kube-bench

What is kube-bench?

kube-bench checks Kubernetes clusters against CIS benchmarks.

Harden lab/prod clusters you operate.

Official website: kube-bench · Documentation

When do you use it?

• You need CIS Kubernetes benchmark checks.
• You are following a CYNARKS lab or authorized engagement that calls for kube-bench.
• You already tried simpler checks and need this tool’s deeper capability.

Who uses it?

• Cloud security engineers
• DevSecOps
• Platform / SRE security

How do you use it? (typical flow)

1. Install kube-bench using the steps below (prefer Kali package or official installer).
2. Confirm you have authorization for the target (lab VM, own system, or written scope).
3. Run --help / man (or the Help section) to see current flags for your version.
4. Start with a safe example from Basic commands against localhost or an authorized lab target.
5. Record what you ran, what you observed, and any follow-up (filter, report, remediation).

Help & manual (like man / --help)

Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.

1. 1. Repo

   https://github.com/aquasecurity/kube-bench

1. Installation

2. Basic commands

1. 1. Run on lab cluster

   kube-bench run

   Run on lab cluster

2. 2. Show help

   kube-bench --help

   List flags for your installed version (same habit as man/--help).

3. 3. Short help

   kube-bench -h

   Alternate help flag when supported.

5. Useful features

• Node/master tests

6. Practical examples

1. Example 1: Run on lab cluster

   kube-bench run

   Run on lab cluster

2. Example 2: Show help

   kube-bench --help

   List flags for your installed version (same habit as man/--help).

3. Example 3: Short help

   kube-bench -h

   Alternate help flag when supported.

7. Important notes

• Harden clusters to CIS benchmarks.
• Authorized targets only — labs, systems you own, or written permission.
• Prefer reading --help / man / official docs for your installed version; flags change over time.