From c424c1e394cc2c658ebb2e918259bfad333abc6d Mon Sep 17 00:00:00 2001 From: dwertent Date: Sun, 12 Dec 2021 10:41:09 +0200 Subject: [PATCH 1/3] revert prometheus output --- .../output_mocks/prometheus-verbose-flag.txt | 6636 +++++++++-------- examples/output_mocks/prometheus.txt | 4202 +++++++++-- resultshandling/printer/junit.go | 2 +- resultshandling/printer/prometheusprinter.go | 36 +- 4 files changed, 7459 insertions(+), 3417 deletions(-) diff --git a/examples/output_mocks/prometheus-verbose-flag.txt b/examples/output_mocks/prometheus-verbose-flag.txt index 48476561..f77adaff 100644 --- a/examples/output_mocks/prometheus-verbose-flag.txt +++ b/examples/output_mocks/prometheus-verbose-flag.txt @@ -1,63 +1,9 @@ -# Number of resources found as part of failed control "Control plane hardening" -kubescape_resources_found_count{framework="NSA",control="Control plane hardening"} 0 -# Number of resources found as part of excluded control "Control plane hardening" -kubescape_resources_found_count{framework="NSA",control="Control plane hardening"} 0 -# Number of resources found as part of passed control "Control plane hardening" -kubescape_resources_found_count{framework="NSA",control="Control plane hardening"} 5 -# Passed object from "NSA" control "Control plane hardening" -kubescape_object_passed_count{framework="NSA",control="Control plane hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Control plane hardening" -kubescape_object_passed_count{framework="NSA",control="Control plane hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Control plane hardening" -kubescape_object_passed_count{framework="NSA",control="Control plane hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Control plane hardening" -kubescape_object_passed_count{framework="NSA",control="Control plane hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Control plane hardening" -kubescape_object_passed_count{framework="NSA",control="Control plane hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Host PID/IPC privileges" -kubescape_resources_found_count{framework="NSA",control="Host PID/IPC privileges"} 0 -# Number of resources found as part of excluded control "Host PID/IPC privileges" -kubescape_resources_found_count{framework="NSA",control="Host PID/IPC privileges"} 0 -# Number of resources found as part of passed control "Host PID/IPC privileges" -kubescape_resources_found_count{framework="NSA",control="Host PID/IPC privileges"} 18 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Host PID/IPC privileges" -kubescape_object_passed_count{framework="NSA",control="Host PID/IPC privileges",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Immutable container filesystem" -kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 17 +# Number of resources found as part of NSA control Immutable container filesystem +kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 22 +# Number of resources excluded as part of NSA control Immutable container filesystem +kubescape_resources_excluded_count{framework="NSA",control="Immutable container filesystem"} 0 +# Number of resources failed as part of NSA control Immutable container filesystem +kubescape_resources_failed_count{framework="NSA",control="Immutable container filesystem"} 21 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" @@ -69,20 +15,24 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 @@ -92,98 +42,70 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Immutable container filesystem" -kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 0 -# Number of resources found as part of passed control "Immutable container filesystem" -kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 1 -# Passed object from "NSA" control "Immutable container filesystem" -kubescape_object_passed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of failed control "Non-root containers" -kubescape_resources_found_count{framework="NSA",control="Non-root containers"} 0 -# Number of resources found as part of excluded control "Non-root containers" -kubescape_resources_found_count{framework="NSA",control="Non-root containers"} 0 -# Number of resources found as part of passed control "Non-root containers" -kubescape_resources_found_count{framework="NSA",control="Non-root containers"} 18 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Non-root containers" -kubescape_object_passed_count{framework="NSA",control="Non-root containers",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Privileged container" -kubescape_resources_found_count{framework="NSA",control="Privileged container"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Privileged container +kubescape_resources_found_count{framework="NSA",control="Privileged container"} 22 +# Number of resources excluded as part of NSA control Privileged container +kubescape_resources_excluded_count{framework="NSA",control="Privileged container"} 0 +# Number of resources failed as part of NSA control Privileged container +kubescape_resources_failed_count{framework="NSA",control="Privileged container"} 1 # Failed object from "NSA" control "Privileged container" kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Privileged container" -kubescape_resources_found_count{framework="NSA",control="Privileged container"} 0 -# Number of resources found as part of passed control "Privileged container" -kubescape_resources_found_count{framework="NSA",control="Privileged container"} 17 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Privileged container" -kubescape_object_passed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Allowed hostPath" -kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 6 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of NSA control Allowed hostPath +kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 22 +# Number of resources excluded as part of NSA control Allowed hostPath +kubescape_resources_excluded_count{framework="NSA",control="Allowed hostPath"} 0 +# Number of resources failed as part of NSA control Allowed hostPath +kubescape_resources_failed_count{framework="NSA",control="Allowed hostPath"} 7 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" @@ -195,37 +117,49 @@ kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespa # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Allowed hostPath" -kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 0 -# Number of resources found as part of passed control "Allowed hostPath" -kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 12 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Allowed hostPath" -kubescape_object_passed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Automatic mapping of service account" -kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 44 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control Automatic mapping of service account +kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 47 +# Number of resources excluded as part of NSA control Automatic mapping of service account +kubescape_resources_excluded_count{framework="NSA",control="Automatic mapping of service account"} 0 +# Number of resources failed as part of NSA control Automatic mapping of service account +kubescape_resources_failed_count{framework="NSA",control="Automatic mapping of service account"} 47 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" @@ -239,20 +173,46 @@ kubescape_object_failed_count{framework="NSA",control="Automatic mapping of serv # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 @@ -261,69 +221,39 @@ kubescape_object_failed_count{framework="NSA",control="Automatic mapping of serv # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Automatic mapping of service account" -kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 0 -# Number of resources found as part of passed control "Automatic mapping of service account" -kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 0 -# Number of resources found as part of failed control "hostNetwork access" -kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 6 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control hostNetwork access +kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 22 +# Number of resources excluded as part of NSA control hostNetwork access +kubescape_resources_excluded_count{framework="NSA",control="hostNetwork access"} 0 +# Number of resources failed as part of NSA control hostNetwork access +kubescape_resources_failed_count{framework="NSA",control="hostNetwork access"} 6 # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" @@ -331,37 +261,49 @@ kubescape_object_failed_count{framework="NSA",control="hostNetwork access",names # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "hostNetwork access" -kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 0 -# Number of resources found as part of passed control "hostNetwork access" -kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 12 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "hostNetwork access" -kubescape_object_passed_count{framework="NSA",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of failed control "Resource policies" -kubescape_resources_found_count{framework="NSA",control="Resource policies"} 7 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of NSA control Resource policies +kubescape_resources_found_count{framework="NSA",control="Resource policies"} 22 +# Number of resources excluded as part of NSA control Resource policies +kubescape_resources_excluded_count{framework="NSA",control="Resource policies"} 0 +# Number of resources failed as part of NSA control Resource policies +kubescape_resources_failed_count{framework="NSA",control="Resource policies"} 9 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" @@ -376,86 +318,42 @@ kubescape_object_failed_count{framework="NSA",control="Resource policies",namesp kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Resource policies" -kubescape_resources_found_count{framework="NSA",control="Resource policies"} 0 -# Number of resources found as part of passed control "Resource policies" -kubescape_resources_found_count{framework="NSA",control="Resource policies"} 11 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Resource policies" -kubescape_object_passed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of failed control "Exposed dashboard" -kubescape_resources_found_count{framework="NSA",control="Exposed dashboard"} 0 -# Number of resources found as part of excluded control "Exposed dashboard" -kubescape_resources_found_count{framework="NSA",control="Exposed dashboard"} 0 -# Number of resources found as part of passed control "Exposed dashboard" -kubescape_resources_found_count{framework="NSA",control="Exposed dashboard"} 23 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="default",name="kubernetes",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="kube-system",name="kube-dns",groupVersionKind="v1/Service"} 1 -# Passed object from "NSA" control "Exposed dashboard" -kubescape_object_passed_count{framework="NSA",control="Exposed dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/Service"} 1 -# Number of resources found as part of failed control "Allow privilege escalation" -kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 17 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Allow privilege escalation +kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 22 +# Number of resources excluded as part of NSA control Allow privilege escalation +kubescape_resources_excluded_count{framework="NSA",control="Allow privilege escalation"} 0 +# Number of resources failed as part of NSA control Allow privilege escalation +kubescape_resources_failed_count{framework="NSA",control="Allow privilege escalation"} 21 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" @@ -467,39 +365,47 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Allow privilege escalation" -kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 0 -# Number of resources found as part of passed control "Allow privilege escalation" -kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 1 -# Passed object from "NSA" control "Allow privilege escalation" -kubescape_object_passed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of failed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 