vee1e/kubearmor-client
1
0
Fork 0
mirror of https://github.com/vee1e/kubearmor-client.git synced 2026-09-01 18:28:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
mirror of https://github.com/vee1e/kubearmor-client - KubeArmor cli tool aka kArmor 🤖
612 commits 19 branches 103 tags 2.1 MiB
Find a file
Exact
Harisudarsan c5003993cc Add profile docs for filtering 
Signed-off-by: Harisudarsan <sudarshanhari561@gmail.com>
2025-06-09 14:10:04 +05:30
.github/workflows Update ossf/scorecard-action action to v2.4.1 2025-05-20 07:00:46 +00:00
cmd minor fix 2025-05-21 17:04:09 +05:30
deployment
hacks
install minor fix 2025-05-21 17:04:09 +05:30
k8s add mtls support 2024-03-15 13:27:05 +05:30
log chore(logs): add output format option to logs command (#447) 2024-07-24 17:56:58 +05:30
probe Karmor support for windows and removal of cilium (#471) 2025-01-16 17:03:45 +05:30
profile Add profile docs for filtering 2025-06-09 14:10:04 +05:30
recommend Karmor support for windows and removal of cilium (#471) 2025-01-16 17:03:45 +05:30
rotatetls
selfupdate
sysdump Karmor support for windows and removal of cilium (#471) 2025-01-16 17:03:45 +05:30
tests Updated the static policies under res/out and updated kubearmor dependency 2024-07-23 00:29:49 +05:30
utils Support karmor install for non-k8s environment (#475) 2025-05-20 12:28:28 +05:30
version
vm remove deprecated package vm 2025-01-16 20:15:02 +05:30
.gitignore Support karmor install for non-k8s environment (#475) 2025-05-20 12:28:28 +05:30
.goreleaser.yaml Karmor support for windows and removal of cilium (#471) 2025-01-16 17:03:45 +05:30
CONTRIBUTING.md remove deprecated package vm 2025-01-16 20:15:02 +05:30
go.mod Support karmor install for non-k8s environment (#475) 2025-05-20 12:28:28 +05:30
go.sum Support karmor install for non-k8s environment (#475) 2025-05-20 12:28:28 +05:30
install.sh using PWD as tmp dir when access to /tmp/ is not available 2025-04-26 12:31:43 +05:30
LICENSE
main.go
Makefile Karmor support for windows and removal of cilium (#471) 2025-01-16 17:03:45 +05:30
README.md remove deprecated package vm 2025-01-16 20:15:02 +05:30
renovate.json Feat: added postUpdate option in Renovate for go tidy (#429) 2024-05-07 11:58:05 +05:30

README.md

OpenSSF Scorecard FOSSA Status

karmor

karmor is a client tool to help manage KubeArmor.

Installation

curl -sfL http://get.kubearmor.io/ | sh -s

Installing From Source

Build karmor from source if you want to test the latest (pre-release) karmor version.

git clone https://github.com/kubearmor/kubearmor-client.git
cd kubearmor-client
make install

Steps to Verify the Binary (Recommended)

We sign all releases with cosign, therefore we recommend verifying karmor tarball prior to its installation.

Below are the instructions to verify the binary using cosign for version v1.1.0.

  • Use an environment variable to set the karmor version
export KARMOR_VERSION="1.1.0"
  • Download released tarball, certificate, and signature files
Download Details 
curl -LO https://github.com/kubearmor/kubearmor-client/releases/download/v${KARMOR_VERSION}/karmor_${KARMOR_VERSION}_linux_amd64.tar.gz

curl -LO https://github.com/kubearmor/kubearmor-client/releases/download/v${KARMOR_VERSION}/karmor_${KARMOR_VERSION}_linux_amd64.tar.gz.cert

curl -LO https://github.com/kubearmor/kubearmor-client/releases/download/v${KARMOR_VERSION}/karmor_${KARMOR_VERSION}_linux_amd64.tar.gz.sig
  • Verify the released tarball integrity with cosign
Verification Details 
cosign verify-blob karmor_${KARMOR_VERSION}_linux_amd64.tar.gz --certificate-identity=https://github.com/kubearmor/kubearmor-client/.github/workflows/release.yml@refs/tags/v${KARMOR_VERSION} --certificate-oidc-issuer=https://token.actions.githubusercontent.com --signature karmor_${KARMOR_VERSION}_linux_amd64.tar.gz.sig --certificate karmor_${KARMOR_VERSION}_linux_amd64.tar.gz.cert

Usage

CLI Utility to help manage KubeArmor

KubeArmor is a container-aware runtime security enforcement system that
restricts the behavior (such as process execution, file access, and networking
operation) of containers at the system level.

Usage:
  karmor [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  install     Install KubeArmor in a Kubernetes Cluster
  logs        Observe Logs from KubeArmor
  probe       Checks for supported KubeArmor features in the current environment
  profile     Profiling of logs
  recommend   Recommend Policies
  rotate-tls  Rotate webhook controller tls certificates
  selfupdate  selfupdate this cli tool
  sysdump     Collect system dump information for troubleshooting and error report
  uninstall   Uninstall KubeArmor from a Kubernetes Cluster
  version     Display version information
  vm          VM commands for non kubernetes/bare metal KubeArmor

Flags:
      --context string      Name of the kubeconfig context to use
  -h, --help                help for karmor
      --kubeconfig string   Path to the kubeconfig file to use

Use "karmor [command] --help" for more information about a command.

License

FOSSA Status