Kaspersky Container Security

Misconfiguration control of images

Kaspersky Container Security allows detecting misconfigurations in configuration files using the configuration file scanner. This scanner can scan images, file systems, and repositories that contain

files (for example, Terraform, CloudFormation, Azure ARM templates, Helm Chart and Dockerfile packages).

Kaspersky Container Security scans the following configuration files:

  • Configuration files of Kubernetes objects.
  • Configuration files of cluster components.
  • Configuration files of images.
  • Configuration files of Amazon cloud environment services.
  • Configuration files of Azure cloud environment services.
  • Configuration files of the DigitalOcean cloud environment.
  • Configuration files of the ApacheCloudStack cloud environment.
  • Configuration files of Terraform GitHub Provider.
  • Configuration files of Google cloud environment services.
  • Configuration files of Nifcloud Provider.
  • Configuration files of OpenStack.
  • Configuration files of Oracle Compute Cloud.

The following table lists the types of configuration files and configuration files formats that Kaspersky Container Security supports.

Types and formats of configuration files

File type

File format

Kubernetes

*.yml, *.yaml, *.json

Docker

Dockerfile, Containerfile

Terraform

*.tf, *.tf.json, *.tfvars

Terraform Plan

tfplan, *.tfplan, *.json

CloudFormation

*.yml, *.yaml, *.json

Azure ARM Template

*.json

Helm

*yaml, *.tpl, *.tar.gz

YAML

*.yaml, *.yml

JSON

*.json