This commit is contained in:
Inaki Fernandez
2021-08-15 21:03:31 +02:00
parent 3ccc5c3aa5
commit b83574d329
2 changed files with 2 additions and 0 deletions
+1
View File
@@ -309,6 +309,7 @@
* [cdk8s](https://github.com/cdk8s-team/cdk8s) Define Kubernetes native apps and abstractions using object-oriented programming
* [Havener](https://github.com/homeport/havener) Think of it as a swiss army knife for Kubernetes tasks.
* [KFServing 🌟](https://github.com/kubeflow/kfserving) Serverless Inferencing on Kubernetes. KFServing provides a Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks. It aims to solve production model serving use cases by providing performant, high abstraction interfaces for common ML frameworks like Tensorflow, XGBoost, ScikitLearn, PyTorch, and ONNX.
* [Kubescape 🌟](https://github.com/armosec/kubescape) **kubescape is the first tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA.** Tests are configured with YAML files, making this tool easy to update as test specifications evolve.
## Porter
- [Porter](https://porter.sh/) Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command - [github.com/getporter/porter](https://github.com/getporter/porter)
+1
View File
@@ -1662,6 +1662,7 @@ kubectl get secret <secret-name> --namespace=<source>-o yaml | sed s/names
- Use log auditing so that administrators can monitor activity and be alerted to potential malicious activity.
- Periodically review all Kubernetes settings and use vulnerability scans to help ensure risks are appropriately accounted for and security patches are applied.
* [cloud.redhat.com: OpenShift and the NSA-CISA Kubernetes Hardening Guidance](https://cloud.redhat.com/blog/openshift-and-the-nsa-cisa-kubernetes-hardening-guidance) Red Hat OpenShift is the quickest path to meeting the NSAs Kubernetes hardening guidance
* [Kubescape 🌟](https://github.com/armosec/kubescape) **kubescape is the first tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA.** Tests are configured with YAML files, making this tool easy to update as test specifications evolve.
<center>
[![kubernetes security mindmap](images/k8s_securitymindmap.jpg)](https://www.blackhat.com/)