v0.7 Release Blog

THIS IS A WORK IN PROGRESS

ARM support for KubeArmor

Why the support was considered?

Which ARM platforms were tested?

1. RPI
2. ARM VM
3. ARM VM on Macbook M1 laptops

Multi-Container support

Need for multi-container support

Policy construct changes

Backward compatibility

Using un-privileged container for KubeArmor daemonset (as a part of LFX Mentorship)

...

BPF-LSM Extensions

...

Policy Recommendations and Reports

...

Observability Extensions

...

Generate k8s network policies from KubeArmor logs

...

Bug fixes and improvements [WIP]

• Fix AppArmor policies behavior https://github.com/kubearmor/KubeArmor/issues/954
• Discovery engine fixes
  • Relative paths
  • Refreshed karmor summary output
  • Improved discovered policies rules to include all necessary paths
• Data race conditions https://github.com/kubearmor/KubeArmor/issues/842