Update maintainers and annotations in sample policies (#2722)

Signed-off-by: charankamal20 <charanksingh20@gmail.com>
This commit is contained in:
Charan 2026-07-02 11:36:17 +05:30 committed by GitHub
parent f68182c376
commit 3db63ddd5d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
25 changed files with 51 additions and 51 deletions

View file

@ -82,8 +82,8 @@ ARG VERSION=latest
ENV KUBEARMOR_UBI=true
LABEL name="kubearmor" \
vendor="Accuknox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor container image based on redhat ubi" \
@ -119,8 +119,8 @@ ARG VERSION=latest
ENV KUBEARMOR_UBI=true
LABEL name="kubearmor" \
vendor="Accuknox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor container image based on redhat ubi" \

View file

@ -23,8 +23,8 @@ FROM redhat/ubi10-minimal AS kubearmor-init-ubi
ARG VERSION=latest
LABEL name="kubearmor-init" \
vendor="Accuknox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor-init container image based on redhat ubi" \

View file

@ -60,7 +60,7 @@ nfpms:
- rpm
replaces:
- kubearmor
maintainer: "Barun Acharya <barun.acharya@accuknox.com>"
maintainer: "KubeArmor Team <support@kubearmor.io>"
description: |
Cloud-native Runtime Security Enforcement System
vendor: "kubearmor"

View file

@ -23,13 +23,13 @@
| HostPPID | list the details of host Parent Process ID | 967496 |
| Labels | shows the pod label from where log generated | app=discovery-engine |
| Message | gives the message specified in the policy | Alert! Execution of package management process inside container is denied |
| NamespaceName | lists the namespace where pod is running | accuknox-agents |
| NamespaceName | lists the namespace where pod is running | nginx |
| PID | lists the process ID running in container | 1 |
| PPID | lists the Parent process ID running in container | 967496 |
| ParentProcessName | gives the parent process name from where the operation happened | /usr/bin/containerd-shim-runc-v2 |
| PodName | lists the pod name where the log got generated | mysql-76ddc6ddc4-h47hv |
| ProcessName | specifies the operation that happened inside the pod for this log | /knoxAutoPolicy |
| Resource | lists the resources that was requested | //accuknox-obs.db |
| Resource | lists the resources that was requested | //nginx-obs.db |
| Result | shows whether the event was allowed or denied | Passed |
| Source | lists the source from where the operation request came | /knoxAutoPolicy |
| Type | specifies it as container log | ContainerLog |

View file

@ -36,8 +36,8 @@ FROM redhat/ubi10-minimal AS controller-ubi
ARG VERSION=latest
LABEL name="kubearmor-controller" \
vendor="AccuKnox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor-controller container image based on redhat ubi" \

View file

@ -57,8 +57,8 @@ FROM redhat/ubi10-minimal AS operator-ubi
ARG VERSION=latest
LABEL name="kubearmor-operator" \
vendor="Accuknox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor-operator container image based on redhat ubi" \
@ -92,8 +92,8 @@ FROM redhat/ubi10-minimal AS snitch-ubi
ARG VERSION=latest
LABEL name="kubearmor-snitch" \
vendor="Accuknox" \
maintainer="Barun Acharya, Ramakant Sharma" \
vendor="KubeArmor" \
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
version=${VERSION} \
release=${VERSION} \
summary="kubearmor-snitch container image based on redhat ubi" \

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-cronjob-cfg
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-crypto-miners
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-file-integrity-monitoring
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-impair-defense
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-k8s-client-tool-exec
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-maint-tools-access
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-network-service-scanning
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-pkg-mngr-exec
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-remote-services
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-system-owner-discovery
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-trusted-cert-mod
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-write-etc-dir
spec:
action: Block

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-write-in-shm-dir
namespace: gmp-system
spec:

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: harden
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: harden
name: harden-write-under-dev-dir
spec:
action: Audit

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: preset
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: preset
name: preset-exec
spec:
presets:

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: preset
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: preset
name: preset-fileexec
spec:
presets:

View file

@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
kind: KubeArmorClusterPolicy
metadata:
annotations:
app.accuknox.com/source: KubeArmor Operator
app.accuknox.com/type: preset
app.kubearmor.io/source: KubeArmor Operator
app.kubearmor.io/type: preset
name: preset-proc-env
spec:
presets:

View file

@ -1,5 +1,5 @@
source: ubuntu-1-deployment
cmd: curl www.accuknox.com
cmd: curl www.kubearmor.io
result: passed
---
operation: Network

View file

@ -1,5 +1,5 @@
source: ubuntu-1-deployment
cmd: curl www.accuknox.com
cmd: curl www.kubearmor.io
result: passed
---
operation: Network