[{"data":1,"prerenderedAt":156},["ShallowReactive",2],{"project-35440736":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":28,"sentiment":9,"stance_mix":29,"scored_comments":32,"aspects":33,"strip":36,"post_text":38,"what":39,"said":56,"maker_in_thread":90,"shape":99,"grid":101,"attempts":117,"same_week":118,"maker_shows":32,"maker_hidden":148,"reader_version":149,"card":150},"35440736","Datree (YC W20)","End-to-End Policy Management for Kubernetes","title","Show HN: Datree (YC W20) – End-to-End Policy Management for Kubernetes",null,"shimont",1680620376,2023,43,6,1167,3109,38,"shown","infrastructure","kubernetes policy management","other",[23,24,25,26,27],"kubernetes","policy management","misconfiguration","admission webhook","kubernetes security","quiet",{"positive":30,"neutral":30,"mixed":31,"critical":30},1,0,3,{"docs":34,"privacy":35},{"positive":31,"critical":30},{"positive":31,"critical":31},[31,31,30,31,32,31,37],5,"Hi HN, I’m Shimon, the co-founder of Datree: A policy management solution for Kubernetes. We help DevOps engineers prevent misconfigurations in their Kubernetes by enforcing an organizational policy on their clusters. Engineers can define a custom policy or use one of Datree’s built-in policies, such as NIST\u002FNSA Hardening Guide, EKS Security Best Practices, CIS Benchmark, and more.\n\nOur website is at https:\u002F\u002Fdatree.io and our GitHub is here: https:\u002F\u002Fgithub.com\u002Fdatreeio\u002Fdatree\n\nThis is not the first time I have shown Datree to the HN community: A little over a year ago, I posted here an earlier",{"problem":40,"audience":46,"pricing":9,"motivation":50,"time_to_build":9,"stack":54,"openness":55,"stage":55,"team_size":55},{"value":41,"source":42,"evidence":43},"Kubernetes misconfigurations cause failed audits and production downtime","maker",[44],{"id":45},"post",{"value":47,"source":42,"evidence":48},"DevOps engineers and operators running Kubernetes clusters, especially regulated companies",[49],{"id":45},{"value":51,"source":42,"evidence":52},"Customers said CI\u002FCD-only checks were not enough and they needed governance over clusters",[53],{"id":45},[],"unknown",{"praise":57,"objections":66,"requests":73,"questions":81,"alternatives":89},[58],{"value":59,"source":60,"evidence":61},"Congratulations on the launch","commenter",[62],{"id":63,"by":64,"text":65},"35444010","yuvalsteuer","Kol ha kavod! great work!",[67],{"value":68,"source":42,"evidence":69},"Enforcement could block urgent hotfixes; needs skip and escalation mechanisms",[70],{"id":71,"by":10,"text":72},"35441350","Initially as it is in read-only mode, there are no risks. But once you enable policy enforcement it will block non-compliant deployments to your cluster. Your organisation has to…",[74],{"value":75,"source":60,"evidence":76},"Fix broken 'Show more' link on the homepage policy tabs",[77],{"id":78,"by":79,"text":80},"35445391","kierenj","Pressing 'Show more' on any of the policy tabs on the homepage goes to a Page Not Found error",[82],{"value":83,"source":60,"evidence":84},"Are there risks in activating Datree on production?",[85],{"id":86,"by":87,"text":88},"35441249","itamarcode","Shimon, are there any risks in activating Datree on the prod env?",[],{"comments":32,"answered":30,"key":91},[92,95,98],{"id":93,"text":94},"35440874","I agree, I dont know if it's a mental thing of feeling in control or really more convenient",{"id":96,"text":97},"35445471","woops! good catch! we will fix it - here are more policies https:\u002F\u002Fhub.datree.io\u002Fbuilt-in-rules",{"id":71,"text":72},{"commenters":37,"max_depth":100,"maker_replies":32,"first_comment_mins":37,"lifespan_hours":14},2,[102,106,107,109,111,113,115],[103,31,31,104,105,31],"35440839","commenter\u002Fneutral\u002Fidea","gwen-shapira",[93,31,31,104,10,30],[78,30,30,108,79,31],"project\u002Fcritical\u002Fdocs",[96,30,31,110,10,30],"maker\u002Fneutral\u002Fdocs",[86,100,32,112,87,31],"project\u002Fneutral\u002Fprivacy",[71,100,31,114,10,30],"project\u002Fneutral\u002Fidea",[63,32,37,116,64,31],"project\u002Fpositive\u002Fnone",[],[119,124,129,134,139,143],{"id":120,"name":121,"points":122,"category":123},"35419771","Unknown Pleasures",661,"creative",{"id":125,"name":126,"points":127,"category":128},"35370284","StratusGFX",483,"games",{"id":130,"name":131,"points":132,"category":133},"35440552","e2b",369,"dev_tools",{"id":135,"name":136,"points":137,"category":138},"35387160","CoScreen",350,"productivity",{"id":140,"name":141,"points":142,"category":133},"35371469","Gut",314,{"id":144,"name":145,"points":146,"category":147},"35447288","Cheetah",301,"ai",false,"v2",{"id":151,"name":5,"line":6,"ai":148,"cat":19,"year":12,"points":13,"comments":14,"rec":28,"s":9,"top":17,"kw":152,"maker":10,"domain":153,"tier":18,"attempts":31,"strip":154,"url":-1,"mix":155,"praise":59,"objection":68,"sub":20},35440736,[23,24,25,26,27],"","0010305",[30,30,31,30],1794036633524]