You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
KubeArmor can whitelist processes and assets based on set of rules provided through the policies. This feature allows KubeArmor to achieve Zero-Trust for a workload. But knowing the allowed behaviour for a workload and manually creating these policies is a pain. Therefore we want to provide Zero-trust policies for popular workloads like grafana, wordpress, redis, etc. (let's say some 100 workloads). We want to make these Zero-Trust policies available as artifacts.
Soultion: Checking manually the behaviour of applications and creating policies.
Extended Goal: But since applications will have newer versions and the existing Zero-Trust policies may not work as expected. We can have an automated system to generate these Zero-Trust policies and so we can also automate the process of generating Zero-Trust policies for every version available or newer versions as well.
The text was updated successfully, but these errors were encountered:
KubeArmor can whitelist processes and assets based on set of rules provided through the policies. This feature allows KubeArmor to achieve Zero-Trust for a workload. But knowing the allowed behaviour for a workload and manually creating these policies is a pain. Therefore we want to provide Zero-trust policies for popular workloads like grafana, wordpress, redis, etc. (let's say some 100 workloads). We want to make these Zero-Trust policies available as artifacts.
Soultion: Checking manually the behaviour of applications and creating policies.
Extended Goal: But since applications will have newer versions and the existing Zero-Trust policies may not work as expected. We can have an automated system to generate these Zero-Trust policies and so we can also automate the process of generating Zero-Trust policies for every version available or newer versions as well.
The text was updated successfully, but these errors were encountered: