diff --git a/Dockerfile b/Dockerfile index f2816bae..db3c676a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -82,8 +82,8 @@ ARG VERSION=latest ENV KUBEARMOR_UBI=true LABEL name="kubearmor" \ - vendor="Accuknox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor container image based on redhat ubi" \ @@ -119,8 +119,8 @@ ARG VERSION=latest ENV KUBEARMOR_UBI=true LABEL name="kubearmor" \ - vendor="Accuknox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor container image based on redhat ubi" \ diff --git a/Dockerfile.init b/Dockerfile.init index 86c99acf..6bfe0f38 100644 --- a/Dockerfile.init +++ b/Dockerfile.init @@ -23,8 +23,8 @@ FROM redhat/ubi10-minimal AS kubearmor-init-ubi ARG VERSION=latest LABEL name="kubearmor-init" \ - vendor="Accuknox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor-init container image based on redhat ubi" \ diff --git a/KubeArmor/.goreleaser.yaml b/KubeArmor/.goreleaser.yaml index d6c6d988..858ddde8 100644 --- a/KubeArmor/.goreleaser.yaml +++ b/KubeArmor/.goreleaser.yaml @@ -60,7 +60,7 @@ nfpms: - rpm replaces: - kubearmor - maintainer: "Barun Acharya " + maintainer: "KubeArmor Team " description: | Cloud-native Runtime Security Enforcement System vendor: "kubearmor" diff --git a/getting-started/kubearmor-events.md b/getting-started/kubearmor-events.md index eb7c833a..39748b00 100644 --- a/getting-started/kubearmor-events.md +++ b/getting-started/kubearmor-events.md @@ -23,13 +23,13 @@ | HostPPID | list the details of host Parent Process ID | 967496 | | Labels | shows the pod label from where log generated | app=discovery-engine | | Message | gives the message specified in the policy | Alert! Execution of package management process inside container is denied | -| NamespaceName | lists the namespace where pod is running | accuknox-agents | +| NamespaceName | lists the namespace where pod is running | nginx | | PID | lists the process ID running in container | 1 | | PPID | lists the Parent process ID running in container | 967496 | | ParentProcessName | gives the parent process name from where the operation happened | /usr/bin/containerd-shim-runc-v2 | | PodName | lists the pod name where the log got generated | mysql-76ddc6ddc4-h47hv | | ProcessName | specifies the operation that happened inside the pod for this log | /knoxAutoPolicy | -| Resource | lists the resources that was requested | //accuknox-obs.db | +| Resource | lists the resources that was requested | //nginx-obs.db | | Result | shows whether the event was allowed or denied | Passed | | Source | lists the source from where the operation request came | /knoxAutoPolicy | | Type | specifies it as container log | ContainerLog | diff --git a/pkg/KubeArmorController/Dockerfile b/pkg/KubeArmorController/Dockerfile index 5995f2e2..f9681a8b 100644 --- a/pkg/KubeArmorController/Dockerfile +++ b/pkg/KubeArmorController/Dockerfile @@ -36,8 +36,8 @@ FROM redhat/ubi10-minimal AS controller-ubi ARG VERSION=latest LABEL name="kubearmor-controller" \ - vendor="AccuKnox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor-controller container image based on redhat ubi" \ diff --git a/pkg/KubeArmorOperator/Dockerfile b/pkg/KubeArmorOperator/Dockerfile index 93c3057c..36b27292 100644 --- a/pkg/KubeArmorOperator/Dockerfile +++ b/pkg/KubeArmorOperator/Dockerfile @@ -57,8 +57,8 @@ FROM redhat/ubi10-minimal AS operator-ubi ARG VERSION=latest LABEL name="kubearmor-operator" \ - vendor="Accuknox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor-operator container image based on redhat ubi" \ @@ -92,8 +92,8 @@ FROM redhat/ubi10-minimal AS snitch-ubi ARG VERSION=latest LABEL name="kubearmor-snitch" \ - vendor="Accuknox" \ - maintainer="Barun Acharya, Ramakant Sharma" \ + vendor="KubeArmor" \ + maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \ version=${VERSION} \ release=${VERSION} \ summary="kubearmor-snitch container image based on redhat ubi" \ diff --git a/pkg/KubeArmorOperator/recommend/harden-cronjob-cfg.yaml b/pkg/KubeArmorOperator/recommend/harden-cronjob-cfg.yaml index 92203858..91361c31 100644 --- a/pkg/KubeArmorOperator/recommend/harden-cronjob-cfg.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-cronjob-cfg.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-cronjob-cfg spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-crypto-miners.yaml b/pkg/KubeArmorOperator/recommend/harden-crypto-miners.yaml index 6aaa329f..a250130c 100644 --- a/pkg/KubeArmorOperator/recommend/harden-crypto-miners.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-crypto-miners.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-crypto-miners spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-file-integrity-monitoring.yaml b/pkg/KubeArmorOperator/recommend/harden-file-integrity-monitoring.yaml index c74046fe..dedb6041 100644 --- a/pkg/KubeArmorOperator/recommend/harden-file-integrity-monitoring.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-file-integrity-monitoring.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-file-integrity-monitoring spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-impair-defense.yaml b/pkg/KubeArmorOperator/recommend/harden-impair-defense.yaml index 7d555b38..1314f4ee 100644 --- a/pkg/KubeArmorOperator/recommend/harden-impair-defense.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-impair-defense.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-impair-defense spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-k8s-client-tool-exec.yaml b/pkg/KubeArmorOperator/recommend/harden-k8s-client-tool-exec.yaml index a2c17d11..d3940fd9 100644 --- a/pkg/KubeArmorOperator/recommend/harden-k8s-client-tool-exec.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-k8s-client-tool-exec.