-
Notifications
You must be signed in to change notification settings - Fork 349
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
BPF LSM Enforcement for unorchestrated containers #1206
Conversation
This commit enables support for policy enforcement for unorchestrated containers where BPF LSM is the enforcer Signed-off-by: daemon1024 <[email protected]>
03025ed
to
bda7a67
Compare
Signed-off-by: daemon1024 <[email protected]>
e4cdda0
to
a6c179e
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍 Great PR!
I was hoping we can automate the system tests for this. Can we create another issue and handle it there since it would require provisioning of the resources? |
Enable support for policy enforcement for unorchestrated containers where BPF LSM is the enforcer
Purpose of PR?:
Fixes #838
Does this PR introduce a breaking change?
If the changes in this PR are manually verified, list down the scenarios covered::
Additional information for reviewer? :
Mention if this PR is part of any design or a continuation of previous PRs
Checklist:
<type>(<scope>): <subject>