KlustAIR Frontend

The Klustair scanner scanns your Kubernetes namespaces for the used images and scan them with trivy. This frontend displays the result of the scanned namespaces and images in a report.

Demo : https://klustair.herokuapp.com/

Main Features:

• The vulnerabilities of an images can be reviewed and whitelisted if they dont apply to any risk.
• Auditing the configuration of your kubernetes cluster

Related Klustair projects:

• Klustair runner to scan all your used images with trivy
• Klustair Helm charts to spin up Anchore and Klustair

Related opensource projects

• trivy A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts
• kubeaudit kubeaudit helps you audit your Kubernetes clusters against common security controls
• (DEPRECATED) anchore-engine A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

Screenshots

Find more screenshots here

Configuration

Laravel built in authentication

LDAP Authentication

CLI Commands

import CWE's (Common Weakness Enumeration)

php artisan klustair:importcwe <version> [<force>]

The current latest Version is 4.3 (2020-12-10) https://cwe.mitre.org/

Manage User

php artisan klustair:user <action> [<email> [<fullname>]]

Available actions are :

• create [\<email> [\<fullname>]]
• list
• delete[\<email>]

Manage Tokens

php artisan klustair:token <action> [<name> [<email>]]

Available actions are :

• create [\<name> [\<email>]]
• list
• delete [\<name>]

Manage Init actions

php artisan klustair:init <action>]

Available actions are :

• waitForDB

Test the LDAP Connection

php artisan ldap:test

+------------+------------+----------------------------+-------------------------+---------------+
| Connection | Successful | Username                   | Message                 | Response Time |
+------------+------------+----------------------------+-------------------------+---------------+
| default    | ✔ Yes      | cn=admin,dc=example,dc=org | Successfully connected. | 22.27ms       |
+------------+------------+----------------------------+-------------------------+---------------+

Docker

Docker images an tags can be found on hub.docker.com

• klustair/klustair-frontend:v[VERSION]-apache
  runs apache and PHP in a combined server. This container is based on Debian and is therefore bigger and has more vulnerabilities.

• klustair/klustair-frontend:v[VERSION]-nginx
  Alpine baes Nginx server

• klustair/klustair-frontend:v[VERSION]-php-fpm
  Alpine based php-fpm server

Setting up your environment

Update the values for APP_KEY DB_USERNAME & DB_PASSWORD within docker/.env.example

Note APP_KEY should be a 32 character string which is then base64 encoded you can generate one via openssl rand -base64 32

For example

> openssl rand -base64 32
vtfiojf..redacted..iofE=
APP_KEY=base64:APP_KEY=vtfiojf..redacted..iofE=

Starting the Apache stack

    cd docker
    cp .env.example .env
    docker-compose up klustair-db klustair-apache

Staring the Nginx/php-fpm stack

    cd docker
    cp .env.example .env
    docker-compose up klustair-db klustair-nginx klustair-php-fpm