Annotations
| Annotation | Description | Default |
|---|
service.bifrost.com/name | Name of the application. Required. | N/A |
service.bifrost.com/version | Version of the application. Optional. | Container image tag |
environment.bifrost.com/name | Name of bifrost environment. Required. | N/A |
profile.bifrost.com/name | Name of the security profile. Required unless profile.bifrost.com/mode: “audit”. | N/A |
profile.bifrost.com/mode | Mode of the security profile. One of: audit, complain, enforce. | N/A |
Labels
| Label | Description | Default |
|---|
bifrost.com/enabled | Must be true to use bifrost. One of: "true", "false". | N/A |
Default container
The container to be used by bifrost will be the first one in the pod spec. If you want to override this you can
specify the well-known
kubectl.kubernetes.io/default-container
pod annotation.