Add kubelet/kops to allowed_k8s_users

falcosecurity · Feb 14, 2019 · 8108223 · 8108223
1 parent 7b2aa4e
commit 8108223
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/k8s_audit_rules.yaml b/rules/k8s_audit_rules.yaml
@@ -34,7 +34,7 @@
 
 # If you wish to restrict activity to a specific set of users, override/append to this list.
 - list: allowed_k8s_users
-  items: ["minikube", "minikube-user"]
+  items: ["minikube", "minikube-user", "kubelet", "kops"]
 
 - rule: Disallowed K8s User
   desc: Detect any k8s operation by users outside of an allowed set of users.