netfetch
KubeArmor
| netfetch | KubeArmor | |
|---|---|---|
| 2 | 3 | |
| 132 | 1,279 | |
| - | 2.6% | |
| 9.5 | 9.5 | |
| 9 days ago | 3 days ago | |
| Go | Go | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
netfetch
-
Who's actually using network policies in their clusters? Why/why not?
https://github.com/deggja/netfetch iDK there might already be tools out there that does this, but I could not find any.
-
Kubernetes CLI tool - Netfetch
So I created a small CLI tool to scan clusters for network policies and identify un-targeted pods. You can check it out here: https://github.com/deggja/netfetch
KubeArmor
-
Implement DevSecOps to Secure your CI/CD pipeline
Falco is a cloud native Kubernetes threat detection tool. It can detect unexpected behavior, intrusions, and data theft in real time. In the backend, it uses Linux eBPF technology to trace your system and applications at runtime. For example, it can detect if someone tries to read a secret file inside a container, access a pod as a root user, etc, and trigger a webhook or send logs to the monitoring system. There are similar tools like Tetragon, KubeArmor, and Tracee which also provide Kubernetes runtime security.
- KubeArmor: Container-Aware Runtime Security Enforcement System Using LSM
-
The State of FOSS in India
We're building a KubeArmor - a container-aware runtime security enforcement system n using LSMs - between India, Korea and the US
https://github.com/accuknox/kubearmor
What are some alternatives?
froggy-service - 邱威傑市民服務網站
gvisor - Application Kernel for Containers
website - The frontend website of the PS2Alerts statistics system, displaying real-time metrics and aggregated statistics to players of the game Planetside 2.
cilium - eBPF-based Networking, Security, and Observability
dashboard - The Rancher UI
datree - Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
eBPF-Guide - eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.
jaeger - CNCF Jaeger, a Distributed Tracing Platform
cronn - cron service with extras
hubble - Hubble - Network, Service & Security Observability for Kubernetes using eBPF
tetragon - eBPF-based Security Observability and Runtime Enforcement
frappe_docker - Docker images for production and development setups of the Frappe framework and ERPNext