From ff37f3267d534446110efd20daab5c3f8fc89f9f Mon Sep 17 00:00:00 2001 From: Gary Duan Date: Thu, 29 Jun 2017 14:54:01 -0700 Subject: [PATCH] Update NeuVector security container release version to rancher1.2. --- templates/neuvector/0/README.md | 4 ++-- templates/neuvector/0/docker-compose.yml | 6 ++++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/templates/neuvector/0/README.md b/templates/neuvector/0/README.md index cbbba90..b001029 100644 --- a/templates/neuvector/0/README.md +++ b/templates/neuvector/0/README.md @@ -2,9 +2,9 @@ ### Info: -NeuVector provides continuous network security for application containers. +NeuVector provides continuous network security for application containers. Deploy the NeuVector containers to get network visibility, application layer segmentation, Docker Bench auditing, and run-time vulnerability scanning. -Deploy the NeuVector containers to protect running containers from violations, threats, and vulnerabilities. NeuVector also detects host and container privilege escalations / break outs. +NeuVector also detects host and container privilege escalations / break outs and application threats such as DDoS and DNS attacks. NeuVector can be deployed on greenfield or brownfield (already running) application environments. diff --git a/templates/neuvector/0/docker-compose.yml b/templates/neuvector/0/docker-compose.yml index d7b8a22..bee18e6 100644 --- a/templates/neuvector/0/docker-compose.yml +++ b/templates/neuvector/0/docker-compose.yml @@ -1,5 +1,5 @@ allinone: - image: neuvector/allinone:1.1.0 + image: neuvector/allinone:rancher1.2 container_name: neuvector.allinone restart: always privileged: true @@ -9,6 +9,7 @@ allinone: ports: - 8443:8443 volumes: + - /var/neuvector:/var/neuvector - /var/run/docker.sock:/var/run/docker.sock - /proc:/host/proc:ro - /sys/fs/cgroup:/host/cgroup:ro @@ -17,7 +18,7 @@ allinone: io.rancher.scheduler.affinity:host_label: ${NV_ALLINONE_LABEL} io.rancher.container.hostname_override: container_name enforcer: - image: neuvector/enforcer:1.1.0 + image: neuvector/enforcer:rancher1.2 container_name: neuvector.enforcer restart: always privileged: true @@ -25,6 +26,7 @@ enforcer: - affinity:com.myself.name!=neuvector - CLUSTER_JOIN_ADDR=allinone volumes: + - /var/neuvector:/var/neuvector - /var/run/docker.sock:/var/run/docker.sock - /proc:/host/proc:ro - /sys/fs/cgroup/:/host/cgroup/:ro