System and method for specifying and managing predefined policies for containerized workloads

A computer implemented method comprising instructions stored on a non-transitory computer readable storage medium and executed on a hardware processor in a computing device provided with memory, for specifying and managing predefined policies for containerized workloads through one or more applications or algorithms, the method comprising the steps of:

• providing by an application developer, a specification of a policy profile for a containerized application and an associated link element via a policy management module and storing a container image containing a link element associated with the policy profile in a container registry;
• detecting and monitoring, using a profile handler module, events of containerized applications;
• detecting, using the profile handler module, a link element associated with the policy profile by scanning through one or more container images in the container registry, in response to one or more of the events comprising at least a pod start-up event or a container start-up event;
• fetching, using the profile handler module, the policy profile of the containerized application associated with the link element from the container registry and transmitting the policy profile to a policy controller module;
• obtaining by the policy controller module, one or more recommended policies of the policy profile from the policy server or astatic file;
• screening by the policy controller module, the one or more recommended policies of the policy profile;
• receiving by the policy controller module, one or more updates from the security administrator via the policy management interface and updating the recommended policies in accordance with the one or more updates;
• and
• sending by the policy controller module, recommended policies to the profile handler module.

One or more non-transitory computer readable storage mediums storing one or more sequences of instructions, which when executed by one or more processors, causes a method for specifying and managing predefined policies for containerized workloads, the method comprising;

• providing by an application developer, a specification of a policy profile for a containerized application and an associated link element via a policy management interface and storing a container image containing a link element associated with the policy profile in a container registry;
• detecting and monitoring by a profile handler module, events of containerized applications;
• detecting by the profile handler module, a link element associated with the policy profile by scanning through one or more container images in the container registry, in response to one or more of the events comprising at least a pod startup event or a container start-up event;
• fetching by the profile handler module, the policy profile of the containerized application associated with the link element from the container registry and transmitting the policy profile to a policy controller module;
• obtaining by the policy controller module, one or more recommended policies of the policy profile from the policy server or astatic file;
• screening by the policy controller module, the one or more recommended policies of the policy profile;
• receiving by the policy controller module, one or more updates from the security administrator via the policy management interface and updating the recommended policies in accordance with the one or more updates;
• and
• sending by the policy controller module, recommended policies to the profile handler module.