{"id":40721,"date":"2021-05-04T18:24:11","date_gmt":"2021-05-04T18:24:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/red-hat-open-sources-stackrox-kubernetes-security-product\/"},"modified":"2021-05-04T18:24:11","modified_gmt":"2021-05-04T18:24:11","slug":"red-hat-open-sources-stackrox-kubernetes-security-product","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/red-hat-open-sources-stackrox-kubernetes-security-product\/","title":{"rendered":"Red Hat open-sources StackRox Kubernetes security product"},"content":{"rendered":"

Kubecon Europe<\/span> As Kubecon Europe gets under way, Red Hat has pushed out StackRox, the Kubernetes security product it acquired earlier this year, as an open-source project which will be the upstream for its Advanced Cluster Security for OpenShift.<\/p>\n

The StackRox product is itself deployed as a Kubernetes application and has several components, aiming to pick up vulnerabilities in both container images and in Kubernetes, look for misconfigurations such as unnecessarily elevated privileges, perform rule-based threat detection, and more.<\/p>\n

StackRox technology is the basis of Red Hat Advanced Cluster Security, recently introduced as part of the company’s focus on OpenShift<\/a>, its Kubernetes distribution.<\/p>\n

\"Red<\/p>\n

Red Hat OpenShifts gears at summit to pin its future on ‘open hybrid cloud’<\/h2>\n

READ MORE<\/span><\/a><\/div>\n

Now Red Hat is hoping to engage the open-source community in order to improve both StackRox and Red Hat Advanced Cluster Security. It looks as if StackRox will perform a similar role to that of Fedora and CentOS Stream for Red Hat Linux: providing a preview and testbed for new features that will end up in the enterprise product, while also being a project that can be used in production. “We expect the project to help drive future product roadmaps,” said Red Hat today. The new open-source project will also encompass KubeLinter<\/a>, a static analysis tool for YAML files and Help charts, used to configure and deploy Kubernetes applications.<\/p>\n

Red Hat has also made new OpenShift features generally available. OpenShift GitOps is based on Argo CD<\/a>, a continuous delivery tool for Kubernetes, and lets organisations automate deployment based on configuration code checked into a Git repository.<\/p>\n