kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
# https://github.com/aquasecurity/kube-bench

#k8s #YAML #KubeBench #KubernetesSecurity #cisSecurity #Kubernetes

Kubernetes Hardening Guidance

The NSA and CISA have published today a Kubernetes security-hardening guide

https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/1/CTR_KUBERNETES%20HARDENING%20GUIDANCE.PDF

#kubernetes #hardening #security

Kubernetes Security Checklist and Requirements

https://github.com/Vinum-Security/kubernetes-security-checklist

#kubernetes #checklist

KubiScan

KubiScan helps cluster administrators identify permissions that attackers could potentially exploit to compromise the clusters. This can be especially helpful on large environments where there are lots of permissions that can be challenging to track. KubiScan gathers information about risky roles\clusterroles, rolebindings\clusterrolebindings, users and pods, automating traditional manual processes and giving administrators the visibility they need to reduce risk.

https://github.com/cyberark/KubiScan

#kubernetes #rbac #scan #security #tools

Container Security Checklist

Checklist for container security devsecops practices

https://github.com/krol3/container-security-checklist

#kubernetes #docker #security #cheatsheet #blueteam