Open Ankurk99 opened 1 year ago
@Ankurk99 I would like to work on this but I would require your guidance along the way. So like can you please elaborate on this issue a little I get what we have to do I want to know how to do this.
@ShivangShandilya Glad to see your interest. You can start with checking out KubeVirt and install a setup environment https://kubevirt.io/labs/kubernetes/lab1.html. Also preparing a design document for how it actually works will help. We ourselves haven't tried KubeVirt before so we will be learning it together :smile:
Ohh nice, ok so I'll check out KubeVirt. Correct me if I'm wrong but in the design document basically, all I'll have to add will be how it works and what all steps are there to install a setup env right?? And also where can I share the same when it's ready?
all I'll have to add will be how it works and what all steps are there to install a setup env right?
Yes, how it works, how to set-up the environment, Can KubeArmor be installed on it, what all changes are required to do so. You can share the link to the document here only and we will add it to the KubeArmor wiki
Hey @ShivangShandilya did you get a chance to look into the issue?
If no one is working I am interested in this @Ankurk99
Hey @ShivangShandilya did you get a chance to look into the issue?
Yes I have been looking into it but got a little side tracked because of getting my gsoc proposals ready. Will get back to it ASAP but will need some time
Points to be noted:
There are no changes in deployment steps. KubeArmor relay would internally know that kubevirt resources are available and thus needs to connect to the corresponding VMI (the VMI IP address is available in the corresponding resource).
Relay would proactively connect to the VMI and maintain a state for every VMI. Note that it is possible that the KubeArmor is installed at a later point in time on the VMI. Or the KubeArmor might be stopped and later started back again. All these conditions needs to be handled.
Note that the KubeArmor deployed in the KubeVirt k8s cluster is for the kubevirt control plane security vs KubeArmor deployed in the VMI is for the data plane security.
Hi @DelusionalOptimist are you working on this ?
Feature Request
Test if KubeArmor can be run on KubeVirt
The aim is to check how KubeVirt works and whether it's possible to run KubeArmor on it. We should also check the changes which needs to be done in order to support it.