KubeLinter is a tool for static inspection that tests YAML files that store configuration data for Kubernetes apps to ensure that best practises are followed for protection. A research recently performed by StackRox found that most events linked to Kubernetes are caused by human error, with two-thirds of cases claiming misconfigurations. Usually, checking settings is performed manually, but the company claims it’s not an easy task and it sometimes results in mistakes. The aim of KubeLinter, which is a command-line tool, is to automate the process of testing YAML files and Helm charts (used for configuration management) before they are deployed in a Kubernetes cluster. The tool has built-in tests for typical misconfigurations, such as ensuring that the maxim of least rights is enforced, following proper hygiene of the mark, ensuring that it does not run as core, the availability of preparation probes, and the use of criteria for resources. Users will also build custom tests. On developer computers, KubeLinter can be run, but it can also be built into the continuous integration (CI) frameworks of an enterprise. We built KubeLinter to provide a safer, more automated way for the Kubernetes group to detect misconfigurations and deviations from best practises that restrict organisations from understanding the full potential of cloud-native applications, “said Ali Golshan, co-founder and CTO of StackRox.” Ultimately, the release of KubeLinter as an open source tool would help users of Kubernetes build hardened environments that are increasingly immune to the inherent risks created by regular changes in configuration typical in development practices.’ On GitHub, the source code for KubeLinter is available and the Kubernetes community has been encouraged to contribute to the tool, which is currently defined as being in a very early development stage. A short video has also been published by StackRox describing why it built KubeLinter and how users can contribute to the project.
StackRox recently received financing of $26.5 million, taking the company’s overall funding secured to $61 million.
