base-cluster: integrate tetragon

teutonet / teutonet-helm-charts

MIT License

12 stars 5 forks source link

base-cluster: integrate tetragon #1046

Closed cwrau closed 2 weeks ago

cwrau commented 1 month ago

[x] install tetragon
[x] connect it to prometheus
[x] add grafana dashboard (skipped for now)
[ ] allow configuration for a "high-security" mode, locking down as much as possible
[x] configure image registry
[x] allow images in trusted_registries
[x] try to not use the operator

tasches commented 1 month ago

There is a helm chart for tetragon available. We can try a protype installation of it tetragon-helmchart

marvinWolff commented 1 month ago

After searching for a dashboard and not finding a good one i will leave the dashboard out for now.

marvinWolff commented 2 weeks ago

Tetragon is implemented. After much testing we decided not to include default policies, as these are highly individiual and have a risk of locking down the cluster from all access.