Support for un-orchestrated containerd containers

[itsCheithanya]

Purpose of PR?:
When it comes to unorchestrated or non-kubernetes containers, right now KubeArmor works the best only with Docker runtime but not for containerd runtime,this PR fixes the issue related to monitoring and enforcement of containerd containers

Fixes #1426

Does this PR introduce a breaking change?
No

Apply this policy to a contianerd container

apiVersion: security.kubearmor.com/v1
kind: KubeArmorPolicy
metadata:
  name: ksp-block-policy
spec:
  severity: 3
  selector:
    matchLabels:
      kubearmor.io/container.name: nerdctl-nginx-jul-21
  process:
    matchPaths:
    - path: /usr/bin/ls
    - path: /usr/bin/sleep
    - path: /usr/bin/curl
  action:
    Block

It blocks showing enforcement

Checklist:

• Bug fix. Fixes Un-orchestrated KubeArmor: No telemetry when using containerd as a runtime #1426
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update
• PR Title follows the convention of <type>(<scope>): <subject>
• Commit has unit tests
• Commit has integration tests

[Prateeknandle]

Thanks for the PR @itsCheithanya
can you please attach an ss for alerts and telemetry data, have you fixed that as well?

[itsCheithanya]

Thanks for the PR @itsCheithanya can you please attach an ss for alerts and telemetry data, have you fixed that as well?

Sure @Prateeknandle

[daemon1024]

To be verified before review:

What happens when the same container name exists in 2 namespaces. How will the policy enforcement work.

[itsCheithanya]

To be verified before review:

What happens when the same container name exists in 2 namespaces. How will the policy enforcement work.

enforcement works for both as well,Is it the expected bheaviour?

[DelusionalOptimist]

Can we use the namespaces API client over the existing gRPC connection instead of creating a full-fledged client? We do the same for Containers and Tasks.
Ref - https://pkg.go.dev/github.com/containerd/containerd/[email protected]/services/namespaces/v1

[itsCheithanya]

okay sure will do that

[itsCheithanya]

Have made the changes @DelusionalOptimist

[PrimalPimmy]

It seems alerts telemetry is not working for containers via karmor logs 🤔