Editing runtime policy settings

You can edit the runtime policy settings in Kaspersky Container Security if your account has been assigned at least one role that the policy's creator had at the time of the policy's creation.

To change runtime policy settings:

1. In the Policies → Runtime policies → Policies section, click the policy name in the list of existing runtime policies.

   The policy settings window opens.

2. Change the status and name of the policy.
3. Add or edit the policy description.
4. Add or remove scopes.
5. Select the policy mode — Audit or Enforce.
6. Make the necessary changes depending on the type of runtime policy:
   • If you are making changes to a container runtime policy, follow these steps:
     1. On the Admission controller tab, make changes to the relevant sections of the policy:
        • Best practice check.
        • Block non-compliant images.
        • Block unregistered images.
        • Dynamic Admission Controller bypass criteria.
        • Capabilities block.
        • Image content protection.
        • Limit container privileges.
        • Registries allowed.
        • Blocking volumes.
     2. On the Container runtime tab, make changes to the relevant sections of the policy:
        • Container runtime profiles.
        • Container autoprofiles.
   • If you are making changes to a node runtime policy, make your changes in the Container lifecycle section.
7. Click Save.

Page top