Does kube-bench scan for containers running as root? #851
-
|
Does kube-bench scan for containers running as root? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
|
Yes, kube-bench should be running as root. See also aquasecurity/starboard#354 (comment) |
Beta Was this translation helpful? Give feedback.
-
|
Sorry, perhaps I should elaborate. When kube-bench scans K8s, is it able to identify any containers that are running as root? As you know, running containers as root is a security concern. I posted this because I assumed it would like docker-bench does but I could not find a section showing any checks for containers running as root. |
Beta Was this translation helpful? Give feedback.
-
|
@huornlmj No, kube-bench does not support this case. It only scans cluster-related configure, for your case, maybe use https://github.com/FairwindsOps/polaris is better? |
Beta Was this translation helpful? Give feedback.
Yes, kube-bench should be running as root. See also aquasecurity/starboard#354 (comment)