1
+ // SPDX-License-Identifier: Apache-2.0
2
+ // Copyright 2022 Authors of KubeArmor
3
+
1
4
package presets
2
5
3
6
import (
4
7
"fmt"
8
+ "strings"
5
9
"time"
6
10
7
11
"github.com/kubearmor/KubeArmor/protobuf"
@@ -37,7 +41,7 @@ var _ = Describe("Presets", func() {
37
41
var fp string
38
42
39
43
BeforeEach (func () {
40
- fp = getfilelessPod ("fileless-" , nil )
44
+ fp = getfilelessPod ("fileless-" , [] string { "kubearmor-policy: enabled" } )
41
45
})
42
46
43
47
AfterEach (func () {
@@ -50,12 +54,15 @@ var _ = Describe("Presets", func() {
50
54
51
55
Describe ("Policy Apply" , func () {
52
56
It ("can audit fileless execution" , func () {
57
+ if ! strings .Contains (K8sRuntimeEnforcer (), "bpf" ) {
58
+ Skip ("fileless execution preset requires bpf-lsm" )
59
+ }
53
60
// Apply policy
54
61
err := K8sApplyFile ("res/ksp-preset-audit-fileless.yaml" )
55
62
Expect (err ).To (BeNil ())
56
63
57
64
// Start Kubearmor Logs
58
- err = KarmorLogStart ("policy" , "presets" , "File " , fp )
65
+ err = KarmorLogStart ("policy" , "presets" , "Process " , fp )
59
66
Expect (err ).To (BeNil ())
60
67
61
68
// wait for policy creation
@@ -80,12 +87,15 @@ var _ = Describe("Presets", func() {
80
87
})
81
88
82
89
It ("can block fileless execution" , func () {
90
+ if ! strings .Contains (K8sRuntimeEnforcer (), "bpf" ) {
91
+ Skip ("fileless execution preset requires bpf-lsm" )
92
+ }
83
93
// Apply policy
84
94
err := K8sApplyFile ("res/ksp-preset-block-fileless.yaml" )
85
95
Expect (err ).To (BeNil ())
86
96
87
97
// Start Kubearmor Logs
88
- err = KarmorLogStart ("policy" , "presets" , "File " , fp )
98
+ err = KarmorLogStart ("policy" , "presets" , "Process " , fp )
89
99
Expect (err ).To (BeNil ())
90
100
91
101
// wait for policy creation
0 commit comments