kubescape/regolibrary

Add Framework support for GKE

Open

#726 opened on Dec 12, 2024

View on GitHub
 (6 comments) (0 reactions) (1 assignee)Open Policy Agent (69 forks)auto 404
enhancementhelp wanted

Repository metrics

Stars
 (131 stars)
PR merge metrics
 (PR metrics pending)

Description

Overview

Our project requires installing Kubescape in both GKE and AKS. However, there is currently no dedicated GKE framework available in Kubescape.

Problem

To meet the project requirements, I am planning on creating a privileged pod to use alongside the CIS v1.23 and AllControls Kubescape frameworks (Which will already be filtered pending feature request) While this approach works, it requires manually filtering reports to exclude controls not relating to GKE. Introducing a specific framework for GKE would significantly reduce this effort, as most necessary controls already exist, with the exception of those related to Managed Services compliance.

Solution

Develop a GKE-specific framework similar to the cis-aks-t1.2.0 framework in kubescape for AKS. This tailored framework would simplify compliance processes, eliminate the need for manual filtering, and ensure a smoother integration of GKE-specific controls.

Contributor guide