k-rail

Sealed Secrets

A Kubernetes controller and tool for one-way encrypted Secrets

kubernetes-event-exporter

Export Kubernetes events to multiple destinations with routing and filtering

Managed Kubernetes Inspection Tool (MKIT)

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

kube-forensics

kube-forensics is a Kubernetes operator that enables cluster administrators to capture the complete state of a running pod and its containers. It was developed to address the conflict between immediate incident response and the need for detailed forensic investigation after a security breach. ## Key Features - **Pod State Capture** — Dumps the current state of a running pod and all its containers for offline analysis. - **Custom Resource Definition** — Uses a PodCheckpoint CRD managed by a controller to initiate forensic snapshots. - **Container Inspection** — Performs operations equivalent to `docker inspect`, `docker diff`, and `docker export` on target containers. - **Metadata Collection** — Gathers additional metadata about the target pod alongside the captured state. - **Cloud Storage Integration** — Automatically uploads forensic data to a specified S3 bucket for secure storage. ## Philosophy kube-forensics is designed to balance rapid incident response with thorough security investigation, allowing businesses to resume normal operations quickly while preserving evidence for detailed forensic analysis.