7 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Applications credentials in configuration files +kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of NSA control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="NSA",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of NSA control Applications credentials in configuration files +kubescape_resources_failed_count{framework="NSA",control="Applications credentials in configuration files"} 8 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" @@ -509,463 +415,385 @@ kubescape_object_failed_count{framework="NSA",control="Applications credentials # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Number of resources found as part of excluded control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of passed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 28 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Number of resources found as part of failed control "Cluster-admin binding" -kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 4 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Number of resources found as part of NSA control Cluster-admin binding +kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of NSA control Cluster-admin binding +kubescape_resources_excluded_count{framework="NSA",control="Cluster-admin binding"} 0 +# Number of resources failed as part of NSA control Cluster-admin binding +kubescape_resources_failed_count{framework="NSA",control="Cluster-admin binding"} 4 # Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Cluster-admin binding" -kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 0 -# Number of resources found as part of passed control "Cluster-admin binding" -kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 68 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Cluster-admin binding" -kubescape_object_passed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Exec into container" -kubescape_resources_found_count{framework="NSA",control="Exec into container"} 4 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Number of resources found as part of NSA control Exec into container +kubescape_resources_found_count{framework="NSA",control="Exec into container"} 74 +# Number of resources excluded as part of NSA control Exec into container +kubescape_resources_excluded_count{framework="NSA",control="Exec into container"} 0 +# Number of resources failed as part of NSA control Exec into container +kubescape_resources_failed_count{framework="NSA",control="Exec into container"} 4 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Exec into container" -kubescape_resources_found_count{framework="NSA",control="Exec into container"} 0 -# Number of resources found as part of passed control "Exec into container" -kubescape_resources_found_count{framework="NSA",control="Exec into container"} 68 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "NSA" control "Exec into container" -kubescape_object_passed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Dangerous capabilities" -kubescape_resources_found_count{framework="NSA",control="Dangerous capabilities"} 0 -# Number of resources found as part of excluded control "Dangerous capabilities" -kubescape_resources_found_count{framework="NSA",control="Dangerous capabilities"} 0 -# Number of resources found as part of passed control "Dangerous capabilities" -kubescape_resources_found_count{framework="NSA",control="Dangerous capabilities"} 18 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Dangerous capabilities" -kubescape_object_passed_count{framework="NSA",control="Dangerous capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Insecure capabilities" -kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of NSA control Insecure capabilities +kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 22 +# Number of resources excluded as part of NSA control Insecure capabilities +kubescape_resources_excluded_count{framework="NSA",control="Insecure capabilities"} 0 +# Number of resources failed as part of NSA control Insecure capabilities +kubescape_resources_failed_count{framework="NSA",control="Insecure capabilities"} 1 # Failed object from "NSA" control "Insecure capabilities" kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "Insecure capabilities" -kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 0 -# Number of resources found as part of passed control "Insecure capabilities" -kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 17 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Insecure capabilities" -kubescape_object_passed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Linux hardening" -kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 13 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control Linux hardening +kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 22 +# Number of resources excluded as part of NSA control Linux hardening +kubescape_resources_excluded_count{framework="NSA",control="Linux hardening"} 0 +# Number of resources failed as part of NSA control Linux hardening +kubescape_resources_failed_count{framework="NSA",control="Linux hardening"} 17 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" @@ -977,29 +805,69 @@ kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespac # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Linux hardening" -kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 0 -# Number of resources found as part of passed control "Linux hardening" -kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 5 -# Passed object from "NSA" control "Linux hardening" -kubescape_object_passed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Linux hardening" -kubescape_object_passed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Linux hardening" -kubescape_object_passed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Linux hardening" -kubescape_object_passed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Linux hardening" -kubescape_object_passed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Ingress and Egress blocked" -kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 18 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control Ingress and Egress blocked +kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 22 +# Number of resources excluded as part of NSA control Ingress and Egress blocked +kubescape_resources_excluded_count{framework="NSA",control="Ingress and Egress blocked"} 0 +# Number of resources failed as part of NSA control Ingress and Egress blocked +kubescape_resources_failed_count{framework="NSA",control="Ingress and Egress blocked"} 22 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" @@ -1010,80 +878,14 @@ kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocke kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Ingress and Egress blocked" -kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 0 -# Number of resources found as part of passed control "Ingress and Egress blocked" -kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 0 -# Number of resources found as part of failed control "Container hostPort" -kubescape_resources_found_count{framework="NSA",control="Container hostPort"} 0 -# Number of resources found as part of excluded control "Container hostPort" -kubescape_resources_found_count{framework="NSA",control="Container hostPort"} 0 -# Number of resources found as part of passed control "Container hostPort" -kubescape_resources_found_count{framework="NSA",control="Container hostPort"} 18 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "Container hostPort" -kubescape_object_passed_count{framework="NSA",control="Container hostPort",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Network policies" -kubescape_resources_found_count{framework="NSA",control="Network policies"} 6 +# Number of resources found as part of NSA control Network policies +kubescape_resources_found_count{framework="NSA",control="Network policies"} 7 +# Number of resources excluded as part of NSA control Network policies +kubescape_resources_excluded_count{framework="NSA",control="Network policies"} 0 +# Number of resources failed as part of NSA control Network policies +kubescape_resources_failed_count{framework="NSA",control="Network policies"} 7 +# Failed object from "NSA" control "Network policies" +kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" @@ -1096,120 +898,92 @@ kubescape_object_failed_count{framework="NSA",control="Network policies",name="k kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Number of resources found as part of excluded control "Network policies" -kubescape_resources_found_count{framework="NSA",control="Network policies"} 0 -# Number of resources found as part of passed control "Network policies" -kubescape_resources_found_count{framework="NSA",control="Network policies"} 0 -# Number of resources found as part of failed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of excluded control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of passed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 19 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Passed object from "NSA" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",name="david-virtualbox",groupVersionKind="v1/Node"} 1 -# Number of resources found as part of failed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Number of resources found as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 -# Number of resources found as part of passed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 28 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Number of resources found as part of failed control "Access container service account" -kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 24 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of MITRE control Access container service account +kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 216 +# Number of resources excluded as part of MITRE control Access container service account +kubescape_resources_excluded_count{framework="MITRE",control="Access container service account"} 0 +# Number of resources failed as part of MITRE control Access container service account +kubescape_resources_failed_count{framework="MITRE",control="Access container service account"} 31 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1217,21 +991,37 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="storage-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-scanner-service-account-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="storage-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-scanner-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1241,837 +1031,607 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "Access container service account" -kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 0 -# Number of resources found as part of passed control "Access container service account" -kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 181 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="kubeadm:kubelet-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-certificate-rotation",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="minikube-rbac",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:auth-delegator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:nodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:selfnodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-kubelet-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kubelet-serving-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:legacy-unknown-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:heapster",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-aggregator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:kubelet-api-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:node-bootstrapper",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:node-problem-detector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Passed object from "MITRE" control "Access container service account" -kubescape_object_passed_count{framework="MITRE",control="Access container service account",name="view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Number of resources found as part of failed control "Access