kube-score
kube-score copied to clipboard
Feature request: Check for AppArmor/Seccomp profile
As a user, it would be great if kube-score would add an optional check to verify if a deployment is creating pods with an unconfined AppArmor/Seccomp profile.
I saw there was an effort here: https://github.com/zegl/kube-score/pull/160
There is a new Seccomp API landing in v1.19 and is becoming GA: [KEP].
With this in mind, this issue is likely worth revisiting as the Seccomps are here to stay.
Seccomps are here to stay!