prowler kubernetes

all

Assess Kubernetes cluster security best practices and configurations. See also: `prowler`, `prowler-aws`, `prowler-azure`, `prowler-gcp`, `prowler-m365`, `prowler-github`.

More info →

Options (3)

-s, --servicesboolean

Run checks for selected Kubernetes services

Example: prowler kubernetes {{[-s|--services]}} {{ietcd|apiserver|...}}

-c, --checksboolean

Run a specific Kubernetes check

Example: prowler kubernetes {{[-c|--checks]}} {{etcd_encryption}}

-e, --excluded-checksboolean

Exclude specific checks or services

Example: prowler kubernetes {{[-e|--excluded-checks]}} {{etcd_encryption}} --exclude-services {{ietcd|apiserver|...}}

Examples (7)

Run the default checks using the default kubeconfig location

prowler kubernetes

Specify a custom kubeconfig file for scanning

prowler kubernetes --kubeconfig-file path/to/kubeconfig

Specify a specific Kubernetes context to scan

prowler kubernetes --context my-context

Scan specific namespaces only

prowler kubernetes --namespaces default kube-system

Run checks for selected Kubernetes services

prowler kubernetes [-s|--services] ietcd|apiserver|...

Run a specific Kubernetes check

prowler kubernetes [-c|--checks] etcd_encryption

Exclude specific checks or services

prowler kubernetes [-e|--excluded-checks] etcd_encryption --exclude-services ietcd|apiserver|...

made by @shridhargupta | data from tldr-pages