aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.65k stars 578 forks source link

Please provide more information about running `kube-hunter` with a `ServiceAccount` for remote access (if it is possible) and describe more of the kube-hunter API (e.g. what arguments can be passed when starting a job) #523

Open v-kuzma opened 1 year ago

v-kuzma commented 1 year ago
  1. I want to use Kube-hunter along with a token obtained using a service account for remote access to the nodes of the EKS cluster. Is it possible? If so, where can I see a detailed guide?

  2. What arguments can be given for creating a job to run Kube hunter on a pod? (Where are described parameters that can be passed to args:?)

    I need this to display logs in a different format.


---
apiVersion: batch/v1
kind: Job
metadata:
  name: kube-hunter
spec:
  template:
    metadata:
      labels:
        app: kube-hunter
    spec:
      containers:
        - name: kube-hunter
          image: aquasec/kube-hunter:0.6.8
          command: ["kube-hunter"]
          args: ["--pod"] 
      restartPolicy: Never