Kubernetes provides a secure foundation for building and deploying applications, but securing clusters requires more than just basic IP-based security. To enhance cluster security, several open-source plugins are available, each with its unique features and capabilities. Kube-bench checks Kubernetes clusters for compliance with security best practices, while Stern allows tailing of multiple pods and containers for faster debugging. Kubescore performs static code analysis to ensure proper configurations, and Kubiscan scans for risky permissions in the RBAC authorization model. Rakkess provides an access matrix for Kubernetes server resources, helping visualize and audit permissions.
Source: https://dev.to/pareek/k8s-plugins-for-solid-security-posture-5bje