{"id":20969994,"url":"https://github.com/mondoohq/mondoo-operator","last_synced_at":"2025-05-08T20:56:52.476Z","repository":{"id":36954732,"uuid":"446335689","full_name":"mondoohq/mondoo-operator","owner":"mondoohq","description":"☸️ Mondoo Client Kubernetes Operator","archived":false,"fork":false,"pushed_at":"2025-01-17T08:17:21.000Z","size":2731,"stargazers_count":38,"open_issues_count":38,"forks_count":14,"subscribers_count":11,"default_branch":"main","last_synced_at":"2025-01-17T09:06:45.744Z","etag":null,"topics":["assessment","kubernetes","kubernetes-operator","operator","security","security-audit"],"latest_commit_sha":null,"homepage":"https://mondoo.com","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mondoohq.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-01-10T08:19:23.000Z","updated_at":"2024-12-11T11:00:27.000Z","dependencies_parsed_at":"2023-11-20T06:23:42.857Z","dependency_job_id":"bde7b37e-a12d-4459-8cba-19522d632c1d","html_url":"https://github.com/mondoohq/mondoo-operator","commit_stats":{"total_commits":764,"total_committers":16,"mean_commits":47.75,"dds":0.6740837696335078,"last_synced_commit":"5eccaf42813595c923b853b52175cbbefe6501b0"},"previous_names":[],"tags_count":212,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mondoohq%2Fmondoo-operator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mondoohq%2Fmondoo-operator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mondoohq%2Fmondoo-operator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mondoohq%2Fmondoo-operator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mondoohq","download_url":"https://codeload.github.com/mondoohq/mondoo-operator/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":235655380,"owners_count":19024616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["assessment","kubernetes","kubernetes-operator","operator","security","security-audit"],"created_at":"2024-11-19T03:56:06.087Z","updated_at":"2025-01-26T02:09:39.549Z","avatar_url":"https://github.com/mondoohq.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Mondoo Operator for Kubernetes\n\n[![Tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/tests.yaml)\n[![Edge integration tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/edge-integration-tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/edge-integration-tests.yaml)\n[![Cloud tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/cloud-tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/cloud-tests.yaml)\n\n\u003e **Project Status**: This project is stable. Any API and CRD changes will be handled in way where previous versions are kept working or migrated.\n\n![mondoo operator illustration](.github/social/preview.jpg)\n\n## Overview\n\nThe **Mondoo Operator** provides a new [Kubernetes](https://kubernetes.io/) native way to do a security assessment of your whole Kubernetes Cluster. The purpose of this project is to simplify and automate the configuration for a Mondoo-based security assessment for Kubernetes clusters.\n\nThe Mondoo Operator provides the following features:\n\n- Continuous validation of deployed workloads\n- Continuous validation of Kubernetes nodes **without** privileged access\n- Admission Controller\n\nIt is backed by Mondoo's powerful policy-as-code engine [cnspec](https://mondoo.com/docs/cnspec/cnspec-about/) and [MQL](https://mondoo.com/docs/mql/resources/). Mondoo ships out-of-the-box security policies for:\n\n- CIS Kubernetes Benchmarks\n- CIS AKS/EKS/GKE/OpenShift Benchmarks\n- NSA/CISA Kubernetes Hardening Guide\n- Kubernetes Cluster and Workload Security\n- Kubernetes Best Practices\n\n![Architecture](docs/img/architecture.svg)\n\n## Getting Started\n\nThe **Mondoo Operator** can be installed via different methods depending on your Kubernetes workflow:\n\n- [User manual](docs/user-manual.md)\n\n## Tested Kubernetes Environments\n\nThe following Kubernetes environments are tested:\n\n- AWS EKS 1.23, 1.24, 1.25, and 1.26\n- Azure AKS 1.24, 1.25, and 1.26\n- GCP GKE 1.23, 1.24, 1.25, and 1.26\n- Minikube with Kubernetes versions 1.24, 1.25, 1.26, and 1.27\n- Rancher RKE1 1.22 and 1.23\n- K3S 1.24, 1.25, 1.26, and 1.27\n\n## Documentation\n\nPlease see the [docs](./docs) directory for more in-depth information.\n\n## Contributing\n\nMany files (documentation, manifests, ...) are auto-generated. Before proposing a pull request:\n\n1. Commit your changes.\n2. Run `make generate` and `make test`.\n3. Commit the generated changes.\n\n### Running the integration tests locally\n\nTo run the integration tests locally copy the `.env.example` file:\n\n```bash\ncp .env.example .env\n```\n\nGo to Mondoo Platform and create an API token for an organization of choice. Add the API token to the `.env` file. Double-check that the API is set to the correct environment, then run:\n\n```bash\nmake test/integration\n```\n\n## Security\n\nIf you find a security vulnerability related to the Mondoo Operator, please do not report it by opening a GitHub issue. Instead, send an email to [security@mondoo.com](mailto:security@mondoo.com)\n\n## Join the community!\n\nJoin the [Mondoo Community GitHub Discussions](https://github.com/orgs/mondoohq/discussions) to collaborate on policy as code and security automation.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmondoohq%2Fmondoo-operator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmondoohq%2Fmondoo-operator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmondoohq%2Fmondoo-operator/lists"}