diff --git a/kubernetes.md b/kubernetes.md index 61e9ca1..b031f6d 100644 --- a/kubernetes.md +++ b/kubernetes.md @@ -1,3 +1,6 @@ +# +- profiles are per container + # Check you Kubernetes Version AppArmor support was added to kubernetes in v1.4. Kubernetes older than v1.4 do not understand AppArmor annotations and they will be silently ignored. @@ -12,5 +15,6 @@ kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {@.status.no # References -https://kubernetes.io/docs/tutorials/clusters/apparmor/ - +* https://kubernetes.io/docs/tutorials/clusters/apparmor/ +* https://sysdig.com/blog/manage-apparmor-profiles-in-kubernetes-with-kube-apparmor-manager/ +* https://www.alcide.io/whitelisting-processes-on-kubernetes-using-apparmor/