├── .github └── workflows │ └── krew-plugin-release.yml ├── .gitignore ├── .goreleaser.yml ├── .krew.yaml ├── LICENSE ├── Makefile ├── README.md ├── aa ├── commands │ └── commands.go └── service.go ├── api └── types │ └── v1alpha1 │ ├── apparmorprofile.go │ ├── deepcopy.go │ └── register.go ├── client ├── k8s.go └── ssh.go ├── clientset └── v1alpha1 │ ├── api.go │ └── apparmorprofile.go ├── container └── echo-pod.yaml ├── crd └── crd.security.sysdig.com_apparmorprofiles.yaml ├── go.mod ├── go.sum ├── main.go ├── profiles └── k8s-block-echo ├── scripts ├── build ├── copy-profiles.sh ├── enable-aa.sh ├── enforce-aa.sh └── setup-aa.sh ├── test ├── echo-pod.yaml └── security_v1alpha1_apparmorprofile.yaml ├── types ├── apparmor.go └── node.go └── utils └── utils.go /.github/workflows/krew-plugin-release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/.github/workflows/krew-plugin-release.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .idea/* 2 | kube-apparmor-manager 3 | -------------------------------------------------------------------------------- /.goreleaser.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/.goreleaser.yml -------------------------------------------------------------------------------- /.krew.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/.krew.yaml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/README.md -------------------------------------------------------------------------------- /aa/commands/commands.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/aa/commands/commands.go -------------------------------------------------------------------------------- /aa/service.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/aa/service.go -------------------------------------------------------------------------------- /api/types/v1alpha1/apparmorprofile.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/api/types/v1alpha1/apparmorprofile.go -------------------------------------------------------------------------------- /api/types/v1alpha1/deepcopy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/api/types/v1alpha1/deepcopy.go -------------------------------------------------------------------------------- /api/types/v1alpha1/register.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/api/types/v1alpha1/register.go -------------------------------------------------------------------------------- /client/k8s.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/client/k8s.go -------------------------------------------------------------------------------- /client/ssh.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/client/ssh.go -------------------------------------------------------------------------------- /clientset/v1alpha1/api.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/clientset/v1alpha1/api.go -------------------------------------------------------------------------------- /clientset/v1alpha1/apparmorprofile.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/clientset/v1alpha1/apparmorprofile.go -------------------------------------------------------------------------------- /container/echo-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/container/echo-pod.yaml -------------------------------------------------------------------------------- /crd/crd.security.sysdig.com_apparmorprofiles.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/crd/crd.security.sysdig.com_apparmorprofiles.yaml -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/go.sum -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/main.go -------------------------------------------------------------------------------- /profiles/k8s-block-echo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/profiles/k8s-block-echo -------------------------------------------------------------------------------- /scripts/build: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/scripts/build -------------------------------------------------------------------------------- /scripts/copy-profiles.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/scripts/copy-profiles.sh -------------------------------------------------------------------------------- /scripts/enable-aa.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/scripts/enable-aa.sh -------------------------------------------------------------------------------- /scripts/enforce-aa.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/scripts/enforce-aa.sh -------------------------------------------------------------------------------- /scripts/setup-aa.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/scripts/setup-aa.sh -------------------------------------------------------------------------------- /test/echo-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/test/echo-pod.yaml -------------------------------------------------------------------------------- /test/security_v1alpha1_apparmorprofile.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/test/security_v1alpha1_apparmorprofile.yaml -------------------------------------------------------------------------------- /types/apparmor.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/types/apparmor.go -------------------------------------------------------------------------------- /types/node.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/types/node.go -------------------------------------------------------------------------------- /utils/utils.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sysdiglabs/kube-apparmor-manager/HEAD/utils/utils.go --------------------------------------------------------------------------------