Kubernetes dashboard" -kubescape_resources_found_count{framework="MITRE",control="Access Kubernetes dashboard"} 0 -# Number of resources found as part of excluded control "Access Kubernetes dashboard" -kubescape_resources_found_count{framework="MITRE",control="Access Kubernetes dashboard"} 0 -# Number of resources found as part of passed control "Access Kubernetes dashboard" -kubescape_resources_found_count{framework="MITRE",control="Access Kubernetes dashboard"} 90 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Access Kubernetes dashboard" -kubescape_object_passed_count{framework="MITRE",control="Access Kubernetes dashboard",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Access tiller endpoint" -kubescape_resources_found_count{framework="MITRE",control="Access tiller endpoint"} 0 -# Number of resources found as part of excluded control "Access tiller endpoint" -kubescape_resources_found_count{framework="MITRE",control="Access tiller endpoint"} 0 -# Number of resources found as part of passed control "Access tiller endpoint" -kubescape_resources_found_count{framework="MITRE",control="Access tiller endpoint"} 12 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Access tiller endpoint" -kubescape_object_passed_count{framework="MITRE",control="Access tiller endpoint",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of failed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of excluded control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of passed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 35 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_passed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Number of resources found as part of failed control "Cluster-admin binding" -kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 4 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-aggregator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:legacy-unknown-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:selfnodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:heapster",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-problem-detector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kubelet-serving-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kubelet-api-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-bootstrapper",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:auth-delegator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:nodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-kubelet-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="minikube-rbac",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:kubelet-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-certificate-rotation",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Number of resources found as part of MITRE control Applications credentials in configuration files +kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of MITRE control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="MITRE",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of MITRE control Applications credentials in configuration files +kubescape_resources_failed_count{framework="MITRE",control="Applications credentials in configuration files"} 8 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of MITRE control Cluster-admin binding +kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of MITRE control Cluster-admin binding +kubescape_resources_excluded_count{framework="MITRE",control="Cluster-admin binding"} 0 +# Number of resources failed as part of MITRE control Cluster-admin binding +kubescape_resources_failed_count{framework="MITRE",control="Cluster-admin binding"} 4 # Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Cluster-admin binding" -kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 0 -# Number of resources found as part of passed control "Cluster-admin binding" -kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 68 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Cluster-admin binding" -kubescape_object_passed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Cluster internal networking" -kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 6 -# Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control Cluster internal networking +kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 7 +# Number of resources excluded as part of MITRE control Cluster internal networking +kubescape_resources_excluded_count{framework="MITRE",control="Cluster internal networking"} 0 +# Number of resources failed as part of MITRE control Cluster internal networking +kubescape_resources_failed_count{framework="MITRE",control="Cluster internal networking"} 7 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" @@ -2080,329 +1640,207 @@ kubescape_object_failed_count{framework="MITRE",control="Cluster internal networ kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Number of resources found as part of excluded control "Cluster internal networking" -kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 0 -# Number of resources found as part of passed control "Cluster internal networking" -kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 0 -# Number of resources found as part of failed control "Exec into container" -kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 4 +# Failed object from "MITRE" control "Cluster internal networking" +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Cluster internal networking" +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Cluster internal networking" +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="default",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of MITRE control Exec into container +kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 74 +# Number of resources excluded as part of MITRE control Exec into container +kubescape_resources_excluded_count{framework="MITRE",control="Exec into container"} 0 +# Number of resources failed as part of MITRE control Exec into container +kubescape_resources_failed_count{framework="MITRE",control="Exec into container"} 4 # Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Exec into container" -kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 0 -# Number of resources found as part of passed control "Exec into container" -kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 68 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Exec into container" -kubescape_object_passed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Exposed dashboard" -kubescape_resources_found_count{framework="MITRE",control="Exposed dashboard"} 0 -# Number of resources found as part of excluded control "Exposed dashboard" -kubescape_resources_found_count{framework="MITRE",control="Exposed dashboard"} 0 -# Number of resources found as part of passed control "Exposed dashboard" -kubescape_resources_found_count{framework="MITRE",control="Exposed dashboard"} 23 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="default",name="kubernetes",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="kube-system",name="kube-dns",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed dashboard" -kubescape_object_passed_count{framework="MITRE",control="Exposed dashboard",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/Service"} 1 -# Number of resources found as part of failed control "Exposed sensitive interfaces" -kubescape_resources_found_count{framework="MITRE",control="Exposed sensitive interfaces"} 0 -# Number of resources found as part of excluded control "Exposed sensitive interfaces" -kubescape_resources_found_count{framework="MITRE",control="Exposed sensitive interfaces"} 0 -# Number of resources found as part of passed control "Exposed sensitive interfaces" -kubescape_resources_found_count{framework="MITRE",control="Exposed sensitive interfaces"} 29 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="default",name="kubernetes",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="kube-dns",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Exposed sensitive interfaces" -kubescape_object_passed_count{framework="MITRE",control="Exposed sensitive interfaces",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 6 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control hostPath mount +kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 22 +# Number of resources excluded as part of MITRE control hostPath mount +kubescape_resources_excluded_count{framework="MITRE",control="hostPath mount"} 0 +# Number of resources failed as part of MITRE control hostPath mount +kubescape_resources_failed_count{framework="MITRE",control="hostPath mount"} 7 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 0 -# Number of resources found as part of passed control "hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 12 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "List Kubernetes secrets" -kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 13 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Number of resources found as part of MITRE control Kubernetes CronJob +kubescape_resources_found_count{framework="MITRE",control="Kubernetes CronJob"} 2 +# Number of resources excluded as part of MITRE control Kubernetes CronJob +kubescape_resources_excluded_count{framework="MITRE",control="Kubernetes CronJob"} 0 +# Number of resources failed as part of MITRE control Kubernetes CronJob +kubescape_resources_failed_count{framework="MITRE",control="Kubernetes CronJob"} 2 +# Failed object from "MITRE" control "Kubernetes CronJob" +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Kubernetes CronJob" +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control List Kubernetes secrets +kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 74 +# Number of resources excluded as part of MITRE control List Kubernetes secrets +kubescape_resources_excluded_count{framework="MITRE",control="List Kubernetes secrets"} 0 +# Number of resources failed as part of MITRE control List Kubernetes secrets +kubescape_resources_failed_count{framework="MITRE",control="List Kubernetes secrets"} 15 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 @@ -2413,137 +1851,107 @@ kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "List Kubernetes secrets" -kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 0 -# Number of resources found as part of passed control "List Kubernetes secrets" -kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 59 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_passed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Mount service principal" -kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 6 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 +# Number of resources found as part of MITRE control Mount service principal +kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 22 +# Number of resources excluded as part of MITRE control Mount service principal +kubescape_resources_excluded_count{framework="MITRE",control="Mount service principal"} 0 +# Number of resources failed as part of MITRE control Mount service principal +kubescape_resources_failed_count{framework="MITRE",control="Mount service principal"} 7 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" @@ -2553,39 +1961,49 @@ kubescape_object_failed_count{framework="MITRE",control="Mount service principal # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "Mount service principal" -kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 0 -# Number of resources found as part of passed control "Mount service principal" -kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 12 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "Mount service principal" -kubescape_object_passed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Network mapping" -kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 6 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of MITRE control Network mapping +kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 7 +# Number of resources excluded as part of MITRE control Network mapping +kubescape_resources_excluded_count{framework="MITRE",control="Network mapping"} 0 +# Number of resources failed as part of MITRE control Network mapping +kubescape_resources_failed_count{framework="MITRE",control="Network