examples VS checkov

3. Reading existing resources from a cluster

3, in particular, is kind of a whole other type of tool, to view/debug existing infra, instead of creating it, but the UI has the right shape to do that extremely well, too.

I agree with other comments that adding a default example to the demo would be nice. I imported this manifest, and it worked pretty well: https://github.com/kubernetes/examples/blob/master/guestbook...

Kubernetes Rollback Examples: GitHub Repository

$ git clone https://github.com/dwmkerr/terraform-consul-cluster.git $ git clone https://github.com/splunk/splunk-aws-cloudformation.git $ git clone https://github.com/webdevops/Dockerfile.git $ git clone https://github.com/softprops/serverless-aws-rust-http.git $ git clone https://github.com/kubernetes/examples.git $ git clone https://github.com/prometheus-community/helm-charts.git

Then for the initators (k8s pods), just reference the builtin iSCSI CSI driver in your deployment's [volume config](https://github.com/kubernetes/examples/blob/master/volumes/iscsi/iscsi.yaml).

Reference: https://github.com/kubernetes/examples

I am setting up a kubernetes lab using one node only and learning to setup kubernetes nfs. I am following kubernetes nfs example step by step from the following link: https://github.com/kubernetes/examples/tree/master/staging/volumes/nfs

It doesn't seem like there are a lot of good open source k8's projects. One I could find was the kubernetes/examples repo.

Kubernetes has a decent example of using GlusterFS for Volume storage: fun documentation link

Now let's deploy something that will return some results. Kubernetes has multiple example applications available in a Github repo. We are going to deploy the Guestbook App with these commands:

Checkov https://www.checkov.io A static analysis tool to scan infrastructure code for misconfigs, secrets, and best practice violations.

PR #6647

Checkov infrastructure-as-code misconfig detection

Link do repo

Link: https://github.com/bridgecrewio/checkov

Checkov: static analysis for IaC

Prior to deploying kubernetes manifest files to EKS Cluster, supplementary steps need to be added to prevent security and misconfiguration issue by using both *Checkov *and Trivy . Also, we will use seperate ArgoCD account from admin user that we’ve used in the previous lab. This will follow ArgoCD RBAC rule to secure ArgoCD and EKS cluster ultimately.

The workflow also includes a step for infrastructure code scan to scan Terraform code. This uses Checkov action against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

1. Checkov: https://github.com/bridgecrewio/checkov Checkov is a static code analysis tool that helps developers prevent cloud misconfigurations during the development phase by scanning Terraform, CloudFormation, Kubernetes, and more.

Checkov Owner/Maintainer: Prisma Cloud by Palo Alto Networks (acquired in 2021) Age: First released on GitHub on March 31st, 2021 License: Apache License 2.0