Merge pull request #1437 from anurag-rajawat/feat-microshift-deploy

feat: Add support for microshift
kubearmor · Oct 24, 2023 · 15ad34e · 15ad34e
2 parents e4e0e68 + 8e77814
commit 15ad34e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/getting-started/support_matrix.md b/getting-started/support_matrix.md
@@ -25,6 +25,7 @@ KubeArmor supports following types of workloads:
 | AWS        | [Graviton] | Amazon Linux 2 | ARM | :heavy_check_mark: | :heavy_check_mark: | :x: | :heavy_check_mark: | SELinux |
 | RedHat     | [OpenShift] | [RHEL] <=8.4 | x86_64 | :heavy_check_mark: | :heavy_check_mark: | :x:  | :heavy_check_mark: | SELinux |
 | RedHat     | [OpenShift] | [RHEL] >=8.5 | x86_64 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | [BPFLSM] |
+| RedHat     | [MicroShift] | [RHEL] >=9.2 | x86_64 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | [BPFLSM] |
 | Rancher    | [RKE] | [SUSE] | x86_64 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | [BPFLSM], AppArmor |
 | Rancher    | [K3S] | [Distros] | x86_64 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | [BPFLSM], AppArmor |
 | Oracle     | [Ampere] | [UEK] | ARM | :heavy_check_mark: | :heavy_check_mark: | :x: | :heavy_check_mark: | SELinux | [1084] |
@@ -41,6 +42,7 @@ KubeArmor supports following types of workloads:
 [GKE-REL]: https://cloud.google.com/kubernetes-engine/docs/concepts/release-channels
 [bottlerocket]: https://github.com/bottlerocket-os/bottlerocket#bottlerocket-os
 [OPENSHIFT]: https://www.redhat.com/en/technologies/cloud-computing/openshift
+[MicroShift]: https://microshift.io/
 [SUSE]: https://www.suse.com/
 [RHEL]: https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux
 [RKE]: https://rancher.com/docs/rke/latest/en/

diff --git a/pkg/KubeArmorController/handlers/pod_mutation.go b/pkg/KubeArmorController/handlers/pod_mutation.go
@@ -58,9 +58,7 @@ func (a *PodAnnotator) Handle(ctx context.Context, req admission.Request) admiss
 
 	// == LSM == //
 
-	if a.Enforcer == "" || a.Enforcer == "SELinux" {
-		pod.Annotations["kubearmor-policy"] = "audited"
-	} else if a.Enforcer == "AppArmor" {
+	if a.Enforcer == "AppArmor" {
 		appArmorAnnotator(pod)
 	}