mapping"} 7 +# Failed object from "MITRE" control "Network mapping" +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" @@ -2598,118 +2016,70 @@ kubescape_object_failed_count{framework="MITRE",control="Network mapping",name=" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Number of resources found as part of excluded control "Network mapping" -kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 0 -# Number of resources found as part of passed control "Network mapping" -kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 0 -# Number of resources found as part of failed control "Privileged container" -kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 1 +# Number of resources found as part of MITRE control Privileged container +kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 22 +# Number of resources excluded as part of MITRE control Privileged container +kubescape_resources_excluded_count{framework="MITRE",control="Privileged container"} 0 +# Number of resources failed as part of MITRE control Privileged container +kubescape_resources_failed_count{framework="MITRE",control="Privileged container"} 1 # Failed object from "MITRE" control "Privileged container" kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Privileged container" -kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 0 -# Number of resources found as part of passed control "Privileged container" -kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 17 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Privileged container" -kubescape_object_passed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "SSH server running inside container" -kubescape_resources_found_count{framework="MITRE",control="SSH server running inside container"} 0 -# Number of resources found as part of excluded control "SSH server running inside container" -kubescape_resources_found_count{framework="MITRE",control="SSH server running inside container"} 0 -# Number of resources found as part of passed control "SSH server running inside container" -kubescape_resources_found_count{framework="MITRE",control="SSH server running inside container"} 29 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="default",name="kubernetes",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="kube-system",name="kube-dns",groupVersionKind="v1/Service"} 1 -# Passed object from "MITRE" control "SSH server running inside container" -kubescape_object_passed_count{framework="MITRE",control="SSH server running inside container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/Service"} 1 -# Number of resources found as part of failed control "Writable hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 6 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control Writable hostPath mount +kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 22 +# Number of resources excluded as part of MITRE control Writable hostPath mount +kubescape_resources_excluded_count{framework="MITRE",control="Writable hostPath mount"} 0 +# Number of resources failed as part of MITRE control Writable hostPath mount +kubescape_resources_failed_count{framework="MITRE",control="Writable hostPath mount"} 7 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" @@ -2717,375 +2087,301 @@ kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Number of resources found as part of excluded control "Writable hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 0 -# Number of resources found as part of passed control "Writable hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 12 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "Writable hostPath mount" -kubescape_object_passed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Number of resources found as part of failed control "Malicious admission controller (mutating)" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control Malicious admission controller (mutating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 +# Number of resources excluded as part of MITRE control Malicious admission controller (mutating) +kubescape_resources_excluded_count{framework="MITRE",control="Malicious admission controller (mutating)"} 0 +# Number of resources failed as part of MITRE control Malicious admission controller (mutating) +kubescape_resources_failed_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 # Failed object from "MITRE" control "Malicious admission controller (mutating)" kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (mutating)",name="ca-mutate-cfg",groupVersionKind="admissionregistration.k8s.io/v1/MutatingWebhookConfiguration"} 1 -# Number of resources found as part of excluded control "Malicious admission controller (mutating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 0 -# Number of resources found as part of passed control "Malicious admission controller (mutating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 0 -# Number of resources found as part of failed control "Malicious admission controller (validating)" +# Number of resources found as part of MITRE control Malicious admission controller (validating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (validating)"} 1 +# Number of resources excluded as part of MITRE control Malicious admission controller (validating) +kubescape_resources_excluded_count{framework="MITRE",control="Malicious admission controller (validating)"} 0 +# Number of resources failed as part of MITRE control Malicious admission controller (validating) +kubescape_resources_failed_count{framework="MITRE",control="Malicious admission controller (validating)"} 1 # Failed object from "MITRE" control "Malicious admission controller (validating)" kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (validating)",name="ca-validate-cfg",groupVersionKind="admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration"} 1 -# Number of resources found as part of excluded control "Malicious admission controller (validating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (validating)"} 0 -# Number of resources found as part of passed control "Malicious admission controller (validating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (validating)"} 0 -# Number of resources found as part of failed control "Delete Kubernetes events" -kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 6 +# Number of resources found as part of MITRE control Delete Kubernetes events +kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 74 +# Number of resources excluded as part of MITRE control Delete Kubernetes events +kubescape_resources_excluded_count{framework="MITRE",control="Delete Kubernetes events"} 0 +# Number of resources failed as part of MITRE control Delete Kubernetes events +kubescape_resources_failed_count{framework="MITRE",control="Delete Kubernetes events"} 6 # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Delete Kubernetes events" -kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 0 -# Number of resources found as part of passed control "Delete Kubernetes events" -kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 66 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_passed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "CoreDNS poisoning" -kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 6 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Number of resources found as part of MITRE control CoreDNS poisoning +kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 74 +# Number of resources excluded as part of MITRE control CoreDNS poisoning +kubescape_resources_excluded_count{framework="MITRE",control="CoreDNS poisoning"} 0 +# Number of resources failed as part of MITRE control CoreDNS poisoning +kubescape_resources_failed_count{framework="MITRE",control="CoreDNS poisoning"} 6 # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "CoreDNS poisoning" -kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 0 -# Number of resources found as part of passed control "CoreDNS poisoning" -kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 66 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_passed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "Data Destruction" -kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 20 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Number of resources found as part of MITRE control Data Destruction +kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 74 +# Number of resources excluded as part of MITRE control Data Destruction +kubescape_resources_excluded_count{framework="MITRE",control="Data Destruction"} 0 +# Number of resources failed as part of MITRE control Data Destruction +kubescape_resources_failed_count{framework="MITRE",control="Data Destruction"} 20 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" @@ -3093,234 +2389,1638 @@ kubescape_object_failed_count{framework="MITRE",control="Data Destruction",names # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of excluded control "Data Destruction" -kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 0 -# Number of resources found as part of passed control "Data Destruction" -kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 52 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Passed object from "MITRE" control "Data Destruction" -kubescape_object_passed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 1 -# Number of resources found as part of failed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of excluded control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of passed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 19 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Passed object from "MITRE" control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access.",name="david-virtualbox",groupVersionKind="v1/Node"} 1 -# Number of resources found as part of failed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Number of resources found as part of excluded control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 -# Number of resources found as part of passed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 28 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Passed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_passed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of ArmoBest control Immutable container filesystem +kubescape_resources_found_count{framework="ArmoBest",control="Immutable container filesystem"} 22 +# Number of resources excluded as part of ArmoBest control Immutable container filesystem +kubescape_resources_excluded_count{framework="ArmoBest",control="Immutable container filesystem"} 0 +# Number of resources failed as part of ArmoBest control Immutable container filesystem +kubescape_resources_failed_count{framework="ArmoBest",control="Immutable container filesystem"} 21 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Privileged container +kubescape_resources_found_count{framework="ArmoBest",control="Privileged container"} 22 +# Number of resources excluded as part of ArmoBest control Privileged container +kubescape_resources_excluded_count{framework="ArmoBest",control="Privileged container"} 0 +# Number of resources failed as part of ArmoBest control Privileged container +kubescape_resources_failed_count{framework="ArmoBest",control="Privileged container"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Allowed hostPath +kubescape_resources_found_count{framework="ArmoBest",control="Allowed hostPath"} 22 +# Number of resources excluded as part of ArmoBest control Allowed hostPath +kubescape_resources_excluded_count{framework="ArmoBest",control="Allowed hostPath"} 0 +# Number of resources failed as part of ArmoBest control Allowed hostPath +kubescape_resources_failed_count{framework="ArmoBest",control="Allowed hostPath"} 7 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of ArmoBest control Automatic mapping of service account +kubescape_resources_found_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 +# Number of resources excluded as part of ArmoBest control Automatic mapping of service account +kubescape_resources_excluded_count{framework="ArmoBest",control="Automatic mapping of service account"} 0 +# Number of resources failed as part of ArmoBest control Automatic mapping of service account +kubescape_resources_failed_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Number of resources found as part of ArmoBest control hostNetwork access +kubescape_resources_found_count{framework="ArmoBest",control="hostNetwork access"} 22 +# Number of resources excluded as part of ArmoBest control hostNetwork access +kubescape_resources_excluded_count{framework="ArmoBest",control="hostNetwork access"} 0 +# Number of resources failed as part of ArmoBest control hostNetwork access +kubescape_resources_failed_count{framework="ArmoBest",control="hostNetwork access"} 6 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Resource policies +kubescape_resources_found_count{framework="ArmoBest",control="Resource policies"} 22 +# Number of resources excluded as part of ArmoBest control Resource policies +kubescape_resources_excluded_count{framework="ArmoBest",control="Resource policies"} 0 +# Number of resources failed as part of ArmoBest control Resource policies +kubescape_resources_failed_count{framework="ArmoBest",control="Resource policies"} 9 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Allow privilege escalation +kubescape_resources_found_count{framework="ArmoBest",control="Allow privilege escalation"} 22 +# Number of resources excluded as part of ArmoBest control Allow privilege escalation +kubescape_resources_excluded_count{framework="ArmoBest",control="Allow privilege escalation"} 0 +# Number of resources failed as part of ArmoBest control Allow privilege escalation +kubescape_resources_failed_count{framework="ArmoBest",control="Allow privilege escalation"} 21 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_found_count{framework="ArmoBest",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="ArmoBest",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_failed_count{framework="ArmoBest",control="Applications credentials in configuration files"} 8 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of ArmoBest control Cluster-admin binding +kubescape_resources_found_count{framework="ArmoBest",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of ArmoBest control Cluster-admin binding +kubescape_resources_excluded_count{framework="ArmoBest",control="Cluster-admin binding"} 0 +# Number of resources failed as part of ArmoBest control Cluster-admin binding +kubescape_resources_failed_count{framework="ArmoBest",control="Cluster-admin binding"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of ArmoBest control Exec into container +kubescape_resources_found_count{framework="ArmoBest",control="Exec into container"} 74 +# Number of resources excluded as part of ArmoBest control Exec into container +kubescape_resources_excluded_count{framework="ArmoBest",control="Exec into container"} 0 +# Number of resources failed as part of ArmoBest control Exec into container +kubescape_resources_failed_count{framework="ArmoBest",control="Exec into container"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Number of resources found as part of ArmoBest control Insecure capabilities +kubescape_resources_found_count{framework="ArmoBest",control="Insecure capabilities"} 22 +# Number of resources excluded as part of ArmoBest control Insecure capabilities +kubescape_resources_excluded_count{framework="ArmoBest",control="Insecure capabilities"} 0 +# Number of resources failed as part of ArmoBest control Insecure capabilities +kubescape_resources_failed_count{framework="ArmoBest",control="Insecure capabilities"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Linux hardening +kubescape_resources_found_count{framework="ArmoBest",control="Linux hardening"} 22 +# Number of resources excluded as part of ArmoBest control Linux hardening +kubescape_resources_excluded_count{framework="ArmoBest",control="Linux hardening"} 0 +# Number of resources failed as part of ArmoBest control Linux hardening +kubescape_resources_failed_count{framework="ArmoBest",control="Linux hardening"} 17 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_found_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 +# Number of resources excluded as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_excluded_count{framework="ArmoBest",control="Ingress and Egress blocked"} 0 +# Number of resources failed as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_failed_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Network policies +kubescape_resources_found_count{framework="ArmoBest",control="Network policies"} 7 +# Number of resources excluded as part of ArmoBest control Network policies +kubescape_resources_excluded_count{framework="ArmoBest",control="Network policies"} 0 +# Number of resources failed as part of ArmoBest control Network policies +kubescape_resources_failed_count{framework="ArmoBest",control="Network policies"} 7 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control No impersonation +kubescape_resources_found_count{framework="ArmoBest",control="No impersonation"} 74 +# Number of resources excluded as part of ArmoBest control No impersonation +kubescape_resources_excluded_count{framework="ArmoBest",control="No impersonation"} 0 +# Number of resources failed as part of ArmoBest control No impersonation +kubescape_resources_failed_count{framework="ArmoBest",control="No impersonation"} 4 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Number of resources found as part of ArmoBest control Portforwarding privileges +kubescape_resources_found_count{framework="ArmoBest",control="Portforwarding privileges"} 74 +# Number of resources excluded as part of ArmoBest control Portforwarding privileges +kubescape_resources_excluded_count{framework="ArmoBest",control="Portforwarding privileges"} 0 +# Number of resources failed as part of ArmoBest control Portforwarding privileges +kubescape_resources_failed_count{framework="ArmoBest",control="Portforwarding privileges"} 8 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Number of resources found as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_found_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 22 +# Number of resources excluded as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_excluded_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 0 +# Number of resources failed as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 2 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of ArmoBest control Namespace without service accounts +kubescape_resources_found_count{framework="ArmoBest",control="Namespace without service accounts"} 54 +# Number of resources excluded as part of ArmoBest control Namespace without service accounts +kubescape_resources_excluded_count{framework="ArmoBest",control="Namespace without service accounts"} 0 +# Number of resources failed as part of ArmoBest control Namespace without service accounts +kubescape_resources_failed_count{framework="ArmoBest",control="Namespace without service accounts"} 3 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Number of resources found as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 diff --git a/examples/output_mocks/prometheus.txt b/examples/output_mocks/prometheus.txt index 0d29b205..95f90c0a 100644 --- a/examples/output_mocks/prometheus.txt +++ b/examples/output_mocks/prometheus.txt @@ -1,706 +1,4026 @@ -# Number of resources found as part of failed control "Control plane hardening" -kubescape_resources_found_count{framework="NSA",control="Control plane hardening"} 0 -# Number of resources found as part of excluded control "Control plane hardening" -kubescape_resources_found_count{framework="NSA",control="Control plane hardening"} 0 -# Number of resources found as part of failed control "Host PID/IPC privileges" -kubescape_resources_found_count{framework="NSA",control="Host PID/IPC privileges"} 0 -# Number of resources found as part of excluded control "Host PID/IPC privileges" -kubescape_resources_found_count{framework="NSA",control="Host PID/IPC privileges"} 0 -# Number of resources found as part of failed control "Immutable container filesystem" -kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 17 +# Number of resources found as part of NSA control Immutable container filesystem +kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 22 +# Number of resources excluded as part of NSA control Immutable container filesystem +kubescape_resources_excluded_count{framework="NSA",control="Immutable container filesystem"} 0 +# Number of resources failed as part of NSA control Immutable container filesystem +kubescape_resources_failed_count{framework="NSA",control="Immutable container filesystem"} 21 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Immutable container filesystem" -kubescape_resources_found_count{framework="NSA",control="Immutable container filesystem"} 0 -# Number of resources found as part of failed control "Non-root containers" -kubescape_resources_found_count{framework="NSA",control="Non-root containers"} 0 -# Number of resources found as part of excluded control "Non-root containers" -kubescape_resources_found_count{framework="NSA",control="Non-root containers"} 0 -# Number of resources found as part of failed control "Privileged container" -kubescape_resources_found_count{framework="NSA",control="Privileged container"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Privileged container +kubescape_resources_found_count{framework="NSA",control="Privileged container"} 22 +# Number of resources excluded as part of NSA control Privileged container +kubescape_resources_excluded_count{framework="NSA",control="Privileged container"} 0 +# Number of resources failed as part of NSA control Privileged container +kubescape_resources_failed_count{framework="NSA",control="Privileged container"} 1 # Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Privileged container" -kubescape_resources_found_count{framework="NSA",control="Privileged container"} 0 -# Number of resources found as part of failed control "Allowed hostPath" -kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 6 +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Privileged container" +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of NSA control Allowed hostPath +kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 22 +# Number of resources excluded as part of NSA control Allowed hostPath +kubescape_resources_excluded_count{framework="NSA",control="Allowed hostPath"} 0 +# Number of resources failed as part of NSA control Allowed hostPath +kubescape_resources_failed_count{framework="NSA",control="Allowed hostPath"} 7 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Allowed hostPath" -kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 0 -# Number of resources found as part of failed control "Automatic mapping of service account" -kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 44 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control Automatic mapping of service account +kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 47 +# Number of resources excluded as part of NSA control Automatic mapping of service account +kubescape_resources_excluded_count{framework="NSA",control="Automatic mapping of service account"} 0 +# Number of resources failed as part of NSA control Automatic mapping of service account +kubescape_resources_failed_count{framework="NSA",control="Automatic mapping of service account"} 47 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1"} 1 -# Number of resources found as part of excluded control "Automatic mapping of service account" -kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 0 -# Number of resources found as part of failed control "hostNetwork access" -kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 6 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Number of resources found as part of NSA control hostNetwork access +kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 22 +# Number of resources excluded as part of NSA control hostNetwork access +kubescape_resources_excluded_count{framework="NSA",control="hostNetwork access"} 0 +# Number of resources failed as part of NSA control hostNetwork access +kubescape_resources_failed_count{framework="NSA",control="hostNetwork access"} 6 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "hostNetwork access" -kubescape_resources_found_count{framework="NSA",control="hostNetwork