Commit graph

146 commits

Author SHA1 Message Date
smilingprogrammer
ce54b5c4b2 chore: typo fix for cli karmor logs --secure
Signed-off-by: smilingprogrammer <abdulsoburoyewale@gmail.com>
2026-06-03 15:11:15 +05:30
mrrishi
3433e4b58f probe: fix namespace field to the policies list
Signed-off-by: mrrishi <mrrishi373@gmail.com>
Signed-off-by: jokestax <mrrishi373@gmail.com>
Signed-off-by: mrrishi <mrrishi373@gmail.com>

Signed-off-by: rksharma95 <ramakant@accuknox.com>
2026-01-02 10:21:04 +05:30
tesla59
ee40b91f0b feat: (recommend) Implement recommend functionality for Docker Client
cmd: rename k8s client to k8sclient

Signed-off-by: tesla59 <nishant@heim.id>

cmd: wrap k8sClient in interface to use in recommend package

Signed-off-by: tesla59 <nishant@heim.id>

k8s: fix ListDeployment method

Signed-off-by: tesla59 <nishant@heim.id>

recommend: refactor k8s policy generation
use a common interface to support other clients as well
also create common Object{} to support different k8s obejcts such as Deployment, Daemonset etc

Signed-off-by: tesla59 <nishant@heim.id>

recommend: use image name as Object's name while generating policy

Signed-off-by: tesla59 <nishant@heim.id>

recommend: remove DeploymentName Field from Object{}

Signed-off-by: tesla59 <nishant@heim.id>

recommend: use ListOptions to select deployment by labels

Signed-off-by: tesla59 <nishant@heim.id>

k8s: generate recommended policies for CronJob, DaemonSet and Jobs

Signed-off-by: tesla59 <nishant@heim.id>

k8s: generate recommend policy for statefulset and unowned replicaset

Signed-off-by: tesla59 <nishant@heim.id>

k8s: remove K8sClientWrapper abstraction

Signed-off-by: tesla59 <nishant@heim.id>

recommend: initialize dockerClient and generate policies for containers as well

Signed-off-by: tesla59 <nishant@heim.id>

recommend: add new flag k8s to specify which client to use
this removes dependency of recommend command on kubearmor

Signed-off-by: tesla59 <nishant@heim.id>

recommend: fallback to docker client if k8s client is not present

Signed-off-by: tesla59 <nishant@heim.id>

recommend: only log the client if images is not specified

Signed-off-by: tesla59 <nishant@heim.id>

recommend: generate policyDir based on image namespace set to null

Signed-off-by: tesla59 <nishant@heim.id>

recommend: trim \n in final report generation

Signed-off-by: tesla59 <nishant@heim.id>

recommend: handle err when listing objects

Signed-off-by: tesla59 <nishant@heim.id>

docker: Use API version negotiation to avoid version mismatch errors

Signed-off-by: tesla59 <nishant@heim.id>
2025-07-15 21:29:08 +05:30
Aryan-sharma11
5e07bf7358
upgrade dependencies
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-07-08 12:55:58 +05:30
Harisudarsan
ec130453ce feat: Add long description for install, log, policy and profile commands
Signed-off-by: Harisudarsan <sudarshanhari561@gmail.com>
2025-06-19 12:00:00 +05:30
Harisudarsan
4951f55c22 improve perf in karmor profile
Signed-off-by: Harisudarsan <sudarshanhari561@gmail.com>
2025-06-13 11:35:50 +05:30
Aryan-sharma11
a148241981
minor fix
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-05-21 17:04:09 +05:30
itsCheithanya
e448ed775a
Support karmor install for non-k8s environment (#475)
* feat: karmor install in unorchestrated env and vm

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>

* upgrade dependecies

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>

---------

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
Co-authored-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-05-20 12:28:28 +05:30
Aryan-sharma11
e22027995b
annotate existing functionality for karmor install
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-02-24 21:32:00 +05:30
Aryan-sharma11
16d74a43e7
fix os-release
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-02-24 13:50:11 +05:30
rksharma95
9cbd026a82 remove deprecated package vm
Signed-off-by: rksharma95 <ramakant@accuknox.com>
2025-01-16 20:15:02 +05:30
Manik Mehta
a5af11a35f
Karmor support for windows and removal of cilium (#471)
* windows support

