Kube-system Kubernetes security with Sysdig Secure

input_rules.yaml

- podname: etcd
  proc: [etcd]
  write_dir: [/var/lib/etcd]
  outbound_proc: [etcd]
  listen_proc: [etcd]

- podname: kube_apiserver
  proc: [kube-apiserver]
  write_dir: false
  outbound_proc: [kube-apiserver]
  listen_proc: [kube-apiserver]

- podname: kube_dns
  proc: [dnsmasq, dnsmasq-nanny, sidecar, kube-dns]
  write_dir: [/var/run/dnsmasq.pid, /dev/null]
  outbound_proc: [kube-dns]
  listen_proc: [kube-dns, sidecar, dnsmasq]

- podname: kube_controller
  proc: [kube-controller-manager]
  write_dir: false
  outbound_proc: [kube-controller-manager]
  listen_proc: [kube-controller-manager]

- podname: kube_scheduler
  proc: [kube-scheduler]
  write_dir: false
  outbound_proc: [kube-scheduler]
  listen_proc: [kube-scheduler]