kubearmor-client

README

kArmor

kArmor is a CLI client to help manage KubeArmor.

KubeArmor is a container-aware runtime security enforcement system that restricts the behavior (such as process execution, file access, and networking operation) of containers at the system level.

Installation

The following sections show how to install the kArmor. It can be installed either from source, or from pre-built binary releases.

From Script

kArmor has an installer script that will automatically grab the latest version of kArmor and install it locally.

curl -sfL http://get.kubearmor.io/ | sudo sh -s -- -b /usr/local/bin

The binary will be installed in /usr/local/bin folder.

From Source

Building kArmor from source is slightly more work, but is the best way to go if you want to test the latest (pre-release) kArmor version.

git clone https://github.com/kubearmor/kubearmor-client.git
cd kubearmor-client
make install

Usage

CLI Utility to help manage KubeArmor

KubeArmor is a container-aware runtime security enforcement system that
restricts the behavior (such as process execution, file access, and networking
operation) of containers at the system level.

Usage:
  karmor [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  discover    Discover applicable policies
  get         Display specified resources
  help        Help about any command
  insight     Policy insight from discovery engine
  install     Install KubeArmor in a Kubernetes Cluster
  log         Observe Logs from KubeArmor
  rotate-tls  Rotate webhook controller tls certificates
  selfupdate  selfupdate this cli tool
  sysdump     Collect system dump information for troubleshooting and error report
  uninstall   Uninstall KubeArmor from a Kubernetes Cluster
  version     Display version information
  vm          VM commands for kvmservice

Flags:
  -h, --help   help for karmor

Use "karmor [command] --help" for more information about a command.