#
kubernetes-security
Here are 78 public repositories matching this topic...
brettcurtis
commented
Feb 5, 2022
Describe the issue
I wouldn't expect to get the alert if not defined explicitly.
Examples
https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.0.0
Version (please complete the following information):
- Checkov Version 2.0.780
Kubernetes Goat 🐐 is a "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🔐
docker
kubernetes
infrastructure
security
microservices
helm
container
hacking
owasp
cloud-native
pentesting
cloudsecurity
devsecops
cloud-security
container-security
vulnerable-app
kubernetes-security
kubernetes-goat
-
Updated
Feb 14, 2022 - HTML
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
kubernetes
security
policy
pod
certification
seccomp
apparmor
falco
exam-objectives
mitre-attack
open-policy-agent
kernel-hardening
kube-bench
pod-security-policy
cks
kubernetes-security
trivy
kube-hunter
ckss
os-footprint
-
Updated
Jan 17, 2022 - AGS Script
A Blazing fast Security Auditing tool for Kubernetes
docker
kubernetes
aws
security
devops
security-audit
automation
azure
containers
gke
infosec
security-tools
docker-security
container-security
aks
eks
informationsecurity
kubernetes-security
-
Updated
Sep 25, 2021 - Python
Kubernetes security notes and best practices
kubernetes
checklist
security
best-practices
kubernetes-cluster
attacker
vulnerabilities
kubernetes-security
-
Updated
Nov 29, 2021 - Shell
A curated list of awesome Kubernetes security resources
-
Updated
Dec 14, 2021
Kubei is a flexible Kubernetes runtime scanner, scanning images of worker and Kubernetes nodes to provide an accurate vulnerability assessment
-
Updated
Feb 23, 2022 - Go
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
kubernetes
container
target
cloud-native
vulnerabilities
kernel-exploitation
privilege-escalation
container-security
kubernetes-security
container-escape
cloud-native-security
vulnerable-infrastructure
vulnerable-scenes
vulnerable-infrastructures
-
Updated
Feb 23, 2022 - Python
Kubernetes security tool for policy enforcement
-
Updated
Feb 22, 2022 - Go
MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.
-
Updated
Sep 16, 2021 - Dockerfile
Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)
kubernetes
checklist
security
devsecops
container-security
kubernetes-security
cloud-native-security
requirments
-
Updated
Dec 13, 2021
awesome resources about cloud native security 🐿
docker
kubernetes
serverless
container
cloud-computing
k8s
cloud-native
cloud-security
docker-security
container-security
serverless-security
kubernetes-security
container-escape
cloud-native-security
-
Updated
Dec 19, 2021
A curated list of Falco related tools, frameworks, blogs, podcasts, and articles
awesome
falco
kubernetes-security
falco-security
container-runtime-security
falcosidekick
sysdig-falco
falco-outputs
-
Updated
Jul 28, 2021
k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.
reverse-shell
k8s
container-injection
container-security
kubernetes-security
post-penetration
container-escape
hack-k8s
fileless-attack
-
Updated
Aug 30, 2021 - Shell
References for CKS Exam Objectives - Certified Kubernetes Security Specialist
-
Updated
Oct 14, 2021
Container Security Workshop covering using Falco on Kubernetes.
-
Updated
Apr 30, 2021 - Python
flavio
commented
Mar 20, 2021
Right now policy-server will always download all the policies defined inside of the policies.yml file, even if they have already been downloaded.
This is sub-optimal, changing a policy setting requires to restart the policy-server, which then causes all the policies to be downloaded again.
Acceptance criteria
policies.ymlfile is extended to allow something similar to Kubernetes'
Shortlist of preparation materials to pass CKS exam
-
Updated
Oct 15, 2020 - HTML
Open
Improve test suite
andylibrian
commented
Oct 12, 2021
This issue is a placeholder for someone who wants to contribute to improve the test suite:
- unit tests
- end-to-end tests (with and without k8s)
See also contributing.md
GCP GOAT is the vulnerable application for learn the GCP Security
-
Updated
Aug 10, 2021 - HTML
Recreation of common Pod Security Policy configuration in other common Kubernetes policy engines
kubernetes
yaml
security
opa
k8s
psp
gatekeeper
hacktoberfest
policy-as-code
podsecuritypolicies
pod-security-policy
kubernetes-security
kyverno
kubewarden
podsecuritypolicy
-
Updated
Feb 23, 2022 - TypeScript
-
Updated
Jul 14, 2021 - Go
Simulates a compromise in a cloud and container environment
kubernetes
aws
security
cloud-security
cloud-forensics
kubernetes-security
cloudforensics
docker-forensics
kubernetes-forensics
aws-forensics
azure-forensics
container-forensics
-
Updated
Feb 16, 2022 - Shell
Kubernetes Mutating and Validating Webhooks written in Sanic
-
Updated
Feb 23, 2022 - Python
Terraform provider to create OPA Gatekeeper v3 constraints and templates
-
Updated
Jun 30, 2020 - Go
A Kubewarden rust policy template to be used with cargo-generate
kubernetes
rust
webassembly
hacktoberfest
policy-as-code
kubernetes-security
kubewarden-policy-template
-
Updated
Feb 10, 2022 - Rust
Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.
-
Updated
Feb 24, 2022 - Rust
Kubewarden's documentation
-
Updated
Feb 24, 2022 - Handlebars
A template repository to quickly scaffold a Kubewarden policy written with Go language
go
kubernetes
golang
webassembly
hacktoberfest
policy-as-code
kubernetes-security
kubewarden-policy-template
-
Updated
Feb 14, 2022 - Go
Improve this page
Add a description, image, and links to the kubernetes-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the kubernetes-security topic, visit your repo's landing page and select "manage topics."
We could add support for the Rancher 2.2.x hardening guide. This would require a set of test files under a new
cfg/rancher-2.2directory.