Kubesec scan implementation before deployment or post deployment

Kubernetes
,
#1

Hi Team,
In real time people are using helm chart to deploy the resources in kubernetes cluster and there are multiple helm charts for each of the component and when it’s deployed using the jenkins pipeline it gets deployed in the kubernetes cluster. here i want to implement the kubesec scan for all the manifest so in this case whether it has to be done pre or post deployment? if pre deployment means we won’t be having the manifest file right since we only have the helm charts and that’s something like template and actual values get applied during deployment. and if post deployment means from where i can get all the manifest file so that i can use the kubesec scan on those manifest yaml files.

can someone please help on this scenario to implement the scan.

#2

Hi @iyyappan

You can try Helm command helm template before applying the Chat.

helm template my-release bitnami/metrics-server > out.yml

kubesec scan out.yml

Once verified and remediated, you can apply the Chart.

#3

@Santosh_KodeKloud Thank you for your help. i will try this out and update.