diff --git a/.gitignore b/.gitignore index 5ce5b96..1dee0a2 100644 --- a/.gitignore +++ b/.gitignore @@ -1,4 +1,3 @@ *.pyc -Dockerfile .dockerignore -*aqua* \ No newline at end of file +*aqua* diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..68a12ae --- /dev/null +++ b/Dockerfile @@ -0,0 +1,12 @@ +FROM python:2.7.15-alpine3.7 + +RUN apk add --update \ + linux-headers \ + build-base + +RUN mkdir -p /kube-hunter +COPY . /kube-hunter +WORKDIR /kube-hunter +RUN pip install -r requirements.txt + +ENTRYPOINT ["python", "kube-hunter.py"] diff --git a/job.yaml b/job.yaml new file mode 100644 index 0000000..f453667 --- /dev/null +++ b/job.yaml @@ -0,0 +1,14 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: kube-hunter +spec: + template: + spec: + containers: + - name: kube-hunter + image: aquasec/kube-hunter + command: ["python", "kube-hunter.py"] + args: ["--pod"] + restartPolicy: Never + backoffLimit: 4 diff --git a/kube-hunter.py b/kube-hunter.py index 4fe677e..1f5e973 100755 --- a/kube-hunter.py +++ b/kube-hunter.py @@ -118,9 +118,5 @@ def main(): handler.free() logging.debug("Cleaned Queue") - if config.pod: - while True: - time.sleep(5) - if __name__ == '__main__': main()