kubescape/regolibrary

Add Framework support for GKE

Open

#726 创建于 2024年12月12日

在 GitHub 查看
 (6 评论) (0 反应) (1 负责人)Open Policy Agent (69 fork)auto 404
enhancementhelp wanted

仓库指标

Star
 (131 star)
PR 合并指标
 (PR 指标待抓取)

描述

Overview

Our project requires installing Kubescape in both GKE and AKS. However, there is currently no dedicated GKE framework available in Kubescape.

Problem

To meet the project requirements, I am planning on creating a privileged pod to use alongside the CIS v1.23 and AllControls Kubescape frameworks (Which will already be filtered pending feature request) While this approach works, it requires manually filtering reports to exclude controls not relating to GKE. Introducing a specific framework for GKE would significantly reduce this effort, as most necessary controls already exist, with the exception of those related to Managed Services compliance.

Solution

Develop a GKE-specific framework similar to the cis-aks-t1.2.0 framework in kubescape for AKS. This tailored framework would simplify compliance processes, eliminate the need for manual filtering, and ensure a smoother integration of GKE-specific controls.

贡献者指南