# K8Guard

Published articles for K8Guard.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## K8Guard: An Open-Source Auditing System for Kubernetes Clusters

DevFeed: [K8Guard: An Open-Source Auditing System for Kubernetes Clusters](<https://devfeed.tech/articles/k8guard-20409.md>)

Original publisher: [Read original article](<https://target.github.io/infrastructure/k8guard-the-guardian-angel-for-kuberentes>)

Author: Target Brands, Inc

Published: 2017-06-27T05:00:00Z

Content type: release

Language: en

Sources: [Target](<https://devfeed.tech/sources/target.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [Prometheus](<https://devfeed.tech/topics/prometheus.md>), [Grafana](<https://devfeed.tech/topics/grafana.md>), [API](<https://devfeed.tech/topics/api.md>), [Kafka](<https://devfeed.tech/topics/kafka.md>), [Database](<https://devfeed.tech/topics/database.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [audit](<https://devfeed.tech/tags/audit.md>), [automation](<https://devfeed.tech/tags/automation.md>), [cassandra](<https://devfeed.tech/tags/cassandra.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [container](<https://devfeed.tech/tags/container.md>), [dashboards](<https://devfeed.tech/tags/dashboards.md>), [docker](<https://devfeed.tech/tags/docker.md>), [grafana](<https://devfeed.tech/tags/grafana.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [k8guard](<https://devfeed.tech/tags/k8guard.md>), [kafka](<https://devfeed.tech/tags/kafka.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [platform](<https://devfeed.tech/tags/platform.md>), [prometheus](<https://devfeed.tech/tags/prometheus.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Target open-sourced K8Guard, an auditing system for Kubernetes clusters. It monitors deployments, pods, jobs, ingresses, and namespaces for violations, notifies owners, and can take automated actions such as scaling deployments down, suspending jobs, or deleting ingresses. It also provides API access, Prometheus metrics, and Grafana dashboards.

### Source excerpt

K8Guard is Officially Open Source I am happy to announce that Target has open sourced K8Guard. I have been part of designing and developing it for the past few months, and I'm going to share a little more about it. What is K8Guard? K8Guard is an auditing system for Kubernetes clusters. It monitors different entities on your cluster for possible violations. K8Guard notifies the violators and then takes action on them. It also provides metrics and dashboards about violations in the cluster through Prometheus. How to Pronounce It? Like Kate Guard - the guardian angel for your Kubernetes clusters. Why? If you have large size kuberentes clusters and you care about security, efficiency, availability and stability, you need a tool to detect violations and do appropriate actions on them. What Kind of Violations Does It Discover? Violation Why Example Image Size Efficiency 5 GB image size Image Repo Security Downloading image from a shady repo Extra Capabilities Security Setting UID/GUID Privileged Mode Security Root containers Single Replica Availability Not 12-factor app Invalid Ingress Security/Stability Having *" in ingress Mount Host Vols Security/Stability Mounting Kubernetes system files No Owner Security No owner annotation for namespace What Kind of Entities Does It Monitor? Any entities which deployed to your kubernetes cluster such as Deployments, Pods, Jobs/CronJobs, Ingresses and namespaces. What Kind of Actions Does It Take? Notifies the namespace owner (email, hipchat, ...). After X amount of notifications, it will do a hard action such as: Scale bad deployments down to zero. Suspend bad jobs. Delete bad ingress Note that there is a safe mode - which only notifies and does not do hard actions. The K8Guard Design K8Guard has 3 main microservices (discover, action, report) Discover service, when in messaging mode, finds violations and puts them on a kafka topic. and also discover API mode, is able to serve without depending on kafka. you can hit the end points to