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

* cilium removed

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

* some changes reverted

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

* add local-release to makefile

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>

* remove contains element

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>

* fix snyk failures and bump dependencies

Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>

---------

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
Co-authored-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2025-01-16 17:03:45 +05:30
Prateek
5d5598ea7c
enabling alert throttling by default
Signed-off-by: Prateek <prateeknandle@gmail.com>
2024-12-06 10:40:12 +05:30
Prateek Nandle
e7b1e60f7b
Merge pull request #449 from Manik2708/sysdump
probe added to sysdump
2024-08-28 03:16:55 +05:30
Manik2708
073bb1ee25 probe added to sysdump
Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

lint error fixed

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

formatting error

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

nocolor-text feature add

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

Update probe/print.go

Co-authored-by: Aryan Sharma <54109867+Aryan-sharma11@users.noreply.github.com>
Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

Update probe/print.go

Co-authored-by: Aryan Sharma <54109867+Aryan-sharma11@users.noreply.github.com>
Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

enhancements

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

enhancements

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

echancement

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

Update cmd/probe.go

Co-authored-by: Aryan Sharma <54109867+Aryan-sharma11@users.noreply.github.com>
Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

flags remoeved

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

os.Stdout fix

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

another enhancement

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>

linting fixed

Signed-off-by: Manik2708 <mehtamanik96@gmail.com>
2024-08-28 02:14:29 +05:30
Navin Chandra
217e88dc15
chore(logs): add output format option to logs command (#447)
Signed-off-by: Navin Chandra <navinchandra772@gmail.com>
2024-07-24 17:56:58 +05:30
Rudraksh Pareek
daa95c813f use stable operator
Signed-off-by: Rudraksh Pareek <rudraksh@accuknox.com>
2024-06-24 18:12:16 +05:30
rksharma95
6cae3d1bce update tls config
Signed-off-by: rksharma95 <ramakant@accuknox.com>
2024-03-26 11:47:46 +05:30
rksharma95
32e59fec83 add mtls support
Signed-off-by: rksharma95 <ramakant@accuknox.com>
2024-03-15 13:27:05 +05:30
rootxrishabh
53aba13b91 Added operator CR updation functionality
Signed-off-by: rootxrishabh <risrock02@gmail.com>
2024-03-14 09:08:11 +00:00
rootxrishabh
dcf6e79949 Enabled operator installation for karmor
Signed-off-by: rootxrishabh <risrock02@gmail.com>

Logs improved, flags implemented for --save

Signed-off-by: rootxrishabh <risrock02@gmail.com>

Added operator configuration

Signed-off-by: rootxrishabh <risrock02@gmail.com>

Improvements made

Signed-off-by: rootxrishabh <risrock02@gmail.com>
2024-03-06 09:04:59 +00:00
Achref Ben Saad
d6ce6fdf00 fix bug & add flags
Signed-off-by: Achref Ben Saad <achref@accuknox.com>
2024-02-28 10:47:32 +01:00
Achref Ben Saad
bf9caf4375 enable custom registry
Signed-off-by: Achref Ben Saad <achref@accuknox.com>
2024-02-01 10:47:52 +01:00
Ankur Kothiwal
800a93dc89 fix karmor uninstall
Signed-off-by: Ankur Kothiwal <ankur.kothiwal99@gmail.com>
2023-11-17 18:26:23 +05:30
Aryan-sharma11
44c3aeabc9
feat: allow karmor probe to show policies applied in systemd mode
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2023-10-20 16:12:16 +05:30
Ankur Kothiwal
d6b539d2ef remove summary, discover as they depend on an external tool
Signed-off-by: Ankur Kothiwal <ankur.kothiwal99@gmail.com>
2023-10-18 21:07:14 +05:30
Ankur Kothiwal
4507cc069e
feat(ns): update default namespace to "kubearmor" (#361)
* update default namespace to "kubearmor"