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-k8s-client-tool-exec spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-maint-tools-access.yaml b/pkg/KubeArmorOperator/recommend/harden-maint-tools-access.yaml index 0e45d034..9aa7ef21 100644 --- a/pkg/KubeArmorOperator/recommend/harden-maint-tools-access.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-maint-tools-access.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-maint-tools-access spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-network-service-scanning.yaml b/pkg/KubeArmorOperator/recommend/harden-network-service-scanning.yaml index e42966b9..33de9d03 100644 --- a/pkg/KubeArmorOperator/recommend/harden-network-service-scanning.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-network-service-scanning.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-network-service-scanning spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-pkg-mngr-exec.yaml b/pkg/KubeArmorOperator/recommend/harden-pkg-mngr-exec.yaml index cf1cdf64..40613b7b 100644 --- a/pkg/KubeArmorOperator/recommend/harden-pkg-mngr-exec.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-pkg-mngr-exec.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-pkg-mngr-exec spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-remote-services.yaml b/pkg/KubeArmorOperator/recommend/harden-remote-services.yaml index 5d1e31e3..3e91a235 100644 --- a/pkg/KubeArmorOperator/recommend/harden-remote-services.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-remote-services.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-remote-services spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-system-owner-discovery.yaml b/pkg/KubeArmorOperator/recommend/harden-system-owner-discovery.yaml index 1ff2bf2b..8cc89c1b 100644 --- a/pkg/KubeArmorOperator/recommend/harden-system-owner-discovery.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-system-owner-discovery.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-system-owner-discovery spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/harden-trusted-cert-mod.yaml b/pkg/KubeArmorOperator/recommend/harden-trusted-cert-mod.yaml index b7e97d20..e4740556 100644 --- a/pkg/KubeArmorOperator/recommend/harden-trusted-cert-mod.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-trusted-cert-mod.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-trusted-cert-mod spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-write-etc-dir.yaml b/pkg/KubeArmorOperator/recommend/harden-write-etc-dir.yaml index 2bb6a145..ee7b88b1 100644 --- a/pkg/KubeArmorOperator/recommend/harden-write-etc-dir.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-write-etc-dir.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-write-etc-dir spec: action: Block diff --git a/pkg/KubeArmorOperator/recommend/harden-write-in-shm-dir.yaml b/pkg/KubeArmorOperator/recommend/harden-write-in-shm-dir.yaml index 51af2525..9dbc390f 100644 --- a/pkg/KubeArmorOperator/recommend/harden-write-in-shm-dir.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-write-in-shm-dir.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-write-in-shm-dir namespace: gmp-system spec: diff --git a/pkg/KubeArmorOperator/recommend/harden-write-under-dev-dir.yaml b/pkg/KubeArmorOperator/recommend/harden-write-under-dev-dir.yaml index b2b7c25c..01432061 100644 --- a/pkg/KubeArmorOperator/recommend/harden-write-under-dev-dir.yaml +++ b/pkg/KubeArmorOperator/recommend/harden-write-under-dev-dir.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: harden + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: harden name: harden-write-under-dev-dir spec: action: Audit diff --git a/pkg/KubeArmorOperator/recommend/preset-exec.yaml b/pkg/KubeArmorOperator/recommend/preset-exec.yaml index 50e29245..fbc112a7 100644 --- a/pkg/KubeArmorOperator/recommend/preset-exec.yaml +++ b/pkg/KubeArmorOperator/recommend/preset-exec.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: preset + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: preset name: preset-exec spec: presets: diff --git a/pkg/KubeArmorOperator/recommend/preset-fileexec.yaml b/pkg/KubeArmorOperator/recommend/preset-fileexec.yaml index 4b287d8b..3afeaa61 100644 --- a/pkg/KubeArmorOperator/recommend/preset-fileexec.yaml +++ b/pkg/KubeArmorOperator/recommend/preset-fileexec.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: preset + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: preset name: preset-fileexec spec: presets: diff --git a/pkg/KubeArmorOperator/recommend/preset-procenv.yaml b/pkg/KubeArmorOperator/recommend/preset-procenv.yaml index 3fb34996..bbafa5cd 100644 --- a/pkg/KubeArmorOperator/recommend/preset-procenv.yaml +++ b/pkg/KubeArmorOperator/recommend/preset-procenv.yaml @@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1 kind: KubeArmorClusterPolicy metadata: annotations: - app.accuknox.com/source: KubeArmor Operator - app.accuknox.com/type: preset + app.kubearmor.io/source: KubeArmor Operator + app.kubearmor.io/type: preset name: preset-proc-env spec: presets: diff --git a/tests/k8s_env/scenarios/github_test_10/cmd1 b/tests/k8s_env/scenarios/github_test_10/cmd1 index 8bbdff53..a21186aa 100644 --- a/tests/k8s_env/scenarios/github_test_10/cmd1 +++ b/tests/k8s_env/scenarios/github_test_10/cmd1 @@ -1,5 +1,5 @@ source: ubuntu-1-deployment -cmd: curl www.accuknox.com +cmd: curl www.kubearmor.io result: passed --- operation: Network diff --git a/tests/k8s_env/scenarios/github_test_14/cmd2 b/tests/k8s_env/scenarios/github_test_14/cmd2 index 8bbdff53..a21186aa 100644 --- a/tests/k8s_env/scenarios/github_test_14/cmd2 +++ b/tests/k8s_env/scenarios/github_test_14/cmd2 @@ -1,5 +1,5 @@ source: ubuntu-1-deployment -cmd: curl www.accuknox.com +cmd: curl www.kubearmor.io result: passed --- operation: Network