When should kube-hunter be run in active mode

aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters

Apache License 2.0

4.66k stars 579 forks source link

When should kube-hunter be run in active mode #440

Closed k-p-ani closed 3 years ago

k-p-ani commented 3 years ago

Hello everyone, Has anyone used kube-hunter in active mode ? Ideally when should we use active mode and how frequent we should run? Should we create a new Kubernetes cluster which is identical to production cluster and with same work load and then run kube-hunter in active mode against this new production like Kubernetes cluster to find vulnerabilities ?

danielsagi commented 3 years ago

Hi @k-p-ani I didn't see you there. Active hunting just means that kube-hunter can do active actions against the cluster. creating pods for example. this does mean that it will generally produce more output. If you don't want this behavior in your production cluster you should run it in passive mode.