Skip to content
This repository has been archived by the owner on Feb 22, 2024. It is now read-only.

Add support for policy language configmap #4

Open
surajssd opened this issue Apr 18, 2022 · 2 comments
Open

Add support for policy language configmap #4

surajssd opened this issue Apr 18, 2022 · 2 comments
Labels
kind/enhancement New feature or request

Comments

@surajssd
Copy link
Member

surajssd commented Apr 18, 2022

Right now instead of going into implementing full-fledged CRDs, rely on a configmap for the policy information. The app will read the policy from a configmap with name fanotify-policy in fanotify-mon namespace with key policy. This policy will be parsed by the application to decide what pods should be selected for policy enforcement.

Here is the document to flesh out the policy language.

@surajssd surajssd added kind/bug Something isn't working and removed kind/bug Something isn't working labels Apr 18, 2022
@knrt10 knrt10 added the kind/enhancement New feature or request label Apr 19, 2022
@vbatts
Copy link

vbatts commented Apr 19, 2022

@vbatts
Copy link

vbatts commented Apr 19, 2022

Looks like our seccompagent is working with it as well kinvolk/seccompagent#12 (additional info https://github.com/kubearmor/KubeArmor/blob/main/getting-started/security_policy_specification.md)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
kind/enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants