guard-service

README

Guard Service

guard-service is the Guard backend service which is used for:

1. Learning per-service micro-rules from piles of profiles sent by guard-gate
2. Constructing and storing per service Guardians
3. Caching Guardians and servicing guard-gate requests for Guardians
4. Aggregating alerts
5. Restarting compromised pods

Guardians are based on the guard.security.knative.dev package.

To access Guardians, guard-service uses the guard-kubemgr package.

See Guard Architecture to learn about how Guard process and learn internally security data.

Security

Always review the set of micro-rules produced by guard-service before moving to a production environment and if you decide to use guard-service in a production environment, it is safer to use manual microrules and treat the microrules produced by guard-service as a recommendation for human review.