speckle-server icon indicating copy to clipboard operation
speckle-server copied to clipboard

AppArmor and SecComp profiles for kubernetes

Open iainsproat opened this issue 2 years ago • 0 comments

What package are you referring to?

Kubernetes manifests

Is your feature request related to a problem? Please describe.

To security harden running containers on kubernetes, they should have AppArmor and SecComp profiles.

Describe the solution you'd like

Run docker-slim to profile the containers and generate AppArmor and SecComp profiles.

These profiles should be applied

Describe alternatives you've considered

Additional context

Related issues or community discussions

https://github.com/specklesystems/speckle-server/pull/917 https://github.com/specklesystems/speckle-server/pull/899

iainsproat avatar Aug 12 '22 09:08 iainsproat