kubearmor/KubeArmor issues and pull requests

#1731 - feat: support toleration config

Pull Request - State: open - Opened by tico88612 6 months ago - 9 comments

#1730 - docs: improve KubeArmor contribution docs readability

Pull Request - State: open - Opened by sandipanpanda 6 months ago

#1729 - fix: close tmp file

Pull Request - State: open - Opened by testwill 6 months ago - 1 comment

#1728 - Kubearmor does not enforce anything on pod's entrypoint or execs to kubernetes pods

Issue - State: open - Opened by alexeysofin 6 months ago
Labels: bug

#1727 - Way to constrain only specific selectors

Issue - State: open - Opened by alexeysofin 6 months ago - 5 comments
Labels: enhancement

#1726 - fix(ci): check for controller readiness after restart

Pull Request - State: closed - Opened by daemon1024 6 months ago

#1725 - the "/usr/bin/sleep 1" example policy does not work when installation on a ubuntu22.04.4 VM using systemd mode

Issue - State: open - Opened by seamaner 6 months ago - 7 comments
Labels: bug

#1724 - Update Helm values to reflect sample-config.yml

Issue - State: open - Opened by dirsigler 6 months ago - 3 comments
Labels: enhancement

#1723 - feat : Alert Throttling

Pull Request - State: open - Opened by Prateeknandle 6 months ago - 1 comment

#1722 - docs: updating kubearmor use-cases

Pull Request - State: closed - Opened by nyrahul 6 months ago

#1721 - feat(enforcer): Updating Sign releases

Pull Request - State: closed - Opened by KrishAryan 6 months ago

#1720 - Request: support for taints and tolerations to KubeArmor deployments in Helm charts.

Issue - State: open - Opened by oxie 6 months ago - 4 comments
Labels: enhancement, good first issue, help wanted

#1719 - refactor(chore): fix typo in group owner

Pull Request - State: closed - Opened by Ankurk99 6 months ago

#1718 - chore(CI): automate marketplace release

Pull Request - State: closed - Opened by rksharma95 6 months ago - 1 comment

#1717 - Enabling apparmor based KSP protection on Kubearmor itself

Pull Request - State: open - Opened by PrimalPimmy 6 months ago

#1716 - Update module google.golang.org/grpc to v1.64.0

Pull Request - State: open - Opened by renovate[bot] 6 months ago

#1715 - chore(deps): update apache/skywalking-eyes digest to 3ea9df1

Pull Request - State: open - Opened by renovate[bot] 6 months ago

#1714 - feat: Update KubeArmor to use OCI hooks instead of depending on container runtime socket

Pull Request - State: open - Opened by AbdelrahmanElawady 6 months ago - 2 comments

#1713 - fix(CI): snyk/govuln failures by updating to go 1.21.9 and other dep udpates

Pull Request - State: closed - Opened by DelusionalOptimist 6 months ago - 1 comment

#1712 - Go releaser

Pull Request - State: closed - Opened by Aryan-sharma11 6 months ago

#1711 - Add objectfile for system_monitor in release packages

Pull Request - State: closed - Opened by Aryan-sharma11 6 months ago - 1 comment

#1710 - There is still no /usr/src dir

Issue - State: closed - Opened by aberfeldy 6 months ago - 15 comments
Labels: bug

#1709 - fix(grpc): extend grpc maxrecvmsg size for cri handlers

Pull Request - State: closed - Opened by rksharma95 6 months ago - 1 comment

#1708 - fix(enforcer): suppress permission denied alerts for any non bpflsm enforcer

Pull Request - State: closed - Opened by daemon1024 6 months ago

#1706 - fix govvv compile time rule error in makefile

Pull Request - State: closed - Opened by Stan370 6 months ago - 3 comments

#1705 - Snitch should not mount entire host rootfs

Issue - State: open - Opened by DelusionalOptimist 6 months ago - 2 comments
Labels: enhancement

#1702 - docs: support for Talos Linux

Pull Request - State: open - Opened by rootxrishabh 6 months ago - 1 comment

#1701 - fix(docs): Add non sudo getting starteddeployment_guide.md

Pull Request - State: open - Opened by illume 7 months ago - 1 comment

#1700 - fix(deps): update module github.com/docker/docker to v24.0.9+incompatible [security] - autoclosed

Pull Request - State: closed - Opened by renovate[bot] 7 months ago

#1699 - fix(build): add `go-get-tool` function in makefile of KubeArmorOperator

Pull Request - State: open - Opened by Affan-7 7 months ago - 1 comment

#1698 - KubeArmor daemonset pods failing to deploy successfully on x86 Ubuntu EKS-A Baremetal Env.

