as we are—as one of our first 20 employees, you’ll have the opportunity to shape the future of our support organization and technology.

Feel free to reach out to us directly with your CV at [email protected] if you're interested!

NB: also hiring for Senior Software Engineers and Go-to-market!

Lens is the most powerful IDE for those who need to deal with Kubernetes clusters on a daily basis. It allows you to manage your cluster and view important health metrics. A Kubecost and Lens integration allows you to also visualize Kubernetes costs directly in the Lens UI. With Lens and Kubecost you can view costs and spend efficiency by namespace, pod, deployment and more!

First you have to be aware of your costs :) This open source project can help https://kubecost.com, `helm install` and get started in 5 minutes

Happy to share some of the lessons we've learned if you want to reach out to team [at] kubecost.com. We worked on this problem at Google before launching Kubecost open source.

Trivy: security scanner for IaC and dependencies

Prior to deploying kubernetes manifest files to EKS Cluster, supplementary steps need to be added to prevent security and misconfiguration issue by using both *Checkov *and Trivy . Also, we will use seperate ArgoCD account from admin user that we’ve used in the previous lab. This will follow ArgoCD RBAC rule to secure ArgoCD and EKS cluster ultimately.

Regularly scan your Docker images for vulnerabilities using tools like Trivy or Clair.

Since I'm working on a Windows machine, I went straight to the Trivy website (https://aquasecurity.github.io/trivy/) to download the latest release. The official website is the best place to get the latest version of Trivy. This direct approach gives me more control over the installation process.

There are also pre-built packages available for various Linux distros, or grab the binary from GitHub releases: https://github.com/aquasecurity/trivy/releases

name: CI on: [push, pull_request] jobs: trivy: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v2 - name: Set up Trivy run: | sudo apt-get update && sudo apt-get install -y wget wget https://github.com/aquasecurity/trivy/releases/download/v0.28.1/trivy_0.28.1_Linux-64bit.deb sudo dpkg -i trivy_0.28.1_Linux-64bit.deb - name: Scan Docker image run: | docker build -t my-docker-image:latest . trivy image my-docker-image:latest - name: Scan Kubernetes manifests run: | trivy k8s --file /path/to/manifest.yaml

4. Trivy: https://github.com/aquasecurity/trivy Trivy is a versatile tool that scans for vulnerabilities in your containers, and also checks for vulnerabilities in your application dependencies.

Trivy Owner/Maintainer: Aqua Security Age: First released on GitHub on May 7th, 2019 License: Apache License 2.0 backward-compatible with tfsec