Skip to content

Commit

Permalink
Add status badge
Browse files Browse the repository at this point in the history
  • Loading branch information
christophetd committed Apr 11, 2023
1 parent 2573593 commit b8733b9
Showing 1 changed file with 14 additions and 3 deletions.
17 changes: 14 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,21 @@
# Managed Kubernetes Auditing Toolkit (MKAT)

[![Tests](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/actions/workflows/test.yml/badge.svg)](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/actions/workflows/test.yml) [![go static
analysis](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/actions/workflows/static-analysis.yml/badge.svg)](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/actions/workflows/static-analysis.yml)


MKAT is a toolkit for identifying common security issues in managed Kubernetes environments. It is focused on AWS EKS at the moment, but will be extended to other managed Kubernetes environments in the future.

## Pre-requisites
## Installation

```bash
brew tap datadog/managed-kubernetes-auditing-toolkit https://github.com/datadog/managed-kubernetes-auditing-toolkit
brew install datadog/managed-kubernetes-auditing-toolkit/managed-kubernetes-auditing-toolkit
```

... or use a [pre-compiled binary](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/releases).

Make sure you are authenticated against your cluster, and to AWS. MKAT uses your current AWS and kubectl authentication contexts.
Then, make sure you are authenticated against your cluster, and to AWS. MKAT uses your current AWS and kubectl authentication contexts.

```bash
aws eks update-kubeconfig --name <cluster-name>
Expand Down Expand Up @@ -120,4 +131,4 @@ We currently plan to:
* Add a feature to identify EKS pods that are exposed through an AWS load balancer, through the [aws-load-balancer-controller](https://github.com/kubernetes-sigs/aws-load-balancer-controller)
* Add support for GCP GKE
* Allow scanning for additional types of cloud credentials
* Enhance the IAM role trust policy evaluation logic to take into account additional edge cases
* Enhance the IAM role trust policy evaluation logic to take into account additional edge cases

0 comments on commit b8733b9

Please sign in to comment.