Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Projects in Awesome Lists tagged with kubernetes-security

A curated list of projects in awesome lists tagged with kubernetes-security .

https://github.com/aquasecurity/kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

cis-benchmark cis-kubernetes-benchmark cis-security hacktoberfest kube-bench kubernetes kubernetes-security openshift

Last synced: 16 Dec 2024

https://github.com/madhuakula/kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

blueteam cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking infrastructure k8s kubernetes kubernetes-goat kubernetes-security owasp pentesting redteam security vulnerable-app

Last synced: 17 Dec 2024

https://github.com/walidshaari/certified-kubernetes-security-specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

apparmor certification cks ckss exam-objectives falco kernel-hardening kube-bench kube-hunter kubernetes kubernetes-security mitre-attack open-policy-agent os-footprint pod pod-security-policy policy seccomp security trivy

Last synced: 18 Dec 2024

https://github.com/walidshaari/Certified-Kubernetes-Security-Specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

apparmor certification cks ckss exam-objectives falco kernel-hardening kube-bench kube-hunter kubernetes kubernetes-security mitre-attack open-policy-agent os-footprint pod pod-security-policy policy seccomp security trivy

Last synced: 15 Nov 2024

https://github.com/hummerrisk/hummerrisk

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

cloud-custodian cloud-native cloud-native-security compliance compliance-as-code cspm k8s-security kubernetes-security prowler sbom security trivy vulnerability

Last synced: 21 Dec 2024

https://github.com/HummerRisk/HummerRisk

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

cloud-custodian cloud-native cloud-native-security compliance compliance-as-code cspm k8s-security kubernetes-security prowler sbom security trivy vulnerability

Last synced: 12 Nov 2024

https://github.com/paralus/paralus

All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.

access-management cloud-security k8s-access-management kubernetes-security zero-trust-security ztka

Last synced: 19 Dec 2024

https://github.com/edgelesssys/constellation

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

cloud-security confidential-computing data-encryption kubernetes kubernetes-security

Last synced: 17 Dec 2024

https://github.com/ViktorUJ/cks

Open-source Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes exams (CKA ,CKS , CKAD)

aws certified-kubernetes-security-specialist cka cka-exam-questions ckad ckad-exam-questions cks cks-exam-questions devops eks falco k8s kubeadm kubernetes kubernetes-cluster kubernetes-learning kubernetes-security learn-kubernetes opa terraform

Last synced: 13 Nov 2024

https://github.com/hxsecurity/terraformgoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

aws-security azure-security cloud-security cloudsecurity gcp gcp-security kubernetes-security security terraform

Last synced: 15 Dec 2024

https://github.com/HXSecurity/TerraformGoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

aws-security azure-security cloud-security cloudsecurity gcp gcp-security kubernetes-security security terraform

Last synced: 17 Nov 2024

https://github.com/Vinum-Security/kubernetes-security-checklist

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

checklist cloud-native-security container-security devsecops kubernetes kubernetes-security requirments security

Last synced: 11 Nov 2024

https://github.com/cruise-automation/k-rail

Kubernetes security tool for policy enforcement

k8s kubernetes kubernetes-security policy security

Last synced: 01 Nov 2024

https://github.com/darkbitio/mkit

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

aks aws azure eks gcp gke k8s kubernetes kubernetes-security

Last synced: 02 Nov 2024

https://github.com/paloaltonetworks/rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

kubernetes kubernetes-rbac kubernetes-security prisma-cloud rbac security

Last synced: 15 Dec 2024

https://github.com/datadog/managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

aws-eks aws-security eks kubernetes kubernetes-security managed-kubernetes

Last synced: 17 Dec 2024

https://github.com/DataDog/managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

aws-eks aws-security eks kubernetes kubernetes-security managed-kubernetes

Last synced: 07 Nov 2024

https://github.com/Metarget/k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

container-escape container-injection container-security fileless-attack hack-k8s k8s kubernetes-security post-penetration reverse-shell

Last synced: 11 Nov 2024

https://github.com/metarget/k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

container-escape container-injection container-security fileless-attack hack-k8s k8s kubernetes-security post-penetration reverse-shell

Last synced: 07 Nov 2024

https://github.com/r0binak/MTKPI

🧰 Multi Tool Kubernetes Pentest Image

container-security image kubernetes kubernetes-security pentest redteam

Last synced: 17 Nov 2024

https://github.com/kubewarden/kubewarden-controller

Manage admission policies in your Kubernetes cluster with ease

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 21 Dec 2024

https://github.com/abdennour/certified-kubernetes-security-specialist

References for CKS Exam Objectives - Certified Kubernetes Security Specialist

certification cks ckss golang hardening kubernetes kubernetes-security security

Last synced: 17 Nov 2024

https://github.com/kubewarden/policy-server

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

hacktoberfest kubernetes kubernetes-security kubernetes-webhook policy policy-as-code rust webassembly

