KubeArmor
KubeArmor copied to clipboard
feat(monitor):Syscall Visibility
Purpose of PR?:
- turn on/off syscall visibility per namespace based on visibility annotation with an additional string syscall
- have per syscall on/off switch based on string in config map
- separate the existing visibility for syscall which is currenly linked with
file
visibility. Supportsyscall
string invisibility
field in config map.
Fixes #1577
Does this PR introduce a breaking change? no
If the changes in this PR are manually verified, list down the scenarios covered:: verified locally with operator
Additional information for reviewer? : Mention if this PR is part of any design or a continuation of previous PRs
Checklist:
- [ ] Bug fix. Fixes #
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
- [ ] This change requires a documentation update
- [x] PR Title follows the convention of
<type>(<scope>): <subject>
- [ ] Commit has unit tests
- [ ] Commit has integration tests
- Include details in kubearmor_visibility.md