search

DataDog / KubeHound

Kubernetes Attack Graph
https://kubehound.io
Apache License 2.0
702 stars 34 forks source link

Kubehound on AWS EKS #145

Open MT5W4FLOP80 opened 7 months ago

MT5W4FLOP80 commented 7 months ago

Hi!

Thank you for a great tool! I've tested this out on my local Kubernetes cluster (minikube) with Kubernetes goat setup on it and it worked fine. However, for my current assessment I need to test Kubernetes cluster which is setup on AWS EKS and the applications are managed via ArgoCD. Basically the target organization uses GitOps approach to manage their applications and infrastructure.

Given this context I have a few questions. I've made several attempts to deploy and use Kubehound from within a Linux image in a Kubernetes Pod, however I've faced multiple docker issues within the Pod. This definitely felt like I took wrong approach to deploy and run Kubehound.

Is it possible to run KubeHound against AWS EKS cluster? If yes, how it should be deployed? If we were to deploy it using ArgoCD with Helm packages, do you have any examples for that?

jt-dd commented 7 months ago

Hello @MT5W4FLOP80 ,

Sorry for the delay. We are doing some testes around AWS EKS cluster. We will get back to you soon. Thanks for reporting the issue.

christophetd commented 7 months ago

Hey there, thanks for the great question!

KubeHound supports Amazon EKS as a target environment to assess. However, current instructions on how to run it focus on running it locally from your machine, which should have connectivity to the K8s API server you're looking to assess. Is that a viable model for you?