mirror of
https://github.com/vee1e/KubeArmor.git
synced 2026-09-01 10:18:29 +00:00
Update maintainers and annotations in sample policies (#2722)
Signed-off-by: charankamal20 <charanksingh20@gmail.com>
This commit is contained in:
parent
f68182c376
commit
3db63ddd5d
25 changed files with 51 additions and 51 deletions
|
|
@ -82,8 +82,8 @@ ARG VERSION=latest
|
|||
ENV KUBEARMOR_UBI=true
|
||||
|
||||
LABEL name="kubearmor" \
|
||||
vendor="Accuknox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor container image based on redhat ubi" \
|
||||
|
|
@ -119,8 +119,8 @@ ARG VERSION=latest
|
|||
ENV KUBEARMOR_UBI=true
|
||||
|
||||
LABEL name="kubearmor" \
|
||||
vendor="Accuknox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor container image based on redhat ubi" \
|
||||
|
|
|
|||
|
|
@ -23,8 +23,8 @@ FROM redhat/ubi10-minimal AS kubearmor-init-ubi
|
|||
ARG VERSION=latest
|
||||
|
||||
LABEL name="kubearmor-init" \
|
||||
vendor="Accuknox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor-init container image based on redhat ubi" \
|
||||
|
|
|
|||
|
|
@ -60,7 +60,7 @@ nfpms:
|
|||
- rpm
|
||||
replaces:
|
||||
- kubearmor
|
||||
maintainer: "Barun Acharya <barun.acharya@accuknox.com>"
|
||||
maintainer: "KubeArmor Team <support@kubearmor.io>"
|
||||
description: |
|
||||
Cloud-native Runtime Security Enforcement System
|
||||
vendor: "kubearmor"
|
||||
|
|
|
|||
|
|
@ -23,13 +23,13 @@
|
|||
| HostPPID | list the details of host Parent Process ID | 967496 |
|
||||
| Labels | shows the pod label from where log generated | app=discovery-engine |
|
||||
| Message | gives the message specified in the policy | Alert! Execution of package management process inside container is denied |
|
||||
| NamespaceName | lists the namespace where pod is running | accuknox-agents |
|
||||
| NamespaceName | lists the namespace where pod is running | nginx |
|
||||
| PID | lists the process ID running in container | 1 |
|
||||
| PPID | lists the Parent process ID running in container | 967496 |
|
||||
| ParentProcessName | gives the parent process name from where the operation happened | /usr/bin/containerd-shim-runc-v2 |
|
||||
| PodName | lists the pod name where the log got generated | mysql-76ddc6ddc4-h47hv |
|
||||
| ProcessName | specifies the operation that happened inside the pod for this log | /knoxAutoPolicy |
|
||||
| Resource | lists the resources that was requested | //accuknox-obs.db |
|
||||
| Resource | lists the resources that was requested | //nginx-obs.db |
|
||||
| Result | shows whether the event was allowed or denied | Passed |
|
||||
| Source | lists the source from where the operation request came | /knoxAutoPolicy |
|
||||
| Type | specifies it as container log | ContainerLog |
|
||||
|
|
|
|||
|
|
@ -36,8 +36,8 @@ FROM redhat/ubi10-minimal AS controller-ubi
|
|||
ARG VERSION=latest
|
||||
|
||||
LABEL name="kubearmor-controller" \
|
||||
vendor="AccuKnox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor-controller container image based on redhat ubi" \
|
||||
|
|
|
|||
|
|
@ -57,8 +57,8 @@ FROM redhat/ubi10-minimal AS operator-ubi
|
|||
ARG VERSION=latest
|
||||
|
||||
LABEL name="kubearmor-operator" \
|
||||
vendor="Accuknox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor-operator container image based on redhat ubi" \
|
||||
|
|
@ -92,8 +92,8 @@ FROM redhat/ubi10-minimal AS snitch-ubi
|
|||
ARG VERSION=latest
|
||||
|
||||
LABEL name="kubearmor-snitch" \
|
||||
vendor="Accuknox" \
|
||||
maintainer="Barun Acharya, Ramakant Sharma" \
|
||||
vendor="KubeArmor" \
|
||||
maintainer="Achref Ben Saad, Aryan Sharma, Aryan Bakliwal" \
|
||||
version=${VERSION} \
|
||||
release=${VERSION} \
|
||||
summary="kubearmor-snitch container image based on redhat ubi" \
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-cronjob-cfg
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-crypto-miners
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-file-integrity-monitoring
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-impair-defense
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-k8s-client-tool-exec
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-maint-tools-access
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-network-service-scanning
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-pkg-mngr-exec
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-remote-services
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-system-owner-discovery
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-trusted-cert-mod
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-write-etc-dir
|
||||
spec:
|
||||
action: Block
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-write-in-shm-dir
|
||||
namespace: gmp-system
|
||||
spec:
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: harden
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: harden
|
||||
name: harden-write-under-dev-dir
|
||||
spec:
|
||||
action: Audit
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: preset
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: preset
|
||||
name: preset-exec
|
||||
spec:
|
||||
presets:
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: preset
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: preset
|
||||
name: preset-fileexec
|
||||
spec:
|
||||
presets:
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: security.kubearmor.com/v1
|
|||
kind: KubeArmorClusterPolicy
|
||||
metadata:
|
||||
annotations:
|
||||
app.accuknox.com/source: KubeArmor Operator
|
||||
app.accuknox.com/type: preset
|
||||
app.kubearmor.io/source: KubeArmor Operator
|
||||
app.kubearmor.io/type: preset
|
||||
name: preset-proc-env
|
||||
spec:
|
||||
presets:
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
source: ubuntu-1-deployment
|
||||
cmd: curl www.accuknox.com
|
||||
cmd: curl www.kubearmor.io
|
||||
result: passed
|
||||
---
|
||||
operation: Network
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
source: ubuntu-1-deployment
|
||||
cmd: curl www.accuknox.com
|
||||
cmd: curl www.kubearmor.io
|
||||
result: passed
|
||||
---
|
||||
operation: Network
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue