kubescape/regolibrary

Add Framework support for GKE

Open

#726 aperta il 12 dic 2024

Vedi su GitHub
 (6 commenti) (0 reazioni) (1 assegnatario)Open Policy Agent (69 fork)auto 404
enhancementhelp wanted

Metriche repository

Star
 (131 star)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

Overview

Our project requires installing Kubescape in both GKE and AKS. However, there is currently no dedicated GKE framework available in Kubescape.

Problem

To meet the project requirements, I am planning on creating a privileged pod to use alongside the CIS v1.23 and AllControls Kubescape frameworks (Which will already be filtered pending feature request) While this approach works, it requires manually filtering reports to exclude controls not relating to GKE. Introducing a specific framework for GKE would significantly reduce this effort, as most necessary controls already exist, with the exception of those related to Managed Services compliance.

Solution

Develop a GKE-specific framework similar to the cis-aks-t1.2.0 framework in kubescape for AKS. This tailored framework would simplify compliance processes, eliminate the need for manual filtering, and ensure a smoother integration of GKE-specific controls.

Guida contributor