kubeaudit

Kubeaudit helps you audit your Kubernetes clusters against common security controls

Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns

secops

https://github.com/Shopify/kubeaudit

amd64 arm64

Installation

1. Add WakeMeOps repository

curl -sSL https://raw.githubusercontent.com/upciti/wakemeops/main/assets/install_repository | sudo bash

2. Install kubeaudit

sudo apt install kubeaudit

Snippets

DockerfileGithub Action

FROM wakemeops/minideb:bullseye

RUN install_packages \
    kubeaudit=0.22.0*

USER 1001

- name: Install dependencies
  uses: upciti/wakemeops-action@v1
  with:
    packages: |
      kubeaudit=0.22.0*

Download URLs

amd64arm64

Version	SHA256	Size (KB)
0.22.0	f4f795ec643469d49c51cde106ebccae8b79af85c9c67f654f8aafeca9028971	6532
0.21.0	4c2aa5624fc729a1ab946a163152b379026b8f46f2f40129370953eb03492669	6415
0.20.0	eddf8d866e77fd852755216f4d8cd550ce8dc6286479c85644909cc6e2da24a3	6416
0.19.0	5179785a648ac59cb64c9f21a677caaf46bebd28bd16408c6c25b91806ea8264	6365

Version	SHA256	Size (KB)
0.22.0	63c30fcb065ce001b89eedba20a98e8533f64b78e029ef2891eed91888863128	5495
0.21.0	f4a5f255dde867efbf601a965021e4ea22cc29fa88c56d97538a717e8fd2e8eb	5421
0.20.0	c350ca0ecd3c7a8d59c092c9137b99cb29b14610ce59db66a3d803a68b1c9554	5420
0.19.0	843e899e7192dec569473347438be7aefeaa0e47407c4c283d16d4222f6e9716	5374

Blueprints

Debian packages listed on this page are generated from op2deb YAML blueprints. Blueprints for kubeaudit are versioned here.

Click here to see kubeaudit ops2deb blueprints

https://github.com/upciti/wakemeops/blob/main/blueprints/secops/kubeaudit/ops2deb.yml

name: kubeaudit
matrix:
  versions:
    - 0.19.0
    - 0.20.0
    - 0.21.0
    - 0.22.0
  architectures:
    - amd64
    - arm64
homepage: https://github.com/Shopify/kubeaudit
summary: audit your Kubernetes clusters against common security controls
description: |-
  Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters
  for various different security concerns
fetch: https://github.com/Shopify/kubeaudit/releases/download/v{{version}}/kubeaudit_{{version}}_linux_{{target}}.tar.gz
install:
  - kubeaudit:/usr/bin/

The blueprint fetch keyword contains a URL template pointing to kubeaudit releases. Downloaded files are locked in a lockfile versioned here.

Click here to see kubeaudit release hashes

https://github.com/upciti/wakemeops/blob/main/blueprints/secops/kubeaudit/ops2deb.lock.yml

- url: https://github.com/Shopify/kubeaudit/releases/download/v0.19.0/kubeaudit_0.19.0_linux_amd64.tar.gz
  sha256: da42b6b62dd50cba67b4a7dd5400c87f869a18bf92a52b470611ffd8061c5f56
  timestamp: 2022-08-05 16:23:33+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.19.0/kubeaudit_0.19.0_linux_arm64.tar.gz
  sha256: 1a5361df827235fc8f4d49678b483acd640a22b49e5b8ea3e9332dd877e01fb9
  timestamp: 2022-08-05 16:23:33+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.20.0/kubeaudit_0.20.0_linux_amd64.tar.gz
  sha256: 040492e8b44322d2f775186c3fd086ec5a15b967bb88a17e818b4dbc9c97f4f5
  timestamp: 2022-09-07 04:36:24+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.20.0/kubeaudit_0.20.0_linux_arm64.tar.gz
  sha256: 79530cf2d73ec68bc5390084147685141b1915eeb5db7078ffcde1841743341c
  timestamp: 2022-09-07 04:36:24+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.21.0/kubeaudit_0.21.0_linux_amd64.tar.gz
  sha256: 4b7222adf273f8c7cb37d0207ca54143a571e953613a5bfb7e3f7d1988d23d00
  timestamp: 2022-11-15 02:57:30+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.21.0/kubeaudit_0.21.0_linux_arm64.tar.gz
  sha256: e1c8dcadb55532cbe057a239069873e194377365575f0de705af00f03bac9abd
  timestamp: 2022-11-15 02:57:30+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.22.0/kubeaudit_0.22.0_linux_amd64.tar.gz
  sha256: 1bb4147e0d5c71d99e15ae92f4be032259689a265caed35bd438fd38cb5fbb77
  timestamp: 2023-03-21 15:16:10+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.22.0/kubeaudit_0.22.0_linux_arm64.tar.gz
  sha256: aa7c702c3076086a50683f20be1a81c6440a1178a8a957b886e0d27d53c80f58
  timestamp: 2023-03-21 15:16:10+00:00

Badge

MarkdownHTMLRST

[![WakeMeOps](https://docs.wakemeops.com/badges/kubeaudit.svg)](https://docs.wakemeops.com/packages/kubeaudit)

<a href="https://docs.wakemeops.com/packages/kubeaudit">
  <img src="https://docs.wakemeops.com/badges/kubeaudit.svg"/>
</a>

.. image:: https://docs.wakemeops.com/badges/kubeaudit.svg
:target: https://docs.wakemeops.com/packages/kubeaudit