Issue - State: closed - Opened by mikemcd3912 7 months ago - 5 comments
Labels: bug

#1697 - test:changed k8sexec with assert command

Pull Request - State: open - Opened by EraKin575 7 months ago

#1695 - feat(gRPC): add tls configurations to the operator and helm

Pull Request - State: closed - Opened by rksharma95 7 months ago - 1 comment

#1692 - Policy name is not matching in the logs; instead, we see it as Defaultposture

Issue - State: closed - Opened by janavenkat 7 months ago
Labels: bug

#1688 - mount procfs instead of using hostpid

Issue - State: open - Opened by daemon1024 7 months ago - 3 comments
Labels: enhancement, help wanted

#1682 - Feature request ! KubeArmor for WSL Ubuntu:22.04

Issue - State: open - Opened by AllenOps08 7 months ago - 1 comment
Labels: enhancement

#1675 - v1.3.1 release checklist

Issue - State: closed - Opened by daemon1024 7 months ago - 2 comments

#1673 - Enhancement: Support new pod API for AppArmor profiles with Kubernetes 1.30+

Issue - State: open - Opened by DelusionalOptimist 7 months ago - 1 comment
Labels: enhancement, help wanted

#1658 - Remove init container dep with BTF CORE

Pull Request - State: open - Opened by daemon1024 7 months ago - 1 comment

#1646 - Update golang.org/x/exp digest to fe59bbe - autoclosed

Pull Request - State: closed - Opened by renovate[bot] 8 months ago

#1645 - fix(deps): update module github.com/cilium/cilium to v1.14.9 [security] - autoclosed

Pull Request - State: closed - Opened by renovate[bot] 8 months ago

#1643 - CI(tests) Use AssertCommand function in every test

Issue - State: open - Opened by PrimalPimmy 8 months ago - 5 comments
Labels: enhancement, good first issue, help wanted

#1639 - Performance differences between AppArmor Enforcer and BPF Enforcer

Issue - State: closed - Opened by dejavudwh 8 months ago - 9 comments
Labels: enhancement

#1634 - Add CI workflow to push KubeArmor Artifacts to RedHat and AWS Marketplace

Issue - State: closed - Opened by rksharma95 8 months ago - 1 comment
Labels: enhancement

#1631 - Kubearmor --> kubearmor-relay reconnection logic fails on error

Issue - State: closed - Opened by seswarrajan 8 months ago - 2 comments
Labels: bug

#1625 - CI(tests): ginkgo tests for host security capabilities of KubeArmor

Issue - State: open - Opened by DelusionalOptimist 8 months ago - 1 comment
Labels: help wanted

#1601 - fix(deps): update module github.com/containerd/containerd to v1.7.22

Pull Request - State: open - Opened by renovate[bot] 8 months ago - 1 comment

#1598 - chore(deps): update module github.com/mattn/go-sqlite3 to v1.14.23

Pull Request - State: open - Opened by renovate[bot] 8 months ago

#1568 - bug: KubeArmor doesn't work on kind with `hostNet=false`

Issue - State: open - Opened by DelusionalOptimist 9 months ago
Labels: bug, help wanted

#1566 - Ability to reduce log level

Issue - State: closed - Opened by michalschott 9 months ago - 4 comments
Labels: enhancement

#1532 - Improve Scorecard Score for Kubearmor

Issue - State: open - Opened by rootxrishabh 10 months ago - 2 comments
Labels: enhancement

#1530 - chore(deps): update actions/checkout action to v3.6.0

Pull Request - State: open - Opened by renovate[bot] 10 months ago

#1528 - chore(deps): update dependency jquery to v3.7.1

Pull Request - State: open - Opened by renovate[bot] 10 months ago

#1519 - chore(deps): update actions/upload-artifact action to v3.2.1

Pull Request - State: open - Opened by renovate[bot] 11 months ago

#1500 - fix (killercoda): fix kubearmor installation script

Pull Request - State: closed - Opened by Ankurk99 11 months ago - 1 comment

#1499 - fix breaking changes introduced in #1498

Pull Request - State: closed - Opened by udit-uniyal 11 months ago - 1 comment

#1498 - fixes(killercoda): fix breaking changes introduced in #1493

Pull Request - State: closed - Opened by Ankurk99 11 months ago

#1497 - modifies the detect enforcer function in the controller

Pull Request - State: closed - Opened by swastik959 11 months ago - 5 comments

#1496 - fix(BPF-LSM):replace return statement with a check condition when file path is NULL

Pull Request - State: open - Opened by Prateeknandle 11 months ago

#1495 - feat(debug): pprof debug version added to kubearmor

Pull Request - State: open - Opened by PrimalPimmy 11 months ago

#1494 - Update Twitter logo that is 'X'.