Signed-off-by: Ankur Kothiwal <ankur.kothiwal99@gmail.com>

* create default ns(kubearmor) before installing KubeArmor

Signed-off-by: Ankur Kothiwal <ankur.kothiwal99@gmail.com>

---------

Signed-off-by: Ankur Kothiwal <ankur.kothiwal99@gmail.com>
2023-09-26 11:41:52 +05:30
Barun Acharya
8824025072
Merge pull request #359 from Prateeknandle/refractor-recommend
refactor recommend cli
2023-09-21 11:35:40 +05:30
Anurag Rajawat
96859d47d6
feat: Add support for k0s
Signed-off-by: Anurag Rajawat <anuragsinghrajawat22@gmail.com>
2023-09-18 19:59:15 +05:30
Prateek Nandle
05b62157d1 adding changes from pr 353 & 371
Signed-off-by: Prateek Nandle <prateeknandle@gmail.com>
2023-09-08 21:23:44 +05:30
PrimalPimmy
3b494a96f4 feature to export profile data
Signed-off-by: PrimalPimmy <Prashant20.pm@gmail.com>
2023-09-01 10:55:28 +05:30
Prateek Nandle
73fec202ad migrate Userhome func to common
Signed-off-by: Prateek Nandle <prateeknandle@gmail.com>
2023-08-31 16:37:50 +05:30
achrefbensaad
bf4f22d50b refractoring recommend cli
Signed-off-by: Prateek Nandle <prateeknandle@gmail.com>
2023-08-29 18:19:39 +05:30
Rahul Jadhav
4282ba65c7
Merge pull request #348 from PrimalPimmy/profile
(feat) [In progress] Karmor profile improvements
2023-08-07 11:39:58 +05:30
PrimalPimmy
e56ab56f1e Error successfully handled
Signed-off-by: PrimalPimmy <Prashant20.pm@gmail.com>
2023-08-07 00:44:31 +05:30
PrimalPimmy
0697353779 fixed accidently changing podname to containername
Signed-off-by: PrimalPimmy <Prashant20.pm@gmail.com>
2023-08-04 21:24:26 +05:30
Rahul Jadhav
7d577abec1 stop karmor logs if the Watch* fails
Signed-off-by: Rahul Jadhav <nyrahul@gmail.com>
2023-08-04 00:56:47 +05:30
PrimalPimmy
1f6048379f Agrregation logic working and some options added
Signed-off-by: PrimalPimmy <Prashant20.pm@gmail.com>
2023-07-31 02:20:19 +05:30
PrimalPimmy
ec228f5a94 Profile improvements
Signed-off-by: PrimalPimmy <Prashant20.pm@gmail.com>
2023-07-25 04:02:57 +05:30
daemon1024
152d1cb795 feat/fix(install): add verify flag and revert timeout
timeout update was reverted in 8345f37 (git blame @daemon1024 :) ) we revert the revert.

includes formatting fixes as well

Signed-off-by: daemon1024 <barun1024@gmail.com>
2023-06-30 17:32:37 +05:30
Aryan-sharma11
5d186ec6e6
Added option for JSON output for karmor probe
Signed-off-by: Aryan-sharma11 <aryan1126.sharma@gmail.com>
2023-06-28 19:52:54 +05:30
daemon1024
cd010a151a feat(install): Allow Configuring Visibility in Config Map
Signed-off-by: daemon1024 <barun1024@gmail.com>
2023-06-20 17:03:28 +05:30
Vyom-Yadav
caeba1f67c
feat: Connect with discovery-engine to recommend Kyverno policies
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
2023-04-19 21:13:07 +05:30
Sahil Raja
a0cf786477 Revert "chores(accuknox-cli): update karmor to accuknox-cli"
Signed-off-by: sahil <sahilraja242@gmail.com>
2023-04-13 12:51:33 +05:30
sahil
bcd6ed2d06 chores(accuknox-cli): update karmor to accuknox-cli
Signed-off-by: sahil <sahilraja242@gmail.com>
2023-04-13 12:24:34 +05:30
daemon1024
109f7fe501 fix(install): default to empty image tag signifying stable 2023-03-07 23:00:36 +05:30
daemon1024
8833040e27 install: add options to configure daemonset image
Signed-off-by: daemon1024 <barun1024@gmail.com>
2023-03-07 22:25:18 +05:30
daemon1024
b43f10f2e8 feat(install): add option for custom init container image
Change default init container image to use stable tag cause latest can have breaking changes

Signed-off-by: daemon1024 <barun1024@gmail.com>
2023-03-07 16:58:13 +05:30
Sibasish Behera
5fde94d80b Merge branch 'main' into env-check 2023-02-13 15:52:42 +05:30
sibashi
75c5fa3888 Updated install command to receive env as a flag
Signed-off-by: sibashi <fangedhamster3114@gmail.com>
2023-02-10 19:47:07 +05:30