access"} 0 -# Number of resources found as part of failed control "Resource policies" -kubescape_resources_found_count{framework="NSA",control="Resource policies"} 7 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of NSA control Resource policies +kubescape_resources_found_count{framework="NSA",control="Resource policies"} 22 +# Number of resources excluded as part of NSA control Resource policies +kubescape_resources_excluded_count{framework="NSA",control="Resource policies"} 0 +# Number of resources failed as part of NSA control Resource policies +kubescape_resources_failed_count{framework="NSA",control="Resource policies"} 9 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Resource policies" -kubescape_resources_found_count{framework="NSA",control="Resource policies"} 0 -# Number of resources found as part of failed control "Exposed dashboard" -kubescape_resources_found_count{framework="NSA",control="Exposed dashboard"} 0 -# Number of resources found as part of excluded control "Exposed dashboard" -kubescape_resources_found_count{framework="NSA",control="Exposed dashboard"} 0 -# Number of resources found as part of failed control "Allow privilege escalation" -kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 17 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Allow privilege escalation +kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 22 +# Number of resources excluded as part of NSA control Allow privilege escalation +kubescape_resources_excluded_count{framework="NSA",control="Allow privilege escalation"} 0 +# Number of resources failed as part of NSA control Allow privilege escalation +kubescape_resources_failed_count{framework="NSA",control="Allow privilege escalation"} 21 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Allow privilege escalation" -kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 0 -# Number of resources found as part of failed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 7 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Applications credentials in configuration files +kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of NSA control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="NSA",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of NSA control Applications credentials in configuration files +kubescape_resources_failed_count{framework="NSA",control="Applications credentials in configuration files"} 8 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1"} 1 -# Number of resources found as part of excluded control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of failed control "Cluster-admin binding" -kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 4 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of NSA control Cluster-admin binding +kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of NSA control Cluster-admin binding +kubescape_resources_excluded_count{framework="NSA",control="Cluster-admin binding"} 0 +# Number of resources failed as part of NSA control Cluster-admin binding +kubescape_resources_failed_count{framework="NSA",control="Cluster-admin binding"} 4 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Cluster-admin binding" -kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 0 -# Number of resources found as part of failed control "Exec into container" -kubescape_resources_found_count{framework="NSA",control="Exec into container"} 4 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Cluster-admin binding" +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Number of resources found as part of NSA control Exec into container +kubescape_resources_found_count{framework="NSA",control="Exec into container"} 74 +# Number of resources excluded as part of NSA control Exec into container +kubescape_resources_excluded_count{framework="NSA",control="Exec into container"} 0 +# Number of resources failed as part of NSA control Exec into container +kubescape_resources_failed_count{framework="NSA",control="Exec into container"} 4 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Exec into container" -kubescape_resources_found_count{framework="NSA",control="Exec into container"} 0 -# Number of resources found as part of failed control "Dangerous capabilities" -kubescape_resources_found_count{framework="NSA",control="Dangerous capabilities"} 0 -# Number of resources found as part of excluded control "Dangerous capabilities" -kubescape_resources_found_count{framework="NSA",control="Dangerous capabilities"} 0 -# Number of resources found as part of failed control "Insecure capabilities" -kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "NSA" control "Exec into container" +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of NSA control Insecure capabilities +kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 22 +# Number of resources excluded as part of NSA control Insecure capabilities +kubescape_resources_excluded_count{framework="NSA",control="Insecure capabilities"} 0 +# Number of resources failed as part of NSA control Insecure capabilities +kubescape_resources_failed_count{framework="NSA",control="Insecure capabilities"} 1 # Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Insecure capabilities" -kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 0 -# Number of resources found as part of failed control "Linux hardening" -kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 13 +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Insecure capabilities" +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of NSA control Linux hardening +kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 22 +# Number of resources excluded as part of NSA control Linux hardening +kubescape_resources_excluded_count{framework="NSA",control="Linux hardening"} 0 +# Number of resources failed as part of NSA control Linux hardening +kubescape_resources_failed_count{framework="NSA",control="Linux hardening"} 17 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Linux hardening" -kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 0 -# Number of resources found as part of failed control "Ingress and Egress blocked" -kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 18 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of NSA control Ingress and Egress blocked +kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 22 +# Number of resources excluded as part of NSA control Ingress and Egress blocked +kubescape_resources_excluded_count{framework="NSA",control="Ingress and Egress blocked"} 0 +# Number of resources failed as part of NSA control Ingress and Egress blocked +kubescape_resources_failed_count{framework="NSA",control="Ingress and Egress blocked"} 22 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Ingress and Egress blocked" -kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 0 -# Number of resources found as part of failed control "Container hostPort" -kubescape_resources_found_count{framework="NSA",control="Container hostPort"} 0 -# Number of resources found as part of excluded control "Container hostPort" -kubescape_resources_found_count{framework="NSA",control="Container hostPort"} 0 -# Number of resources found as part of failed control "Network policies" -kubescape_resources_found_count{framework="NSA",control="Network policies"} 6 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of NSA control Network policies +kubescape_resources_found_count{framework="NSA",control="Network policies"} 7 +# Number of resources excluded as part of NSA control Network policies +kubescape_resources_excluded_count{framework="NSA",control="Network policies"} 0 +# Number of resources failed as part of NSA control Network policies +kubescape_resources_failed_count{framework="NSA",control="Network policies"} 7 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-node-lease",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-public",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-public",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="nginx-ingress",groupVersionKind="v1"} 1 -# Number of resources found as part of excluded control "Network policies" -kubescape_resources_found_count{framework="NSA",control="Network policies"} 0 -# Number of resources found as part of failed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of excluded control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of failed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "NSA" control "Network policies" +kubescape_object_failed_count{framework="NSA",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 -# Number of resources found as part of failed control "Access container service account" -kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 24 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of MITRE control Access container service account +kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 216 +# Number of resources excluded as part of MITRE control Access container service account +kubescape_resources_excluded_count{framework="MITRE",control="Access container service account"} 0 +# Number of resources failed as part of MITRE control Access container service account +kubescape_resources_failed_count{framework="MITRE",control="Access container service account"} 31 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="storage-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-scanner-service-account-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-roles",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="storage-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-scanner-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="ca-controller-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Access container service account" -kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 0 -# Number of resources found as part of failed control "Access Kubernetes dashboard" -kubescape_resources_found_count{framework="MITRE",control="Access Kubernetes dashboard"} 0 -# Number of resources found as part of excluded control "Access Kubernetes dashboard" -kubescape_resources_found_count{framework="MITRE",control="Access Kubernetes dashboard"} 0 -# Number of resources found as part of failed control "Access tiller endpoint" -kubescape_resources_found_count{framework="MITRE",control="Access tiller endpoint"} 0 -# Number of resources found as part of excluded control "Access tiller endpoint" -kubescape_resources_found_count{framework="MITRE",control="Access tiller endpoint"} 0 -# Number of resources found as part of failed control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of excluded control "Applications credentials in configuration files" -kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 0 -# Number of resources found as part of failed control "Cluster-admin binding" -kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 4 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kubelet-api-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:auth-delegator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kubelet-serving-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:legacy-unknown-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:nodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:selfnodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-kubelet-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-problem-detector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:heapster",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-aggregator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-bootstrapper",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="minikube-rbac",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:kubelet-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-certificate-rotation",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +# Number of resources found as part of MITRE control Applications credentials in configuration files +kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of MITRE control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="MITRE",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of MITRE control Applications credentials in configuration files +kubescape_resources_failed_count{framework="MITRE",control="Applications