static-analysis-kubesec.md

Static Analysis

Option 1 - kubesec

Documentation

https://github.com/controlplaneio/kubesec

Installation

https://github.com/controlplaneio/kubesec/releases

Test manifest file

vi private-pod.yaml

apiVersion: v1
kind: Pod
metadata:
  name: privileged
spec:
  containers:
  - image: nginx
    name: test-pod
    securityContext:
      privileged: true

Performing static analysis

kubesec scan -f private-pod.yaml