Merge pull request #107 from VedRatan/issue_94

added examples for params in the context of escape-to-host

examples/clusterscoped/escape-to-host-si-sib-with-params.yaml

@@ -0,0 +1,34 @@
+apiVersion: intent.security.nimbus.com/v1
+kind: SecurityIntent
+metadata:
+  name: escape-to-host
+spec:
+  intent:
+    id: escapeToHost
+    description: "A attacker can breach container boundaries and can gain access to the host machine"
+    action: Block
+    params:
+      psa_level: ["restricted"]
+---
+apiVersion: intent.security.nimbus.com/v1
+kind: ClusterSecurityIntentBinding
+metadata:
+  name: escape-to-host-binding
+spec:
+  intents:
+    - name: escape-to-host
+  selector:
+    resources:
+      - kind: Pod
+        name: pod1
+        namespace: ns1
+        matchLabels:
+          app: db
+          env: dev
+
+      - kind: Pod
+        name: pod1
+        namespace: ns2
+        matchLabels:
+          app: mongo
+          env: prod

examples/namespaced/escape-to-host-with-params.yaml

@@ -0,0 +1,28 @@
+apiVersion: intent.security.nimbus.com/v1
+kind: SecurityIntent
+metadata:
+  name: escape-to-host
+spec:
+  intent:
+    id: escapeToHost
+    description: "A attacker can breach container boundaries and can gain access to the host machine"
+    action: Block
+    params:
+      psa_level: ["restricted"]
+
+---
+
+apiVersion: intent.security.nimbus.com/v1
+kind: SecurityIntentBinding
+metadata:
+  name: escape-to-host-binding
+spec:
+  intents:
+    - name: escape-to-host
+  selector:
+    any:
+      - resources:
+          kind: Pod
+          namespace: default
+          matchLabels:
+            app: nginx