-
#### What happened:
After concluding some seccomp `ProfileRecording`s, two of the profiles failed to install; one has an empty status and the other is stuck in `Terminating`:
```
$ k get sp -A …
-
We use Websphere Liberty Operator to test new release of Instant-On.
We use the WebSphere Liberty Operator (WLO) to test new releases of Instant-On. While testing Instant-On 24.0.0.10, I encounter…
-
## Release Checklist
[Backlog Status](https://github.com/orgs/kubearmor/projects/17/views/1)
- [ ] Manual Tests
- [ ] EKS - BottleRocket
- [ ] EKS - Gravitron (ARM64)
- [ ] EKS - …
-
vpa-autoscaler-updater pod can't adjust cert-manager deployment, there is an error:
1113 12:33:40.225140 1 capping.go:79] no matching Container found for recommendation cert-manager
vpa he…
-
It's not possible to run multiple instances of `ig image build` in parallel as some of them fail.
### How to reproduce
Two different ways to reproduce it (they are the same issue in the end, bu…
-
### Type of issue
Outdated article
### Feedback
This page mentions the following as part of the _Secure computing_ section:
_Seccomp is also a Linux kernel security module, and is natively suppo…
-
The advise gadgets capture events and suggest different configurations. We should also support them as image-based gadgets.
This support requires two different things:
- access contents from ebpf…
-
**Describe the bug**:
I think that RBAC and PSP applied to logging-operator, fluent-bit and fluentd are **too permissive**.
**Proposal**:
I propose following RBAC and PSP to restrict as much as p…
-
It is not possible to configure the Seccomp profile for the Helm hook jobs (such as https://github.com/neticdk/k8s-oaas-observability/blob/main/charts/prometheus-operator/templates/admission-webhooks/…
-
## Need Lots of References...
### Permissions
[amicontained](https://github.com/genuinetools/amicontained)
To install in a pod:
Assume you have running pod `node-starter-deploy-7f68bf7d57-rm…