Kubernetes configuration and security policies with KubeLinter | DevNation Tech Talk
1 like14,364 views
Kubelinter is an open-source command-line interface designed to lint Kubernetes objects, offering around 40 default policies to promote best practices. It aims to simplify configuration and integration into existing pipelines, helping to identify misconfigurations efficiently. Recommended for deployment at the developer level and within CI pipelines, it enhances operational policy based on defaults.
Kubernetes configuration and security policies with KubeLinter | DevNation Tech Talk
- 1. F25426 KubeLinter An open-source tool to create production-ready Kubernetes YAMLs 1
- 2. F25426 2 What Will Be Covered ● What is KubeLinter ● Why KubeLinter ● Installation, Setup, and Getting Started ● GeneralWorkflow ● Configuration and Enforcement ● Integration ● What’s Next!
- 3. F25426 3 Who Am I? Michael Foster ● CKA/AD/S certified ● 4 + years of Kubernetes experience ● Consulting background focused on Kubernetes adoption in various sectors ● StackRox -> RedHat for over a year
- 5. F25426 ● A command-line interface (CLI) for linting Kubernetes objects ● ~40 default policies for empowering Kubernetes best practices ● Configurations file for fine-tuned policy enforcement ● Simplicity in design, allowing for easy integration 5
- 7. F25426 ● Ad hoc security creates massive team friction ● Enforcement for the sake of enforcement slows down developers 7
- 8. F25426 8 ● Simplicity ● Kubernetes focused ● Easily identify misconfigurations ● Set configurations for specific folders, repositories, Helm Charts ● Documentation to provide further knowledge growth for users ● Integration into existing pipelines ● Build operational policy around defaults
- 11. F25426 1. GitHub: github.com/stackrox/kube-linter —> 2. Docs: docs.kubelinter.io/ 3. Join KubeLinter on Slack ————————-> 11
- 12. F25426 What is KubeLinter Red Hat Advanced Cluster Security 12
- 14. F25426 14 ● KubeLinter is a free, open source CLI to for checking your Kubernetes and Helm files against Kubernetes best practices. ● KubeLinter is a lightweight Go based CLI allowing portability and simplified configuration into your existing environments. ● KubeLinter is best deployed at the developer level and in your CI pipelines.