Open Source Tool for Checking K8s Configuration for NSA Hardening Guidance

2 pointschmod-7771 comment

Hi All,

We have updated Kubescape (https://github.com/armosec/kubescape) so you can now easily integrate it with your Jenkins or other CI tools, and scan k8s manifest files so you can make sure you are up with the guidance as early as possible. Hope you like it! let us know.

View on HN

check this article by -Lachlan Evenson https://medium.com/@LachlanEvenson/kubernetes-hardening-usin...

You can also run Kubescape against Kubernetes manifests which is a great way to stop violations before the resources are deployed to a Kubernetes cluster. The output is identical as scanning a running Kubernetes cluster as seen above

Reply on news.ycombinator.com