Skip to content
This repository has been archived by the owner on Jan 20, 2025. It is now read-only.

Report OPA Gatekeeper audit violations in Security Command Center.

License

Notifications You must be signed in to change notification settings

GoogleCloudPlatform/gatekeeper-securitycenter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

author
github-actions
Dec 13, 2024
863ca69 · Dec 13, 2024

History

77 Commits
Aug 12, 2024
Mar 12, 2021
Jul 12, 2023
Dec 13, 2024
Oct 14, 2022
Jul 12, 2023
Nov 20, 2020
Jul 12, 2023
Aug 12, 2024
Nov 20, 2020
Nov 20, 2020
Mar 11, 2021
Dec 13, 2024
Dec 13, 2024
Dec 13, 2024
Jul 12, 2023
Jul 12, 2023

Repository files navigation

gatekeeper-securitycenter

gatekeeper-securitycenter allows you to use Security Command Center as a dashboard for Kubernetes resource policy violations.

gatekeeper-securitycenter is:

Architecture

gatekeeper-securitycenter works with both Security Command Center Standard tier and Security Command Center Premium tier.

If you use Policy Controller from Google Cloud, consider using its in-built integration with Security Command Center.

Prerequisites

Before installing the gatekeeper-securitycenter controller, create all the following resources:

  • a Kubernetes cluster, for instance a Google Kubernetes Engine (GKE) cluster
  • OPA Gatekeeper installed in the Kubernetes cluster
  • a Security Command Center source
  • a Google service account with the Security Center Findings Editor role on the Security Command Center source.

To create these prerequisite resources, choose one of these options:

  1. Use the shell scripts in the scripts directory. These scripts create resources using the gcloud command-line tool from the Google Cloud SDK.

  2. Follow the step-by-step instructions in the accompanying tutorial.

If you use Security Command Center Standard tier, you must have an appropriate Cloud IAM role for Security Command Center at the organization level, such as Security Center Admin Editor. Your organization administrator can grant you this role.

If your user account is not associated with an organization on Google Cloud, you can create an organization resource by signing up for either Cloud Identity or Google Workspace (formerly G Suite) using a domain you own. Cloud Identity offers a free edition.

Downloading the gatekeeper-securitycenter command-line tool

Download the binary for your platform:

VERSION=v0.4.3
curl -Lo gatekeeper-securitycenter "https://github.com/GoogleCloudPlatform/gatekeeper-securitycenter/releases/download/${VERSION}/gatekeeper-securitycenter_$(uname -s)_$(uname -m)"
chmod +x gatekeeper-securitycenter

Installing the gatekeeper-securitycenter controller

Install the gatekeeper-securitycenter controller in your cluster by following the documentation in the manifest directory.

Documentation

Disclaimer

This is not an officially supported Google product.