aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.71k stars 581 forks source link

Refactor Cloud Discovery #304

Open iyehuda opened 4 years ago

iyehuda commented 4 years ago

What would you like to be added

Separate behavior of specific cloud providers from generic discovery logic. Make cloud discovery modular so more cloud providers can be supported.

Why is this needed

kube-hunter currently support discovery of Azure environment (using metadata server) and provides a few hunters for Azure that in turn executes only when running in Azure. This is a tightly coupled implementation and should be split into another module.

iyehuda commented 4 years ago

Initially implemented at #145 which was torn down into several issues.