credentials in configuration files"} 8 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of MITRE control Cluster-admin binding +kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of MITRE control Cluster-admin binding +kubescape_resources_excluded_count{framework="MITRE",control="Cluster-admin binding"} 0 +# Number of resources failed as part of MITRE control Cluster-admin binding +kubescape_resources_failed_count{framework="MITRE",control="Cluster-admin binding"} 4 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Cluster-admin binding" -kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 0 -# Number of resources found as part of failed control "Cluster internal networking" -kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 6 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Cluster-admin binding" +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control Cluster internal networking +kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 7 +# Number of resources excluded as part of MITRE control Cluster internal networking +kubescape_resources_excluded_count{framework="MITRE",control="Cluster internal networking"} 0 +# Number of resources failed as part of MITRE control Cluster internal networking +kubescape_resources_failed_count{framework="MITRE",control="Cluster internal networking"} 7 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-node-lease",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-public",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1"} 1 -# Number of resources found as part of excluded control "Cluster internal networking" -kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 0 -# Number of resources found as part of failed control "Exec into container" -kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 4 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Cluster internal networking" +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of MITRE control Exec into container +kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 74 +# Number of resources excluded as part of MITRE control Exec into container +kubescape_resources_excluded_count{framework="MITRE",control="Exec into container"} 0 +# Number of resources failed as part of MITRE control Exec into container +kubescape_resources_failed_count{framework="MITRE",control="Exec into container"} 4 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Exec into container" -kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 0 -# Number of resources found as part of failed control "Exposed dashboard" -kubescape_resources_found_count{framework="MITRE",control="Exposed dashboard"} 0 -# Number of resources found as part of excluded control "Exposed dashboard" -kubescape_resources_found_count{framework="MITRE",control="Exposed dashboard"} 0 -# Number of resources found as part of failed control "Exposed sensitive interfaces" -kubescape_resources_found_count{framework="MITRE",control="Exposed sensitive interfaces"} 0 -# Number of resources found as part of excluded control "Exposed sensitive interfaces" -kubescape_resources_found_count{framework="MITRE",control="Exposed sensitive interfaces"} 0 -# Number of resources found as part of failed control "hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 6 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Exec into container" +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Number of resources found as part of MITRE control hostPath mount +kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 22 +# Number of resources excluded as part of MITRE control hostPath mount +kubescape_resources_excluded_count{framework="MITRE",control="hostPath mount"} 0 +# Number of resources failed as part of MITRE control hostPath mount +kubescape_resources_failed_count{framework="MITRE",control="hostPath mount"} 7 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 0 -# Number of resources found as part of failed control "List Kubernetes secrets" -kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 13 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control Kubernetes CronJob +kubescape_resources_found_count{framework="MITRE",control="Kubernetes CronJob"} 2 +# Number of resources excluded as part of MITRE control Kubernetes CronJob +kubescape_resources_excluded_count{framework="MITRE",control="Kubernetes CronJob"} 0 +# Number of resources failed as part of MITRE control Kubernetes CronJob +kubescape_resources_failed_count{framework="MITRE",control="Kubernetes CronJob"} 2 +# Failed object from "MITRE" control "Kubernetes CronJob" +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Kubernetes CronJob" +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control List Kubernetes secrets +kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 74 +# Number of resources excluded as part of MITRE control List Kubernetes secrets +kubescape_resources_excluded_count{framework="MITRE",control="List Kubernetes secrets"} 0 +# Number of resources failed as part of MITRE control List Kubernetes secrets +kubescape_resources_failed_count{framework="MITRE",control="List Kubernetes secrets"} 15 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="expand-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="generic-garbage-collector",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="namespace-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="persistent-volume-binder",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="resourcequota-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="token-cleaner",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "List Kubernetes secrets" -kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 0 -# Number of resources found as part of failed control "Mount service principal" -kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 6 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 +# Number of resources found as part of MITRE control Mount service principal +kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 22 +# Number of resources excluded as part of MITRE control Mount service principal +kubescape_resources_excluded_count{framework="MITRE",control="Mount service principal"} 0 +# Number of resources failed as part of MITRE control Mount service principal +kubescape_resources_failed_count{framework="MITRE",control="Mount service principal"} 7 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Mount service principal" -kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 0 -# Number of resources found as part of failed control "Network mapping" -kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 6 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of MITRE control Network mapping +kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 7 +# Number of resources excluded as part of MITRE control Network mapping +kubescape_resources_excluded_count{framework="MITRE",control="Network mapping"} 0 +# Number of resources failed as part of MITRE control Network mapping +kubescape_resources_failed_count{framework="MITRE",control="Network mapping"} 7 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-public",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="default",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-node-lease",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-public",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-system",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="nginx-ingress",groupVersionKind="v1"} 1 -# Number of resources found as part of excluded control "Network mapping" -kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 0 -# Number of resources found as part of failed control "Privileged container" -kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Network mapping" +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of MITRE control Privileged container +kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 22 +# Number of resources excluded as part of MITRE control Privileged container +kubescape_resources_excluded_count{framework="MITRE",control="Privileged container"} 0 +# Number of resources failed as part of MITRE control Privileged container +kubescape_resources_failed_count{framework="MITRE",control="Privileged container"} 1 # Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Privileged container" -kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 0 -# Number of resources found as part of failed control "SSH server running inside container" -kubescape_resources_found_count{framework="MITRE",control="SSH server running inside container"} 0 -# Number of resources found as part of excluded control "SSH server running inside container" -kubescape_resources_found_count{framework="MITRE",control="SSH server running inside container"} 0 -# Number of resources found as part of failed control "Writable hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 6 +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Privileged container" +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of MITRE control Writable hostPath mount +kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 22 +# Number of resources excluded as part of MITRE control Writable hostPath mount +kubescape_resources_excluded_count{framework="MITRE",control="Writable hostPath mount"} 0 +# Number of resources failed as part of MITRE control Writable hostPath mount +kubescape_resources_failed_count{framework="MITRE",control="Writable hostPath mount"} 7 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "Writable hostPath mount" -kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 0 -# Number of resources found as part of failed control "Malicious admission controller (mutating)" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of MITRE control Malicious admission controller (mutating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 +# Number of resources excluded as part of MITRE control Malicious admission controller (mutating) +kubescape_resources_excluded_count{framework="MITRE",control="Malicious admission controller (mutating)"} 0 +# Number of resources failed as part of MITRE control Malicious admission controller (mutating) +kubescape_resources_failed_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 # Failed object from "MITRE" control "Malicious admission controller (mutating)" -kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (mutating)",name="ca-mutate-cfg",groupVersionKind="admissionregistration.k8s.io/v1"} 1 -# Number of resources found as part of excluded control "Malicious admission controller (mutating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 0 -# Number of resources found as part of failed control "Malicious admission controller (validating)" +kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (mutating)",name="ca-mutate-cfg",groupVersionKind="admissionregistration.k8s.io/v1/MutatingWebhookConfiguration"} 1 +# Number of resources found as part of MITRE control Malicious admission controller (validating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (validating)"} 1 +# Number of resources excluded as part of MITRE control Malicious admission controller (validating) +kubescape_resources_excluded_count{framework="MITRE",control="Malicious admission controller (validating)"} 0 +# Number of resources failed as part of MITRE control Malicious admission controller (validating) +kubescape_resources_failed_count{framework="MITRE",control="Malicious admission controller (validating)"} 1 # Failed object from "MITRE" control "Malicious admission controller (validating)" -kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (validating)",name="ca-validate-cfg",groupVersionKind="admissionregistration.k8s.io/v1"} 1 -# Number of resources found as part of excluded control "Malicious admission controller (validating)" -kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (validating)"} 0 -# Number of resources found as part of failed control "Delete Kubernetes events" -kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 6 +kubescape_object_failed_count{framework="MITRE",control="Malicious admission controller (validating)",name="ca-validate-cfg",groupVersionKind="admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration"} 1 +# Number of resources found as part of MITRE control