aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.66k stars 578 forks source link

Add client certificate support #456

Open danielsagi opened 3 years ago

danielsagi commented 3 years ago

What would you like to be added

PR #85 was starting to implement this.

Implement this with kube-hunter's updated architecture. Client certificate should be added to the session object of the Event.

Why is this needed

In some configurations, client certificate is required to authenticate to Kubernetes services. Another implementation could be to use client certificates mounted from a pod. But this mainly concerns users that wants to see more verbose output of kube-hunter.