Giter Club home page Giter Club logo

monitor-security's Introduction

Monitor your cluster security

This repository uses the following applications:

Here is how to use the resources:

Create a monitoring namespace:

kubectl create ns monitoring

Install the helm prometheus stack chart:

helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm upgrade --install prom prometheus-community/kube-prometheus-stack -n monitoring --values observability-conf/prom-values.yaml

Install promtail to colelct logs from every node:

helm upgrade --install promtail grafana/promtail -f observability-conf/promtail-values.yaml -n monitoring

Install loki to collect all the logs from promtail:

helm upgrade --install loki grafana/loki-distributed -n monitoring

Install Trivy operator:

helm repo add aqua https://aquasecurity.github.io/helm-charts/
helm repo update

And finally, the Helm chart can be installed with the following command:

helm install trivy-operator aqua/trivy-operator \
  --namespace trivy-system \
  --create-namespace \
  --set="trivy.ignoreUnfixed=true" \
  --version 0.1.3

Make sure to cross-check the updated installation incl. the latest versio of the operator in the docs: https://aquasecurity.github.io/trivy-operator/latest/operator/installation/helm/

Install the Trivy exporter -- note that here we are still using the old Starboard exporter:

helm repo add giantswarm https://giantswarm.github.io/giantswarm-catalog
helm repo update
helm upgrade -i trivy-exporter --namespace <trivy namespace> giantswarm/starboard-exporter

Install tracee to monitor your cluster:

kubectl apply -f observability-conf/tracee.yaml

Create application:

kubectl create ns app
kubectl apply -f app-manifests -n app

Open the dashboards in Grafana

You can then port-forward to grafana:

kubectl port-forward service/prom-grafana -n monitoring 3000:80

The login is: Username: admin Password: prom-operator

And provide Grafana with the dashboards in the observability-conf folder.

Vulnerability stats

Tracee logs

monitor-security's People

Contributors

anaisurlichs avatar zachrocketpartners avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.