Project Status: This project is stable. Any API and CRD changes will be handled in way where previous versions are kept working or migrated.
The Mondoo Operator provides a new Kubernetes native way to do a security assessment of your whole Kubernetes Cluster. The purpose of this project is to simplify and automate the configuration for a Mondoo-based security assessment for Kubernetes clusters.
The Mondoo Operator provides the following features:
It is backed by Mondoo's powerful policy-as-code engine cnspec and MQL. Mondoo ships out-of-the-box security policies for:
The Mondoo Operator can be installed via different methods depending on your Kubernetes workflow:
The following Kubernetes environments are tested:
Please see the docs directory for more in-depth information.
Many files (documentation, manifests, ...) are auto-generated. Before proposing a pull request:
make generate
and make test
.To run the integration tests locally copy the .env.example
file:
cp .env.example .env
Go to Mondoo Platform and create an API token for an organization of choice. Add the API token to the .env
file. Double-check that the API is set to the correct environment, then run:
make test/integration
If you find a security vulnerability related to the Mondoo Operator, please do not report it by opening a GitHub issue. Instead, send an email to security@mondoo.com
Join the Mondoo Community GitHub Discussions to collaborate on policy as code and security automation.