Skip to content

Commit

Permalink
fix: k8s policies tutorial
Browse files Browse the repository at this point in the history
  • Loading branch information
josedonizetti committed Aug 10, 2023
1 parent a39e63f commit 352622b
Showing 1 changed file with 17 additions and 14 deletions.
31 changes: 17 additions & 14 deletions docs/tutorials/k8s-policies.md
Expand Up @@ -106,23 +106,26 @@ Let's edit the tracee-policies ConfigMap using kubectl:
kubectl edit cm/tracee-policies -n tracee-system
```

The ConfigMap will open in your default text editor. Locate the signatures.yaml section.
The ConfigMap will open in your default text editor. Locate the data section.

To add a new policy for tracking execve events, append the following YAML block under the signatures.yaml section, maintaining proper indentation:
To add a new policy for tracking execve events, add the following YAML block before the signaturesy.yaml section, maintaining proper indentation:

```yaml
events.yaml: |-
apiVersion: aquasecurity.github.io/v1beta1
kind: TraceePolicy
metadata:
name: execve-event
annotations:
description: traces all signature events
spec:
scope:
- global
rules:
- event: execve
data:
events.yaml: |-
apiVersion: aquasecurity.github.io/v1beta1
kind: TraceePolicy
metadata:
name: execve-event
annotations:
description: traces all signature events
spec:
scope:
- global
rules:
- event: execve
signatures.yaml: |-
...
```
Save and close the file. The changes will be applied automatically.

Expand Down

0 comments on commit 352622b

Please sign in to comment.