Kubernetes Security - AppArmor | How to prevent unwanted actions in your Pods
Let's take a look at how to make one of the containers in a Pod use a particular AppArmor profile so that we can restrict what can be done inside said container.
AppArmor On Kubernetes: https://kubernetes.io/docs/tutorials/...
AppArmor Docs: https://apparmor.net/
AppArmor Guide: • AppArmor Sucks Less! (Linux+ Objectiv...
Security Profiles Operator: https://github.com/kubernetes-sigs/se...
How Do You Say Suse?: • How do you say SUSE?
00:00 - Intro
00:13 - In This Video
00:36 - SUBSCRIBE!
00:43 - What is App Armor?
02:14 - Prerequisites
02:55 - Check App Armor Is Enabled
03:48 - Other Ways Of Getting Profiles Onto Nodes
05:03 - Create A Profile
06:25 - Create A Pod With A Profile
07:32 - Checking It Works
08:35 - Using A Profile That Doesn't Exist
09:10 - Wrap Up