Last synced: 14 Dec 2024

https://github.com/falcosecurity-retire/falco-security-workshop

Container Security Workshop covering using Falco on Kubernetes.

cncf container-security containers docker kubernetes kubernetes-security

Last synced: 09 Nov 2024

https://github.com/kube-tarian/tarian

Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runtime processes monitoring, automated actions based on configure-actions, analytics, alerting and also sharing detections with community. Maybe save from Ransomware. Shift-Left your threat detection. Shift Right threat elimination.

anti-malware anti-virus antimalware antivirus antivirus-software cloudnative containers devsecops ebpf hacktoberfest kubernetes kubernetes-antimalware kubernetes-security microservices runtime-security security security-hardening security-tools shiftleft tarian

Last synced: 11 Oct 2024

https://github.com/openclarity/kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

kubernetes kubernetes-security sbom scanner security supply-chain vulnerabilities

Last synced: 15 Oct 2024

https://github.com/kubescape/github-action

GitHub action to run Kubescape scans

github-actions kubernetes-security kubescape

Last synced: 18 Dec 2024

https://github.com/kubewarden/deprecated-api-versions-policy

A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/verify-image-signatures

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kube-tarian/sigrun

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

artifacts container-security containers containersecurity cosign fulcio gatekeeper kubernetes kubernetes-security kubernetessecurity opa open-policy-agent pods policy-as-code rekor signature signature-verification sigstore

Last synced: 12 Nov 2024

https://github.com/kubewarden/go-policy-template

A template repository to quickly scaffold a Kubewarden policy written with Go language

go golang hacktoberfest kubernetes kubernetes-security kubewarden-policy-template policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/k8s-objects-generator

CLI tool that generates Kubernetes Go types that can be used with TinyGo starting from the official OpenAPI spec

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/policy-fetcher

Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/pod-privileged-policy

A Kubewarden Policy that limits the ability to create privileged containers

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/user-group-psp-policy

This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/allowed-proc-mount-types-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/allow-privilege-escalation-psp-policy

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/apparmor-psp-policy

A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/trusted-repos-policy

A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to

hacktoberfest kubernetes kubernetes-compliance kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/env-variable-secrets-scanner-policy

A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/seccomp-psp-policy

A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/allowed-fsgroups-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/github-actions

GitHub actions used by the Kubewarden project

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/audit-scanner

Reports evaluation of existing Kubernetes resources with your already deployed Kubewarden policies.

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/k8s-objects

Experimental: Kubernetes Go types that can be used with TinyGo

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/hostpaths-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of hostpaths

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/afyazici/kubernetes-turkce-kaynak

Youtube'da TechWorld with Nina kanalınında yer alan 4 saatlik "Kubernetes Tutorial for Beginners [FULL COURSE in 4 Hours]" videosunu döküman formatında Türkçeye çeviriyorum.

kubernetes kubernetes-cluster kubernetes-controller kubernetes-deployment kubernetes-manifests kubernetes-monitoring kubernetes-operator kubernetes-security kubernetes-service kubernetes-setup obsidian-md obsidian-vault turkce-dokuman turkce-kaynak

Last synced: 14 Oct 2024

https://github.com/kubewarden/pod-runtime-class-policy

A Kubewarden Policy that controls the usage of Pod runtimeClass

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/volumemounts-policy

A Kubewarden Policy that controls the usage of `volumeMounts`

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/environment-variable-policy

A Kubewarden Policy that controls the usage of environment variables

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/volumes-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of volumes

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/sanjid133/vault-kube

Authenticate and retrieve data from @hashicorp-vault via @kubernetes auth method

hashicorp-vault init-container kubernetes kubernetes-secrets kubernetes-security

Last synced: 22 Nov 2024

https://github.com/kubewarden/rancher-kubectl-builder

Workflow to rebuild and sign rancher/kubectl image

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/utils

Utils scripts used by the Kubewarden team and users.

hacktoberfest kubernetes kubernetes-security policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/host-namespaces-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/echo

A Kubewarden Policy that echoes Kubernetes' AdmissionReview objects

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/namespace-label-propagator-policy

Kubewarden policy designed to automatically propagate labels defined in a Kubernetes namespace to the associated resources within that namespace

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/flexvolume-drivers-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/selinux-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 14 Dec 2024

https://github.com/kubewarden/persistentvolumeclaim-storageclass-policy

Policy that validates and adjusts the usage of StorageClasses in PersistentVolumeClaims

hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Last synced: 14 Dec 2024