escape-to-host-si-sib.yaml

# SPDX-License-Identifier: Apache-2.0
# Copyright 2023 Authors of Nimbus

apiVersion: intent.security.nimbus.com/v1alpha1
kind: SecurityIntent
metadata:
  name: escape-to-host
spec:
  intent:
    id: escapeToHost
    description: "A attacker can breach container boundaries and can gain access to the host machine"
    action: Block

---

apiVersion: intent.security.nimbus.com/v1alpha1
kind: SecurityIntentBinding
metadata:
  name: escape-to-host-binding
spec:
  intents:
    - name: escape-to-host
  selector:
    workloadSelector:
      matchLabels:
        app: nginx