Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AppArmor and SecComp profiles for kubernetes #918

Closed
iainsproat opened this issue Aug 12, 2022 · 1 comment
Closed

AppArmor and SecComp profiles for kubernetes #918

iainsproat opened this issue Aug 12, 2022 · 1 comment
Assignees
@iainsproat
Labels
[ devops ] enhancement New feature or request helm security do not use this label: please report all security vulnerabilities at [email protected]

Comments

@iainsproat
Copy link
Contributor

What package are you referring to?

Kubernetes manifests

Is your feature request related to a problem? Please describe.

To security harden running containers on kubernetes, they should have AppArmor and SecComp profiles.

Describe the solution you'd like

Run docker-slim to profile the containers and generate AppArmor and SecComp profiles.

These profiles should be applied

Describe alternatives you've considered

Additional context

Related issues or community discussions

#917
#899
@iainsproat iainsproat added enhancement New feature or request security do not use this label: please report all security vulnerabilities at [email protected] labels Aug 12, 2022
@iainsproat iainsproat mentioned this issue Aug 12, 2022
Merged
@iainsproat iainsproat self-assigned this Aug 15, 2022
@iainsproat
Copy link
Contributor Author

Replaced with Linear issue https://linear.app/speckle/issue/WEB-1623/all-kubernetes-components-should-have-apparmor-and-seccomp-profiles

@iainsproat iainsproat closed this as not planned Won't fix, can't repro, duplicate, stale Aug 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@iainsproat iainsproat

Labels
[ devops ] enhancement New feature or request helm security do not use this label: please report all security vulnerabilities at [email protected]
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@iainsproat @didimitrie