kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various security concerns, such as:
- Run as non-root.
- Use a read-only root filesystem.
- Drop scary capabilities, don't add new ones.
- Don't run privileged.
More: https://github.com/Shopify/kubeaudit
Post #759
745