-
## What is the Problem Being Solved?
[seccomp(2)](https://en.wikipedia.org/wiki/Seccomp) is a Linux kernel facility that allows a process to voluntarily give up access to nearly everything. Once in…
-
Initially, we would like to respond statically. It means hard coding.
https://github.com/opencontainers/runtime-spec/pull/1130
-
First of all, great project, love it. I built a similar proof of concept in https://github.com/imjasonh/seccomp-profile which I can now archive and point to this much better replacement 🎉
One thin…
-
# Problem Description
If you know that nomad's data dir is set to `/opt/nomad/data` then you can craft a job like this
```
template {
destination = "local/seccomp.json"
…
-
**Describe the bug**
We want to completly remove the securityContext entry from the grafana deployment to make it work within our openshift environment. But we don't seem to be able to completly disa…
-
Add support of Pod Security Policy in the operator. Right now it is not possible to deploy the operator that has PSP enabled in it.
I have restricted PSP on my cluster and then orchestrator fails f…
-
KubeArmor is a security engine and thus it is imperative that it follows all the security best practices. The aim is to ensure security of the KubeArmor itself. Much of the work towards following best…
-
#### Is your documentation request related to a feature? If so, which one?
OpenShift support was added via https://github.com/grafana/mimir/pull/2219 , I cannot find any documentation to go along w…
-
Currently `notify_id_valid` returns `Result` or more precise it returns `Ok(())` if the id is valid or `Err(SeccompError::new(Errno(ENOENT)))` if it is not valid.
This results in code like this:
…
-
**PROBLEM:**
Currently, helm chart installation fails with with the following values enabled:
1. tls.enabled = true
2. tls.certs.selfSigner.enabled = false
3. tls.certs.certManager = true
W…