# K8Guard Published articles for K8Guard. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## K8Guard DevFeed: [K8Guard]() Original publisher: [Read original article]() Author: Target Brands, Inc Published: 2017-06-27T05:00:00Z Content type: release Language: en Sources: [Target]() Topics: [K8Guard](), [Prometheus](), [Apache Kafka](), [Grafana]() Tags: [api](), [audit](), [automation](), [availability](), [cloud](), [clusters](), [container](), [dashboards](), [deployments](), [docker](), [efficiency](), [email](), [infrastructure](), [ingress](), [jobs](), [k8guard](), [kafka](), [kubernetes](), [metrics](), [microservices](), [monitors](), [namespaces](), [notifications](), [open-source](), [platform](), [pods](), [prometheus](), [security]() ### AI overview K8Guard is an open-source Kubernetes auditing system that checks resources such as deployments, pods, jobs, ingresses, and namespaces for violations involving security, efficiency, availability, or stability. It notifies namespace owners and, after a configurable number of notices, can scale deployments to zero, suspend jobs, or delete ingresses; safe mode limits it to notifications. Its discover service can publish violations to Kafka or serve them through an API without Kafka. The action service processes Kafka messages and records actions in Cassandra, while the report service provides searchable records of past actions. The excerpt also describes 19 discover API metrics, including resource and violation counts, plus API-call timing measurements for Prometheus and Grafana dashboards. ### Source excerpt K8Guard is Officially Open Source I am happy to announce that Target has open sourced K8Guard. I have been part of designing and developing it for the past few months, and I'm going to share a little more about it. What is K8Guard? K8Guard is an auditing system for Kubernetes clusters. It monitors different entities on your cluster for possible violations. K8Guard notifies the violators and then takes action on them. It also provides metrics and dashboards about violations in the cluster through Prometheus. How to Pronounce It? Like Kate Guard - the guardian angel for your Kubernetes clusters. Why? If you have large size kuberentes clusters and you care about security, efficiency, availability and stability, you need a tool to detect violations and do appropriate actions on them. What Kind of Violations Does It Discover? Violation Why Example Image Size Efficiency 5 GB image size Image Repo Security Downloading image from a shady repo Extra Capabilities Security Setting UID/GUID Privileged Mode Security Root containers Single Replica Availability Not 12-factor app Invalid Ingress Security/Stability Having *" in ingress Mount Host Vols Security/Stability Mounting Kubernetes system files No Owner Security No owner annotation for namespace What Kind of Entities Does It Monitor? Any entities which deployed to your kubernetes cluster such as Deployments, Pods, Jobs/CronJobs, Ingresses and namespaces. What Kind of Actions Does It Take? Notifies the namespace owner (email, hipchat, ...). After X amount of notifications, it will do a hard action such as: Scale bad deployments down to zero. Suspend bad jobs. Delete bad ingress Note that there is a safe mode - which only notifies and does not do hard actions. The K8Guard Design K8Guard has 3 main microservices (discover, action, report) Discover service, when in messaging mode, finds violations and puts them on a kafka topic. and also discover API mode, is able to serve without depending on kafka. you can hit the end points to