Skip to content

Latest commit

 

History

History

mitre-v2024

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
.krmignore
.krmignore
 
 
Kptfile
Kptfile
 
 
README.md
README.md
 
 
apparmor.yaml
apparmor.yaml
 
 
block-all-ingress.yaml
block-all-ingress.yaml
 
 
cronjob-restrict-repos.yaml
cronjob-restrict-repos.yaml
 
 
disallow-anonymous.yaml
disallow-anonymous.yaml
 
 
host-namespaces-host-pid-ipc.yaml
host-namespaces-host-pid-ipc.yaml
 
 
host-namespaces-hostnetwork.yaml
host-namespaces-hostnetwork.yaml
 
 
host-ports.yaml
host-ports.yaml
 
 
kustomization.yaml
kustomization.yaml
 
 
no-secrets-as-env-vars.yaml
no-secrets-as-env-vars.yaml
 
 
privileged-containers.yaml
privileged-containers.yaml
 
 
proc-mount-type.yaml
proc-mount-type.yaml
 
 
require-binauthz.yaml
require-binauthz.yaml
 
 
require-namespace-networkpolicy.yaml
require-namespace-networkpolicy.yaml
 
 
restrict-admission-controller.yaml
restrict-admission-controller.yaml
 
 
restrict-automountserviceaccounttoken.yaml
restrict-automountserviceaccounttoken.yaml
 
 
restrict-capabilities.yaml
restrict-capabilities.yaml
 
 
restrict-cluster-admin-role.yaml
restrict-cluster-admin-role.yaml
 
 
restrict-hostpath-volumes.yaml
restrict-hostpath-volumes.yaml
 
 
restrict-kubernetes-dashboard-namespace.yaml
restrict-kubernetes-dashboard-namespace.yaml
 
 
restrict-pods-exec.yaml
restrict-pods-exec.yaml
 
 
restrict-rbac-subjects.yaml
restrict-rbac-subjects.yaml
 
 
restrict-repos.yaml
restrict-repos.yaml
 
 
restrict-role-secrets.yaml
restrict-role-secrets.yaml
 
 
restrict-windows-hostprocess.yaml
restrict-windows-hostprocess.yaml
 
 
seccomp.yaml
seccomp.yaml
 
 
selinux.yaml
selinux.yaml
 
 
sysctls.yaml
sysctls.yaml
 
 

README.md

MITRE

Note: The MITRE policy bundle is a preview release. This means that the functionality might change in backward-incompatible ways. A preview release is not subject to any SLA or deprecation policy and may receive limited or no support.

Description

Use the MITRE policy bundle with Policy Controller to evaluate the compliance of your cluster resources against some aspects of the MITRE knowledge base of adversary tactics and techniques based on real-world observations.

Compatibility

This bundle requires Policy Controller version v1.17.2 or higher.

Usage

(Optional) Preview the policy constraints with kubectl:

kubectl kustomize https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/mitre-v2024

Apply the policy constraints with kubectl:

kubectl apply -k https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/mitre-v2024

For more information visit:

https://cloud.google.com/anthos-config-management/docs/how-to/using-mitre-v2024