AWS FTR assesment tracker

[rksharma95]

Feature Request

Short Description

We are targeting the KubeArmor to meet all the specified requirements under AWS Foundational Technical Review. This issue tracks the progress on the same. Most of the requirements are AWS platform specific.

The spreadsheet document here can be used for remark/discussion, feel free to add your remark there. The draft document here is being used to track WIP.
Describe the solution you'd like

Action Items

• Respond to all the requirements with required action item.

Architecture Diagram

• Illustrate all AWS services running, demonstrate VPC and subnet requirements

Documentation

• Introduction

• Use cases of the Kubearmor
• List of resources deployed and expected amount of time to complete. ref: Code refactoring: remove annotation, policy and host policy controllers from kubearmor code base #875
• Specify the supported regions
• Guidance fot testing/troubleshooting

• Requirements

• Technical prerequisites and requirements i.e. EKS Cluster, IAM Permissions etc.
• Specify if the specilized skills and knowlege needed
• Environment configuration that is needed, i.e. AWS account, OS, licensing etc.

• Security

• Specify that deployment doesn't require any root privileges
• Specify that deployment follows policy of least privilege
• Describe purpose of each IAM role and policy to be created by the user

• Cost

• List of optional/mandatory billable service
• Licensing cost

• Sizing

• Either provide a script to provision required resource or provide guidance for type and size selection for the resource.
  Ref: determine and apply resource limitation for Kubearmor Daemonset #923

• Health Check

• how to monitor the heath of the Kubearmor i.e. using karmor probe command

• Backup and Recovery

• data and configuration to be backed up i.e. backup applied kubearmor policies.

• Routine Maintenance

• rotating system credentials and cryptographic keys i.e. karmor rotate-tls
• guidance for software patches and upgrades i.e. karmor selfupdate
• guidance for managing licence and AWS service limits

• Emergency Maintenance

• instructions on handling fault conditions and how to recover the software.

• Support

• guidance on how to receive support, details on different technical support tiers and SLAs.

Describe alternatives you've considered

A separate section titled "KubeArmor on EKS" that answers all the requirements specified in the AWS FTR can be added to the Documentation.