---
title: 'Addon: KubeArmor'
description: Canonical makes open source secure, reliable and easy to use, providing
  support for Ubuntu and a portfolio of enterprise-grade technologies. Founded in
  2004, Canonical operates globally with team members in over 80 countries.
url: https://canonical.com/microk8s/docs/addon-kubearmor?format=md
---

*Submit*

# Addon: KubeArmor

**Compatibility**:
**Source**: See [KubeArmor](https://kubearmor.io/) website for details.

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior (such as process execution, file access, and networking operations) of pods, containers, and nodes at the system level. It makes use of [eBPF](https://ebpf.io/) and [Linux security modules (LSMs)](https://en.wikipedia.org/wiki/Linux_Security_Modules) such as [AppArmor](https://en.wikipedia.org/wiki/AppArmor), [SELinux](https://en.wikipedia.org/wiki/Security-Enhanced_Linux), or [BPF-LSM](https://docs.kernel.org/bpf/prog_lsm.html) to enforce the user-specified policies. KubeArmor generates rich alerts/telemetry events with container/pod/namespace identities for ease of use.

## [Usage](https://canonical.com/microk8s/docs/addon-kubearmor?format=md#p-40850-usage)

To enable the addon:

```
microk8s enable kubearmor
```

Afterwards the KubeArmor CLI is available under MicroK8s:

```
microk8s karmor
```

The addon can be disabled at any time with:

```
microk8s disable kubearmor
```

## [Links](https://canonical.com/microk8s/docs/addon-kubearmor?format=md#p-40850-links)

To learn more about KubeArmor visit:

* the [KubeArmor official](https://kubearmor.io/) website

Last updated 3 years ago. [Help improve this document in the forum](https://discuss.kubernetes.io/t/addon-kubearmor/24862).