accuknox/discovery-engine

Proposal for a new k8s CRD - DiscoveredPolicy

rksharma95 opened this issue · 0 comments

I would like to propose a new Kubernetes Custom Resource Definition (CRD) called "DiscoveredPolicy". This CRD would allow the deployment of various types of policies on Kubernetes clusters, including KubeArmorPolicy, CiliumNetworkPolicy, and NetworkPolicy. The DiscoveredPolicy CRD would provide a way to manage auto-discovered policies in K8s environment (ref: #689).

The DiscoveredPolicy CRD would contain a functionality that allows users to enable or disable the deployed policy. The DiscoveredPolicy CRD would be managed by a k8s custom controller, which would watch for changes to DiscoveredPolicy and deploy or update policies accordingly. The controller would also update the status of each DiscoveredPolicy to reflect the state of the deployed policy.