KubeArmor Operator Enhancements

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

https://kubearmor.io/

Apache License 2.0

1.45k stars 335 forks source link

KubeArmor Operator Enhancements #1766

Open daemon1024 opened 3 months ago

daemon1024 commented 3 months ago

[ ] 1. Use Versioned Release (Move away from stable/latest tags)
[ ] 2. Reduced RBAC
- [ ] helm config to reduce operator roles
- [ ] operator automatically reduces for kubearmor
[ ] 3. tolerations
[ ] 4. args field for kubearmor daemonset
[ ] 5. remove priorityClass and keep it configurable
[ ] 6. don't deploy controller in case of bpflsm only
[ ] 7. remove init

Ishaanj18 commented 3 months ago

Can I work on this issue?