View Code? Open in Web Editor
NEW
This project forked from madhuakula /kubernetes-goat
Kubernetes Goat 🐐 is a "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🔐
Home Page: https://madhuakula.com/kubernetes-goat
License: MIT License
Dockerfile 1.67%
HTML 94.12%
Shell 2.48%
Python 0.38%
JavaScript 0.45%
Go 0.43%
Smarty 0.11%
Mustache 0.38%
iac_demo's People
iac_demo's Issues
deployment-kind.yaml - Ensure that Service Account Tokens are only mounted where necessary
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Ensure that Service Account Tokens are only mounted where necessary
deployment.yaml - Minimize the admission of containers with capabilities assigned
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Minimize the admission of containers with capabilities assigned
deployment-kind.yaml - Containers should run as a high UID to avoid host conflict
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Containers should run as a high UID to avoid host conflict
deployment.yaml - Liveness Probe Should be Configured
/scenarios/internal-proxy/deployment.yaml:[1-39]
📃 File Type:
kubernetes
⛔ Details - Liveness Probe Should be Configured
master-job.yaml - Ensure that Service Account Tokens are only mounted where necessary
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Ensure that Service Account Tokens are only mounted where necessary
job.yaml - The default namespace should not be used
/scenarios/batch-check/job.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - The default namespace should not be used
job.yaml - Image Tag should be fixed - not latest or blank
/scenarios/batch-check/job.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - Image Tag should be fixed - not latest or blank
node-job.yaml - Containers should run as a high UID to avoid host conflict
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Containers should run as a high UID to avoid host conflict
deployment.yaml - Memory limits should be set
/scenarios/hidden-in-layers/deployment.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - Memory limits should be set
deployment.yaml - Ensure that Service Account Tokens are only mounted where necessary
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Ensure that Service Account Tokens are only mounted where necessary
deployment.yaml - Memory requests should be set
/scenarios/hidden-in-layers/deployment.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - Memory requests should be set
deployment.yaml - CPU requests should be set
/scenarios/hidden-in-layers/deployment.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - CPU requests should be set
deployment.yaml - Minimize wildcard use in Roles and ClusterRoles
/scenarios/hunger-check/deployment.yaml:[7-16]
📃 File Type:
kubernetes
⛔ Details - Minimize wildcard use in Roles and ClusterRoles
deployment-kind.yaml - Minimize the admission of root containers
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Minimize the admission of root containers
deployment.yaml - Image Tag should be fixed - not latest or blank
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Image Tag should be fixed - not latest or blank
node-job.yaml - Apply security context to your pods and containers
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Apply security context to your pods and containers
deployment.yaml - Use read-only filesystem for containers where possible
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Use read-only filesystem for containers where possible
node-job.yaml - Memory requests should be set
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Memory requests should be set
node-job.yaml - Ensure that Service Account Tokens are only mounted where necessary
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Ensure that Service Account Tokens are only mounted where necessary
master-job.yaml - Containers should not share the host process ID namespace
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Containers should not share the host process ID namespace
deployment.yaml - Containers should not share the host network namespace
/scenarios/docker-bench-security/deployment.yaml:[12-92]
📃 File Type:
kubernetes
⛔ Details - Containers should not share the host network namespace
master-job.yaml - Containers should not run with allowPrivilegeEscalation
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Containers should not run with allowPrivilegeEscalation
job.yaml - CPU requests should be set
/scenarios/batch-check/job.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - CPU requests should be set
master-job.yaml - Minimize the admission of containers with the NET_RAW capability
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Minimize the admission of containers with the NET_RAW capability
deployment.yaml - Do not expose the docker daemon socket to containers
/scenarios/health-check/deployment.yaml:[1-34]
📃 File Type:
kubernetes
⛔ Details - Do not expose the docker daemon socket to containers
