Need info on if this tool is Prod ready currently and reasons why this shouldnt be used in prod

[tarangini-shetty]

Hi Team,

I kind of used this tool in my test setup.
Since I see in Readme of this repo that it's not ready for prod. Any info on why this shouldnt be used in prod. If in case those reasons doesnt apply to the cluster we are trying with, should it be ok to use in prod?
Thoughts on this might help me decide on usage of this tool further.

Thank you in advance.

[bostrt]

Hi @tarangini-shetty afaik the production-readiness of ksniff is in regards to how stable its API is (command line flags, etc) and that it may not be stable enough to integrate into scripting used in prod.

If there's a security reason then I would have to defer to @eldadru to answer that.

While we're on the topic, I'll make a note of submitting a PR for including things like https://github.com/securego/gosec into ksniff CI.

[eldadru]

Hi all,

ksniff was never tested for performance, also - the privilege mode "breaks" out of the scope of Kubernetes and may leave stale containers on your production hosts.

[bostrt]

Hi @tarangini-shetty, I'm going to go ahead and close this but let us know if you have any more questions.