Kaspersky Container Security

Editing runtime policy settings

You can edit the runtime policy settings in Kaspersky Container Security if your account has been assigned at least one role that the policy's creator had at the time of the policy's creation.

To change runtime policy settings:

  1. In the PoliciesRuntime policiesPolicies section, click the policy name in the list of existing runtime policies.

    The policy settings window opens.

  2. Change the status and name of the policy.
  3. Add or edit the policy description.
  4. Add or remove scopes.
  5. Select the policy mode — Audit or Enforce.
  6. On the Admission controller tab, make changes to the relevant sections of the policy:
    • Best practice check.
    • Block non-compliant images.
    • Block unregistered images.
    • Dynamic Admission Controller bypass criteria.
    • Capabilities block.
    • Image content protection.
    • Limit container privileges.
    • Registries allowed.
    • Blocking volumes.
  7. On the Container runtime tab, make changes to the relevant sections of the policy:
    • Container runtime profiles.
    • Container autoprofiles.
  8. Click Save.