Barun Acharya

BTF and CORE Support

6

## Feature Request We migrated away from BCC and now we are leveraging libbpf for our eBPF programs. But we depend on kernel headers to leverage various kernel structures in...

Lenient Whitelisting Policies

1

Let's consider a scenario, We want to allow service account token access to only `/bin/cat`. But everything else should function as it is. Can also be interpreted as Block access...

We introduced BPF LSM enforcement in v0.5, which has an initial implementation and has bugs and lacks some features. This issue thread is a tracker for all these pending work...

Configure LSM Order

1

## Feature Request We recently introduced BPF LSM for enforcement and current order for checking the LSM to use for enforcement in KubeArmor is ` BPFLSM -> AppArmor -> SELinux...

KubeArmor Documentation

5

Currently the KubeArmor documentation is scattered and difficult to follow. This is a meta issue to track and improve KubeArmor documentation by collecting the docs into an organised manner with...

Use `client-go` to make requests to kube-apiserver instead of direct API calls

6

## Feature Request Use `client-go` to make requests to kube-apiserver instead of direct API calls **Is your feature request related to a problem? Please describe the use case.** Currently we...

GKE Cluster Setup Documentation

1

Add prerequisites to setting up KubeArmor in a GKE Cluster in the [getting started ](https://github.com/kubearmor/KubeArmor/tree/main/getting-started) guide as a section. **Hi, If it is the first time that you contribute to...

Refactor Duplicated Type Based Logic

2

Various parts of the code base has duplicated logical code to accommodate different type data. With the incoming support for Generics there's a scope of removal of lot of redundant...

- Provide List of Checks - `karmor sysdump` utility - List of Information required and Format to ask for help **Hi, If it is the first time that you contribute...

Watchers are simple to implement and lowest level of abstraction to monitor K8s events but it's not resilient. SharedInformer provides eventually consistent linkage to the objects we want to monitor....