Deploying KubeArmor

Before we can use KubeArmor on our KinD cluster, we will need to patch Calico and the kubearmor-relay deployment to work with KinD. AppArmor requires some changes for certain workloads to deploy and run correctly in a KinD cluster. In a standard cluster, these patches would not be required: and once they are deployed, KubeArmor will work as it would on a standard Kubernetes cluster.

KubeArmor can be easily deployed using a single binary, called karmor, or via Helm charts. For the book exercises, we will use the karmor utility to install KubeArmor. Both deployment methods offer the same protection and configuration options, and once deployed, you interact with KubeArmor the same way, regardless of the deployment method.

We have included a script in the chapter13 folder called kubearmor-patch.sh that will download karmor, patch Calico and the kubearmor-relay deployments, and deploy KubeArmor.

KubeArmor installs on most Kubernetes clusters without...