Kubesec is an open-source tool to perform security analysis of the Kubernetes resources(pods, deployments, etc.). Kubesec read the manifest resource file and conducted grading in terms of security aspects. The better security practices in the manifest file would result in higher grading by Kubesec and vice versa.Developers can manually execute this lightweight tool to grade […]
This article will showcase how to extend kubectl using kubectl plugins. Sometimes the out-of-the-box kubectl is not enough to provide the desired interaction with the API server. Many times users end up writing scripts, getting complex desired results. Therefore, Kubectl plugins will introduce a new kubectl subcommand to add custom features.Several open-source plugins are available
Ever wondered if your Kubernetes Cluster is following the security practices? A tool called Kube-bench by Aquasecurity provides automated checks to validate the cluster is running as per CIS Kubernetes benchmarks. This tool runs many checks to validate the configuration of the cluster and provide a benchmark score. This helps users to find the implementation of security practices
Is your Kubernetes cluster following best security practices ? Read More »
In this post, we will see how Kubespray could be used to create a cluster on an On-Prem environment(or on your laptop with a bunch of virtual machines). Kubespray is a “Certified Kubernetes Distributions, Hosted Platforms, and Installers.” You can create a Kubernetes cluster using kubespray with minimal configuration in the inventory file. However, It
How to create Kubernetes Cluster fast using Kubespray? Read More »
I recently spawned a Virtual private server(VPS) with public IP and thought everything was done and started working on my application. Then I observed that /var/log/auth.log was growing fast, which made me curious, and I opened the /var/log/auth.log file and noticed that someone was brute-forcing to SSH into my machine. At this moment, I learned
