kube bench

We have hosted the application kube bench in order to run this application in our online workstations with Wine or directly.

Quick description about kube bench:

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Trivy, the all-in-one cloud-native security scanner, can be deployed as a Kubernetes Operator inside a cluster. Both, the Trivy CLI, and the Trivy Operator support CIS Kubernetes Benchmark scanning among several other features. There are multiple ways to run kube-bench. You can run kube-bench inside a pod, but it will need access to the host's PID namespace in order to check the running processes, as well as access to some directories on the host where config files and other files are stored.

Features:

• The supplied job.yaml file can be applied to run the tests as a job
• Documentation available
• Examples available
• CIS Scanning as part of Trivy and the Trivy Operator
• Tests are configured with YAML files
• Checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark

Programming Language: Go.
Categories: