search

aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.73k stars 584 forks source link

Removed Old Dependency For CAP_NET_RAW #416

Closed danielsagi closed 3 years ago

danielsagi commented 3 years ago

Description

Replaced traceroute discovery by gateway_discovery. This removed our dependency for CAP_NET_RAW when running in pod mode. Essentially, the old method for traceroute with ttl=1 is the same as just extracting the default gateway.

Fixed Issues

Closes #138

Contribution checklist

codecov[bot] commented 3 years ago

Codecov Report

Merging #416 (223130d) into master (693d668) will increase coverage by 0.30%. The diff coverage is 50.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #416      +/-   ##
==========================================
+ Coverage   63.58%   63.88%   +0.30%     
==========================================
  Files          42       42              
  Lines        2290     2287       -3     
==========================================
+ Hits         1456     1461       +5     
+ Misses        834      826       -8
Impacted Files Coverage Δ
kube_hunter/modules/discovery/hosts.py 63.20% <50.00%> (+0.70%) :arrow_up:
kube_hunter/modules/hunting/apiserver.py 72.34% <0.00%> (+1.92%) :arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 693d668...223130d. Read the comment docs.