mirror of
https://github.com/ivuorinen/cheatsheet-tldr.git
synced 2026-02-09 23:46:38 +00:00
39 lines
1.1 KiB
Plaintext
39 lines
1.1 KiB
Plaintext
---
|
|
syntax: markdown
|
|
tags: [tldr, common]
|
|
source: https://github.com/tldr-pages/tldr.git
|
|
---
|
|
# prowler kubernetes
|
|
|
|
> Assess Kubernetes cluster security best practices and configurations.
|
|
> See also: `prowler`, `prowler-aws`, `prowler-azure`, `prowler-gcp`, `prowler-m365`, `prowler-github`.
|
|
> More information: <https://docs.prowler.com/projects/prowler-open-source/en/latest/>.
|
|
|
|
- Run the default checks using the default kubeconfig location:
|
|
|
|
`prowler kubernetes`
|
|
|
|
- Specify a custom kubeconfig file for scanning:
|
|
|
|
`prowler kubernetes --kubeconfig-file {{path/to/kubeconfig}}`
|
|
|
|
- Specify a specific Kubernetes context to scan:
|
|
|
|
`prowler kubernetes --context {{my-context}}`
|
|
|
|
- Scan specific namespaces only:
|
|
|
|
`prowler kubernetes --namespaces {{default}} {{kube-system}}`
|
|
|
|
- Run checks for selected Kubernetes services:
|
|
|
|
`prowler kubernetes {{[-s|--services]}} {{ietcd apiserver ...}}`
|
|
|
|
- Run a specific Kubernetes check:
|
|
|
|
`prowler kubernetes {{[-c|--checks]}} {{etcd_encryption}}`
|
|
|
|
- Exclude specific checks or services:
|
|
|
|
`prowler kubernetes {{[-e|--excluded-checks]}} {{etcd_encryption}} --exclude-services {{ietcd apiserver ...}}`
|