job.yaml - Ensure that the seccomp profile is set to docker/default or runtime/default
/scenarios/batch-check/job.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - Ensure that the seccomp profile is set to docker/default or runtime/default
node-job.yaml - Memory limits should be set
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Memory limits should be set
node-job.yaml - Ensure that the seccomp profile is set to docker/default or runtime/default
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Ensure that the seccomp profile is set to docker/default or runtime/default
deployment.yaml - Containers should not share the host process ID namespace
/scenarios/docker-bench-security/deployment.yaml:[12-92]
📃 File Type:
kubernetes
⛔ Details - Containers should not share the host process ID namespace
clusterrole.yaml - Minimize wildcard use in Roles and ClusterRoles
/infrastructure/helm-tiller/pwnchart/templates/clusterrole.yaml:[3-10]
📃 File Type:
helm
⛔ Details - Minimize wildcard use in Roles and ClusterRoles
deployment-kind.yaml - The default namespace should not be used
/scenarios/health-check/deployment-kind.yaml:[34-44]
📃 File Type:
kubernetes
⛔ Details - The default namespace should not be used
deployment.yaml - Container should not be privileged
/scenarios/health-check/deployment.yaml:[1-34]
📃 File Type:
kubernetes
⛔ Details - Container should not be privileged
deployment.yaml - Ensure that the seccomp profile is set to docker/default or runtime/default
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Ensure that the seccomp profile is set to docker/default or runtime/default
Dockerfile - Ensure that HEALTHCHECK instructions have been added to container images
/infrastructure/internal-api/Dockerfile:[1-15]
📃 File Type:
dockerfile
⛔ Details - Ensure that HEALTHCHECK instructions have been added to container images
node-job.yaml - Minimize the admission of containers with capabilities assigned
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Minimize the admission of containers with capabilities assigned
deployment-kind.yaml - Memory requests should be set
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Memory requests should be set
master-job.yaml - Ensure that the seccomp profile is set to docker/default or runtime/default
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Ensure that the seccomp profile is set to docker/default or runtime/default
deployment.yaml - Minimize the admission of containers with the NET_RAW capability
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Minimize the admission of containers with the NET_RAW capability
deployment.yaml - Containers should not run with allowPrivilegeEscalation
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Containers should not run with allowPrivilegeEscalation
node-job.yaml - The default namespace should not be used
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - The default namespace should not be used
node-job.yaml - Minimize the admission of containers with the NET_RAW capability
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Minimize the admission of containers with the NET_RAW capability
node-job.yaml - Image should use digest
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Image should use digest
job.yaml - Use read-only filesystem for containers where possible
/scenarios/batch-check/job.yaml:[1-17]
📃 File Type:
kubernetes
⛔ Details - Use read-only filesystem for containers where possible
deployment-kind.yaml - Image Tag should be fixed - not latest or blank
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Image Tag should be fixed - not latest or blank
deployment-kind.yaml - Minimize the admission of containers with the NET_RAW capability
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Minimize the admission of containers with the NET_RAW capability
deployment-kind.yaml - Image should use digest
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Image should use digest
deployment-kind.yaml - Do not expose the docker daemon socket to containers
/scenarios/health-check/deployment-kind.yaml:[1-33]
📃 File Type:
kubernetes
⛔ Details - Do not expose the docker daemon socket to containers
node-job.yaml - Containers should not run with allowPrivilegeEscalation
/scenarios/kube-bench-security/node-job.yaml:[2-43]
📃 File Type:
kubernetes
⛔ Details - Containers should not run with allowPrivilegeEscalation
master-job.yaml - Use read-only filesystem for containers where possible
/scenarios/kube-bench-security/master-job.yaml:[2-42]
📃 File Type:
kubernetes
⛔ Details - Use read-only filesystem for containers where possible
deployment.yaml - Image should use digest
/scenarios/metadata-db/templates/deployment.yaml:[3-48]
📃 File Type:
helm
⛔ Details - Image should use digest
![mend-for-github-com[bot] avatar](https://avatars.githubusercontent.com/in/30796?v=4 "mend-for-github-com[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent
