José Ángel MORENA SIMÓN

-

Automated Provisioning Solution for CIS-Compliant Virtual Machines on Kubernetes

Many organizations struggle to maintain a consistent security baseline as their infrastructure keeps evolving. Every time a virtual machine is created or updated, it introduces the risk of misconfiguration, which can lead to vulnerabilities and breaches. Making sure that each VM meets the standards defined by the Center for Internet Security (CIS) is a significant challenge. This project aims to design and implement a reliable and automated solution for provisioning virtual machines that adhere to CIS standards within Kubernetes environments. By using Kubernetes Operators, Tekton pipelines, Ansible playbooks, and KubeVirt, the solution provides a robust framework for enforcing security policies and managing infrastructure at scale. The project provides a repeatable and verifiable process to enforce CIS-compliant configurations. By integrating these technologies, the solution offers a streamlined and scalable approach to maintaining compliance and enhancing security in Kubernetes virtual machines.

09-GEN-2025

-

-