kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
https://kubearmor.io/
Apache License 2.0
1.31k stars 322 forks source link

kubearmor helm charts on artifacthub #1736

Open kranurag7 opened 2 months ago

kranurag7 commented 2 months ago

Feature Request

Short Description

As of now, kubearmor helm charts are not visible on artifacthub. This issue tracks adding the same.

Describe the solution you'd like

It should be something similar to https://artifacthub.io/packages/helm/cert-manager/cert-manager

Please read: https://artifacthub.io/docs/topics/repositories/helm-charts/

legorie commented 2 months ago

Hi Anurag, would like to pick this up. For now, tried a test one.. https://artifacthub.io/packages/helm/kubearmor-test/kubearmor

Will work on creating an org in artifacthub and create a proper listing.

legorie commented 2 months ago
Screenshot 2024-04-29 at 12 22 21 PM Screenshot 2024-04-29 at 12 26 47 PM

Not able to create an org with kubearmor or kubearmor.io

legorie commented 2 months ago

I've created an org called kubearmor-io (under my login) and included the kubearmor helm charts. The final results look like this : https://artifacthub.io/packages/helm/kubearmor/kubearmor https://artifacthub.io/packages/helm/kubearmor/kubearmor-operator

kranurag7 commented 2 months ago

@legorie I think this would be one time requirement only? I saw the update and I think charts are already updated for 1.3.4 which was released today.

I also read the following from docs: https://artifacthub.io/docs/topics/repositories/helm-charts/

There is an extra metadata file that you can add at the repository URL’s path named artifacthub-repo.yml, which can be used to setup features like Verified publisher or Ownership claim. Please note that the artifacthub-repo.yml metadata file must be located at the same level of the chart repository index.yaml file, and it must be served from the chart repository HTTP server as well.

Would be great to have the charts verified. I think this would require adding artifacthub-repo.yml to kubearmor repo.

legorie commented 1 month ago

From what I reckon, it is a one time setup. There are cron jobs set which pick up changes from our charts at regular intervals. I'll work on getting the charts verified.

legorie commented 1 month ago

@kranurag7 @Ankurk99 can you guys pls create an Artifact Hub account and share your Artifact Hub's user name, I'll add you as members to the kubearmor-io ORG created. Please tag other stake holders as needed.

VasuDevrani commented 1 month ago

@legorie still on it?