• High Level Design
  • Policy Mapping
  • Rational for separate Kind: KubeArmorSeccompPolicy (kscmp for short)
  • Handling multiple kscmp policies per pod
  • Do we need to use any third-party library (such as libseccomp)?
  • TODOs
  • How is kscmp different from normal seccomp?