2023-09-20 Meeting notes for Workload Runtime Security

Date

Sep 20, 2023

Attendees



  • @Doug Larson 

  • Ron VIctor

  • @Ankur Kothiwal 

  • @GAURAV KUMAR MISHRA 

  • Rahul



Goals

  • For Use Case 1:

    • Install and run Open Horizon all-in-one, publish and deploy HomeAssistant and KubeArmor with test security policy

      • KubeArmor service should be published to Community Lab

      • KubeArmor service should be automatically deployed to any Device Agent with a supported architecture and a node policy of "purpose == security"

      • Still need to create Operator for deploying KubeArmor to Cluster Agent in v1.26 format

    • Demonstrate how to monitor the listed events and access the results

Discussion item

Rahul did a demo of kubearmor blocking, allowing, notifying when actions were taken on the container
kubearmor running in a container

Action items