kube-bench

• https://github.com/aquasecurity/kube-bench

kubectl apply -f https://raw.githubusercontent.com/aquasecurity/kube-bench/main/job.yaml
kubectl logs -l app=kube-bench


6 checks FAIL
29 checks WARN
0 checks INFO

== Summary total ==
61 checks PASS
17 checks FAIL
52 checks WARN
0 checks INFO

Errors

Error from server (BadRequest): container "kube-bench" in pod "kube-bench-8x5c7" is waiting to start: CreateContainerError

Related

• Kube-hunter
• Aqua security

See also

• CIS, CIS AWS Foundations Benchmark controls, CIS Benchmarks, K8s, Security standards, CIS Hardened Images: Level 2, Level 1, Ansible Lockdown
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, containerSecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing, security context, readOnlyRootFilesystem, allowPrivilegeEscalation, kube-bench
• Aquasec, Trivy, aquasecurity.github.io, kind: ConfigAuditReport, Aqua Enforcers, tfsec, Kube Enforcer, kube-bench