Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

landlock-genprof review

Reviews a published SecurityProfileProposal

Synopsis

Reviews a published SecurityProfileProposal.

Installed as a kubectl plugin (the common case): run this as kubectl landlock-genprof <command>. Running this binary directly instead (standalone, not via kubectl) works the same way, without that prefix.

landlock-genprof review <proposal> [flags]

Examples

  # Same proposal name as the pod trace was run against
  kubectl landlock-genprof review nginx-demo

  kubectl landlock-genprof review nginx-demo --namespace prod

Options

  -h, --help               help for review
  -n, --namespace string   Kubernetes namespace (default "default")

SEE ALSO

  • landlock-genprof - Generates least-privilege Kubernetes security profiles by observing a running pod