Issue - State: closed - Opened by Ayush9026 11 months ago - 2 comments
Labels: enhancement

#1493 - Enhancement: Introduce Scripts for K3s and KubeArmor Installation with Error Prevention for killercoda-specific Kubernetes Setup

Pull Request - State: closed - Opened by udit-uniyal 11 months ago - 5 comments

#1492 - <feat> : Audit alerts from BPFLSM enforcer

Pull Request - State: open - Opened by Aryan-sharma11 11 months ago

#1491 - feat(bpf,core,feeder): improve owner only handling

Pull Request - State: open - Opened by daemon1024 11 months ago - 1 comment

#1490 - Updated the GithubAction Workflows to Ubuntu-22.04

Pull Request - State: open - Opened by Srijan-SS02 11 months ago - 3 comments

#1489 - chore(operator): autodeploy kubearmor via operator helm

Pull Request - State: closed - Opened by rksharma95 11 months ago - 1 comment

#1488 - [skip ci] Update Helm Chart To v1.0.1

Pull Request - State: open - Opened by github-actions[bot] 11 months ago

#1487 - Update STABLE-RELEASE

Pull Request - State: closed - Opened by daemon1024 11 months ago

#1486 - fix(deps): update module github.com/docker/docker to v24 [security]

Pull Request - State: open - Opened by renovate[bot] 11 months ago - 1 comment

#1485 - chore(deps): bump github.com/docker/docker from 23.0.6+incompatible to 24.0.7+incompatible in /KubeArmor

Pull Request - State: open - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies

#1484 - Update rule matching for file and network hook

Pull Request - State: closed - Opened by Aryan-sharma11 11 months ago - 1 comment

#1483 - docs: fix typos, grammar, style, etc in `differentiation.md`

Pull Request - State: closed - Opened by agilgur5 11 months ago

#1482 - docs: use proper syntax highlighting + formatting in policy examples

Pull Request - State: closed - Opened by agilgur5 11 months ago

#1481 - Update ci ubuntu

Pull Request - State: closed - Opened by Srijan-SS02 11 months ago

#1480 - docs: Update deployment guide for MicroShift

Pull Request - State: open - Opened by anurag-rajawat 11 months ago

#1479 - [skip ci] Update Helm Chart To v1.0.3

Pull Request - State: closed - Opened by github-actions[bot] 11 months ago

#1478 - Update STABLE-RELEASE to v1.0.3

Pull Request - State: closed - Opened by daemon1024 11 months ago

#1477 - Using Enforcer for Audit alerts

Issue - State: open - Opened by Aryan-sharma11 11 months ago - 1 comment
Labels: enhancement

#1476 - fix(deps): update module google.golang.org/grpc to v1.56.3 [security]

Pull Request - State: open - Opened by renovate[bot] 11 months ago

#1475 - build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 in /KubeArmor

Pull Request - State: open - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#1474 - build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 in /protobuf

Pull Request - State: open - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#1473 - build(deps): bump google.golang.org/grpc from 1.57.0 to 1.57.1 in /tests

Pull Request - State: open - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#1472 - fix(monitor): Added handling when casting a type in SystemMonitor fails

Pull Request - State: open - Opened by haytok 12 months ago - 1 comment

#1471 - [enhancement] helm values for kubearmor relay stdout env

Pull Request - State: open - Opened by VedRatan 12 months ago - 4 comments

#1470 - fix(systemmonitor):deleting untraced file access entries in file_map

Pull Request - State: closed - Opened by Prateeknandle 12 months ago

#1469 - helm values for kubearmor relay stdout env

Issue - State: open - Opened by daemon1024 12 months ago - 1 comment
Labels: enhancement

#1468 - Automate the KubeArmor Performance Benchmarking Data Process

Issue - State: open - Opened by ShubhamTatvamasi 12 months ago - 2 comments
Labels: enhancement

#1467 - docs(update): spelling fix

Pull Request - State: closed - Opened by VedRatan 12 months ago

#1466 - fix(docs): use github markdown formatting for notes

Pull Request - State: closed - Opened by daemon1024 12 months ago

#1465 - (chore) : fix ci test empty.proto not found

Pull Request - State: closed - Opened by Aryan-sharma11 12 months ago

#1464 - Secure KubeArmor gRPC Endpoint

Issue - State: closed - Opened by daemon1024 12 months ago - 4 comments

#1463 - chore(docs): update install docs with helm

Pull Request - State: closed - Opened by daemon1024 12 months ago

#1462 - Support for ppc64le

Issue - State: open - Opened by JayJersan 12 months ago
Labels: enhancement

#1461 - fix(core): fix so that it can be restricted to matched paths and dire…

Pull Request - State: closed - Opened by haytok 12 months ago - 1 comment