Skip to content

Instantly share code, notes, and snippets.

@DelusionalOptimist

DelusionalOptimist/crio.md

Created July 14, 2022 07:05
Show Gist options
  • Save DelusionalOptimist/52ff5407540de2aeea56152d59013285 to your computer and use it in GitHub Desktop.
Save DelusionalOptimist/52ff5407540de2aeea56152d59013285 to your computer and use it in GitHub Desktop.
Download ZIP
KubeArmor release v0.5 blog
Raw
crio.md

KubeArmor directly interfaces with container runtimes to get metadata like container’s namespaces, image and so on. This metadata is then used for generating rich telemetry data and policy enforcement.

In the past, KubeArmor has supported Containerd and Docker and now with v0.5, KubeArmor will also support the CRI-O runtime. This has been made possible by leveraging the CRI-API. Also, if you have multiple container runtimes, you can now use the CRI_SOCKET environment var or the -criSocket flag with kubearmor for specifying one to use.

Page 1(3)

For complete implementation, see KubeArmor/697.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment