Skip to content

Commit

Permalink
Add mention to Review Access / rakkess
Browse files Browse the repository at this point in the history
  • Loading branch information
jpetazzo committed Oct 31, 2019
1 parent 4ec7b1d commit ff132fd
Showing 1 changed file with 6 additions and 11 deletions.
17 changes: 6 additions & 11 deletions slides/k8s/authn-authz.md
Original file line number Diff line number Diff line change
Expand Up @@ -667,17 +667,12 @@ class: extra-details

- For auditing purposes, sometimes we want to know who can perform an action

- There is a proof-of-concept tool by Aqua Security which does exactly that:
- There are a few tools to help us with that

https://github.com/aquasecurity/kubectl-who-can
- [kubectl-who-can](https://github.com/aquasecurity/kubectl-who-can) by Aqua Security

- This is one way to install it:
```bash
docker run --rm -v /usr/local/bin:/go/bin golang \
go get -v github.com/aquasecurity/kubectl-who-can
```
- [Review Access (aka Rakkess)](https://github.com/corneliusweig/rakkess)

- This is one way to use it:
```bash
kubectl-who-can create pods
```
- Both are available as standalone programs, or as plugins for `kubectl`

(`kubectl` plugins can be installed and managed with `krew`)

0 comments on commit ff132fd

Please sign in to comment.