landlock-genprof ui
Serves the local read-only Workbench HTTP boundary
Synopsis
Serves the local, read-only Workbench: the given SecurityProfileProposal at “/”, plus live workload/security-projection reads under “/api”. Every read goes through the bounded G0.5 read capability; there is no approval, rejection, apply, or other mutation control.
Installed as a kubectl plugin (the common case): run this as kubectl landlock-genprof <command>. Running this binary directly instead (standalone, not via kubectl) works the same way, without that prefix.
landlock-genprof ui [proposal] [flags]
Options
-h, --help help for ui
-n, --namespace string Kubernetes namespace (default "default")
--port int Loopback HTTP port (default 8080)
SEE ALSO
- landlock-genprof - Generates least-privilege Kubernetes security profiles by observing a running pod