« Previous 1 2 3
Secure Kubernetes with Kubescape
Inspection
Conclusions
Kubescape is a powerful tool for efficiently monitoring running Kubernetes instances and resources that are not yet active in the cluster to help admins navigate the highly complex world of Kubernetes far more safely than would be the case without the tool. Because Kubernetes comprises so many layers and levels and potential add-ons, admins find it difficult to keep track of all the factors they need to check without an automatic helper in their toolbox. Kubescape is a massive help because the report shown at the end of a scan gives you a quick overview of what needs to be done. The software is available under a free license, is free of charge, and can be put into operation quickly, so it should be part of the standard repertoire of every company that uses Kubernetes or runs Kubernetes in its infrastructure.
Infos
- Kubescape: https://github.com/kubescape/kubescape
- Kubescape releases: https://github.com/kubescape/packaging/releases
- Installing kubectl: https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/
- Controls in Kubescape: https://hub.armosec.io/docs/controls
The Author
Freelance journalist Martin Gerhard Loschwitz focuses primarily on topics such as OpenStack, Kubernetes, and Chef.
« Previous 1 2 3
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
Nested Kubernetes with Loft
Kubernetes has limited support for multitenancy, so many admins prefer to build multiple standalone Kubernetes clusters that eat up resources and complicate management. As a solution, Loft launches any number of clusters within the same control plane. -
Safeguard and scale containers
Security, deployment, and updates for thousands of nodes prove challenging in practice, but with CoreOS and Kubernetes, you can orchestrate container-based web applications in large landscapes. -
Monitoring container clusters with Prometheus
In native cloud environments, classic monitoring tools reach their limits when monitoring transient objects such as containers. Prometheus closes this gap, which Kubernetes complements, thanks to its conceptual similarity, simple structure, and far-reaching automation. -
Exploring Kubernetes with Minikube
Minikube lets you set up Kubernetes in a local environment, so you can get some practice before rolling it out in a network or cloud setting. -
Linking Kubernetes clusters
When Kubernetes needs to scale applications, it searches for free nodes that meet a container's CPU and main memory requirements; however, when the existing hardware is at full capacity, the Kubernetes Cluster Federation project (KubeFed) takes the pain out of adding clusters.