Skip to content

Commit 283eb7a

Browse files
committed
Add acknowledgments
1 parent 2f0fc3f commit 283eb7a

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

README.md

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,9 @@ $ mkat eks test-imds-access
119119
2023/04/12 00:35:15 IMDS is accessible and allows any pod to retrieve credentials for the AWS role eksctl-mkat-cluster-nodegroup-ng-NodeInstanceRole-AXWUFF35602Z
120120
```
121121
122-
## How does MKAT compare to other tools?
122+
## FAQ
123+
124+
### How does MKAT compare to other tools?
123125
124126
| **Tool** | **Description** |
125127
|:---:|:---:|
@@ -132,10 +134,18 @@ $ mkat eks test-imds-access
132134
| [kubeletmein](https://github.com/4ARMED/kubeletmein) | kubeletmein _is_ specific to managed K8s environments. It's an utility to generate a kubeconfig file using the node's IAM credentials, to then use it in a compromised pod. |
133135
| [hardeneks](https://github.com/aws-samples/hardeneks) | hardeneks _is_ specific to managed K8s environments, but only for EKS. It identifies issues and lack of best practices inside of the cluster, and does not focus on cluster to cloud pivots. |
134136
137+
### What permissions does MKAT need to run?
138+
139+
See [this page](./permissions.md) for a detailed list of the permissions MKAT needs to run.
140+
135141
## Roadmap
136142
137143
We currently plan to:
138144
* Add a feature to identify EKS pods that are exposed through an AWS load balancer, through the [aws-load-balancer-controller](https://github.com/kubernetes-sigs/aws-load-balancer-controller)
139145
* Add support for GCP GKE
140146
* Allow scanning for additional types of cloud credentials
141147
* Enhance the IAM role trust policy evaluation logic to take into account additional edge cases
148+
149+
## Acknowledgements
150+
151+
Thank you to Rami McCarthi and Mikail Tunç for their early testing and actionable feedback on MKAT!

0 commit comments

Comments
 (0)