kubeaudit
kured
| kubeaudit | kured | |
|---|---|---|
| 7 | 5 | |
| 1,845 | 2,071 | |
| 0.7% | 0.7% | |
| 3.8 | 8.7 | |
| 13 days ago | 4 days ago | |
| Go | Go | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
kubeaudit
- Looking for Tips on Open Sourcing a kubernetes security tool
-
Interesting tools?
kubeaudit: audit kubernetes or specific manifests for issues https://github.com/shopify/kubeaudit
- kubeaudit
-
Top 6 Kubernetes Security Tools
Here's a link to KubeAudit on Github
-
Introduction to Kubernetes Pentesting
kubeaudit - Audit Kubernetes clusters against common security concerns
-
Kubernetes Security Checklist 2021
Workload configuration should be audited regularly (Kics, Kubeaudit, Kubescape, Conftest, Kubesec, Checkov)
-
2 Widespread Attacks on Your Containerized Environment and 7 Rules to Prevent it.
Kubeaudit
kured
-
Update notification for kubernetes and control plane components
Maaaaybe, but it's not really what it's suited for. For the Kubernetes host, I'd recommend you enable auto-updates, and then deploy https://github.com/kubereboot/kured to perform reboots as required (you can have it check alertmanager for current alerts, and only do a reboot during a maintenance window if there are no alerts)
-
Examples of how to automatically handle EKS managed node upgrade?
OS patches, which are installed automatically by AKS. If restarts are required, we let https://github.com/weaveworks/kured handle it
-
Interesting tools?
kured : automatic restarts of kubernetes nodes
-
How can I restart a kubernetes node?
See https://github.com/weaveworks/kured or https://github.com/MnrGreg/kubectl-node-restart
-
How do you upgrade your Kubernetes clusters?
You may want to check this https://github.com/weaveworks/kured It is very useful when updating underlying OS on nodes - allows you detect and restart gracefuly
What are some alternatives?
kubescape - Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
upgrade-manager - Reliable, extensible rolling-upgrades of Autoscaling groups in Kubernetes
kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
karpenter-provider-aws - Karpenter is a Kubernetes Node Autoscaler built for flexibility, performance, and simplicity.
kubesec - Security risk analysis for Kubernetes resources
kubespray - Deploy a Production Ready Kubernetes Cluster
trivy - Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
kube-fledged - A kubernetes operator for creating and managing a cache of container images directly on the cluster worker nodes, so application pods start almost instantly
kube-hunter - Hunt for security weaknesses in Kubernetes clusters
draino - Automatically cordon and drain Kubernetes nodes based on node conditions
polaris - Shopify’s design system to help us work together to build a great experience for all of our merchants.
k9s - 🐶 Kubernetes CLI To Manage Your Clusters In Style!