mirrors/policy-reporter
1
0
Fork 0
mirror of https://github.com/kyverno/policy-reporter.git synced 2024-12-15 17:50:58 +00:00
Code Activity
Monitoring and Observability Tool for the PolicyReport CRD with an optional UI.
83 commits 3 branches 359 tags 34 MiB
Go 88.2%
HTML 8.8%
Smarty 2%
Makefile 0.9%
Dockerfile 0.1%
Find a file
Frank Jogeleit 9e1a1e35c2
fix result.timestamp parsing (#26) 
Signed-off-by: Frank Jogeleit <fj@move-elevator.de>
2021-04-21 00:57:24 +02:00
.github Manage PolicyPriorities with Helm (#17) 2021-03-17 11:51:44 +01:00
charts/policy-reporter fix result.timestamp parsing (#26) 2021-04-21 00:57:24 +02:00
cmd Support Priority by Severity (#22) 2021-04-06 10:17:22 +02:00
docs/images Monitoring improvements (#23) 2021-04-10 11:16:46 +02:00
pkg fix result.timestamp parsing (#26) 2021-04-21 00:57:24 +02:00
.dockerignore Add concurrency to metrics and loki client 2021-02-20 11:00:10 +01:00
.gitignore Rename PolicyReport UI Subchart (#18) 2021-03-18 14:57:16 +01:00
CHANGELOG.md fix result.timestamp parsing (#26) 2021-04-21 00:57:24 +02:00
Dockerfile remove labels from deleted reports and rules 2021-02-23 10:26:00 +01:00
go.mod Policy report crd update (#24) 2021-04-16 11:06:06 +02:00
go.sum Policy report crd update (#24) 2021-04-16 11:06:06 +02:00
LICENSE.md init 2021-02-20 00:58:01 +01:00
main.go init 2021-02-20 00:58:01 +01:00
Makefile Development (#11) 2021-03-05 14:26:47 +01:00
README.md Update README 2021-04-17 13:42:04 +02:00

README.md

Policy Reporter

CI Go Report Card Coverage Status

Motivation

Kyverno ships with two types of validation. You can either enforce a rule or audit it. If you don't want to block developers or if you want to try out a new rule, you can use the audit functionality. The audit configuration creates PolicyReports which you can access with kubectl. Because I can't find a simple solution to get a general overview of this PolicyReports and PolicyReportResults, I created this tool to send information about PolicyReports to different targets like Grafana Loki, Elasticsearch or Slack.

Policy Reporter provides also a Prometheus Metrics API as well as an standalone mode along with the Policy Reporter UI.

This project is in an early stage. Please let me know if anything did not work as expected or if you want to send your audits to unsupported targets.

Documentation

You can find detailed Information and Screens about Features and Configurations in the Documentation.

Getting Started

Installation with Helm v3

Installation via Helm Repository

Add the Helm repository

helm repo add policy-reporter https://fjogeleit.github.io/policy-reporter
helm repo update

Basic Installation - Provides Prometheus Metrics

helm install policy-reporter policy-reporter/policy-reporter -n policy-reporter --create-namespace

Policy Reporter UI

You can use the Policy Reporter as standalone Application along with the optional UI SubChart.

Installation with Policy Reporter UI enabled

helm install policy-reporter policy-reporter/policy-reporter --set ui.enabled=true -n policy-reporter --create-namespace
kubectl port-forward service/policy-reporter-ui 8082:8080 -n policy-reporter

Open http://localhost:8082/ in your browser.

Check the Documentation for Screens and additional Information

Targets

Policy Reporter supports the following Targets to send new (Cluster)PolicyReport Results too:

Monitoring

The Helm Chart includes optional SubChart for Prometheus Operator Integration. The provided Dashboards working without Loki and are only based on the Prometheus Metrics.

Have a look into the Documentation for details.

Grafana Dashboard Import

If you are not using the MonitoringStack you can import the dashboards from Grafana

Resources