Delete Kubernetes events +kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 74 +# Number of resources excluded as part of MITRE control Delete Kubernetes events +kubescape_resources_excluded_count{framework="MITRE",control="Delete Kubernetes events"} 0 +# Number of resources failed as part of MITRE control Delete Kubernetes events +kubescape_resources_failed_count{framework="MITRE",control="Delete Kubernetes events"} 6 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="generic-garbage-collector",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="namespace-controller",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Delete Kubernetes events" -kubescape_resources_found_count{framework="MITRE",control="Delete Kubernetes events"} 0 -# Number of resources found as part of failed control "CoreDNS poisoning" -kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 6 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control CoreDNS poisoning +kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 74 +# Number of resources excluded as part of MITRE control CoreDNS poisoning +kubescape_resources_excluded_count{framework="MITRE",control="CoreDNS poisoning"} 0 +# Number of resources failed as part of MITRE control CoreDNS poisoning +kubescape_resources_failed_count{framework="MITRE",control="CoreDNS poisoning"} 6 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="generic-garbage-collector",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "CoreDNS poisoning" -kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 0 -# Number of resources found as part of failed control "Data Destruction" -kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 20 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of MITRE control Data Destruction +kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 74 +# Number of resources excluded as part of MITRE control Data Destruction +kubescape_resources_excluded_count{framework="MITRE",control="Data Destruction"} 0 +# Number of resources failed as part of MITRE control Data Destruction +kubescape_resources_failed_count{framework="MITRE",control="Data Destruction"} 20 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:masters",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cronjob-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="daemon-set-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="generic-garbage-collector",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="namespace-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="node-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="persistent-volume-binder",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pod-garbage-collector",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replicaset-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replication-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="statefulset-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind=""} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="token-cleaner",groupVersionKind=""} 1 -# Number of resources found as part of excluded control "Data Destruction" -kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 0 -# Number of resources found as part of failed control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of excluded control "CVE-2021-25741 - Using symlink for arbitrary host file system access." -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25741 - Using symlink for arbitrary host file system access."} 0 -# Number of resources found as part of failed control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Number of resources found as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1"} 1 -# Number of resources found as part of excluded control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of ArmoBest control Immutable container filesystem +kubescape_resources_found_count{framework="ArmoBest",control="Immutable container filesystem"} 22 +# Number of resources excluded as part of ArmoBest control Immutable container filesystem +kubescape_resources_excluded_count{framework="ArmoBest",control="Immutable container filesystem"} 0 +# Number of resources failed as part of ArmoBest control Immutable container filesystem +kubescape_resources_failed_count{framework="ArmoBest",control="Immutable container filesystem"} 21 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Privileged container +kubescape_resources_found_count{framework="ArmoBest",control="Privileged container"} 22 +# Number of resources excluded as part of ArmoBest control Privileged container +kubescape_resources_excluded_count{framework="ArmoBest",control="Privileged container"} 0 +# Number of resources failed as part of ArmoBest control Privileged container +kubescape_resources_failed_count{framework="ArmoBest",control="Privileged container"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Privileged container" +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Allowed hostPath +kubescape_resources_found_count{framework="ArmoBest",control="Allowed hostPath"} 22 +# Number of resources excluded as part of ArmoBest control Allowed hostPath +kubescape_resources_excluded_count{framework="ArmoBest",control="Allowed hostPath"} 0 +# Number of resources failed as part of ArmoBest control Allowed hostPath +kubescape_resources_failed_count{framework="ArmoBest",control="Allowed hostPath"} 7 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Number of resources found as part of ArmoBest control Automatic mapping of service account +kubescape_resources_found_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 +# Number of resources excluded as part of ArmoBest control Automatic mapping of service account +kubescape_resources_excluded_count{framework="ArmoBest",control="Automatic mapping of service account"} 0 +# Number of resources failed as part of ArmoBest control Automatic mapping of service account +kubescape_resources_failed_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Number of resources found as part of ArmoBest control hostNetwork access +kubescape_resources_found_count{framework="ArmoBest",control="hostNetwork access"} 22 +# Number of resources excluded as part of ArmoBest control hostNetwork access +kubescape_resources_excluded_count{framework="ArmoBest",control="hostNetwork access"} 0 +# Number of resources failed as part of ArmoBest control hostNetwork access +kubescape_resources_failed_count{framework="ArmoBest",control="hostNetwork access"} 6 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "hostNetwork access" +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Resource policies +kubescape_resources_found_count{framework="ArmoBest",control="Resource policies"} 22 +# Number of resources excluded as part of ArmoBest control Resource policies +kubescape_resources_excluded_count{framework="ArmoBest",control="Resource policies"} 0 +# Number of resources failed as part of ArmoBest control Resource policies +kubescape_resources_failed_count{framework="ArmoBest",control="Resource policies"} 9 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Allow privilege escalation +kubescape_resources_found_count{framework="ArmoBest",control="Allow privilege escalation"} 22 +# Number of resources excluded as part of ArmoBest control Allow privilege escalation +kubescape_resources_excluded_count{framework="ArmoBest",control="Allow privilege escalation"} 0 +# Number of resources failed as part of ArmoBest control Allow privilege escalation +kubescape_resources_failed_count{framework="ArmoBest",control="Allow privilege escalation"} 21 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_found_count{framework="ArmoBest",control="Applications credentials in configuration files"} 44 +# Number of resources excluded as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_excluded_count{framework="ArmoBest",control="Applications credentials in configuration files"} 0 +# Number of resources failed as part of ArmoBest control Applications credentials in configuration files +kubescape_resources_failed_count{framework="ArmoBest",control="Applications credentials in configuration files"} 8 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Applications credentials in configuration files" +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Cluster-admin binding +kubescape_resources_found_count{framework="ArmoBest",control="Cluster-admin binding"} 74 +# Number of resources excluded as part of ArmoBest control Cluster-admin binding +kubescape_resources_excluded_count{framework="ArmoBest",control="Cluster-admin binding"} 0 +# Number of resources failed as part of ArmoBest control Cluster-admin binding +kubescape_resources_failed_count{framework="ArmoBest",control="Cluster-admin binding"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of ArmoBest control Exec into container +kubescape_resources_found_count{framework="ArmoBest",control="Exec into container"} 74 +# Number of resources excluded as part of ArmoBest control Exec into container +kubescape_resources_excluded_count{framework="ArmoBest",control="Exec into container"} 0 +# Number of resources failed as part of ArmoBest control Exec into container +kubescape_resources_failed_count{framework="ArmoBest",control="Exec into container"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Exec into container" +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Number of resources found as part of ArmoBest control Insecure capabilities +kubescape_resources_found_count{framework="ArmoBest",control="Insecure capabilities"} 22 +# Number of resources excluded as part of ArmoBest control Insecure capabilities +kubescape_resources_excluded_count{framework="ArmoBest",control="Insecure capabilities"} 0 +# Number of resources failed as part of ArmoBest control Insecure capabilities +kubescape_resources_failed_count{framework="ArmoBest",control="Insecure capabilities"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Insecure capabilities" +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Number of resources found as part of ArmoBest control Linux hardening +kubescape_resources_found_count{framework="ArmoBest",control="Linux hardening"} 22 +# Number of resources excluded as part of ArmoBest control Linux hardening +kubescape_resources_excluded_count{framework="ArmoBest",control="Linux hardening"} 0 +# Number of resources failed as part of ArmoBest control Linux hardening +kubescape_resources_failed_count{framework="ArmoBest",control="Linux hardening"} 17 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_found_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 +# Number of resources excluded as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_excluded_count{framework="ArmoBest",control="Ingress and Egress blocked"} 0 +# Number of resources failed as part of ArmoBest control Ingress and Egress blocked +kubescape_resources_failed_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Number of resources found as part of ArmoBest control Network policies +kubescape_resources_found_count{framework="ArmoBest",control="Network policies"} 7 +# Number of resources excluded as part of ArmoBest control Network policies +kubescape_resources_excluded_count{framework="ArmoBest",control="Network policies"} 0 +# Number of resources failed as part of ArmoBest control Network policies +kubescape_resources_failed_count{framework="ArmoBest",control="Network policies"} 7 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Number of resources found as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Number of resources found as part of ArmoBest control No impersonation +kubescape_resources_found_count{framework="ArmoBest",control="No impersonation"} 74 +# Number of resources excluded as part of ArmoBest control No impersonation +kubescape_resources_excluded_count{framework="ArmoBest",control="No impersonation"} 0 +# Number of resources failed as part of ArmoBest control No impersonation +kubescape_resources_failed_count{framework="ArmoBest",control="No impersonation"} 4 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "No impersonation" +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Number of resources found as part of ArmoBest control Portforwarding privileges +kubescape_resources_found_count{framework="ArmoBest",control="Portforwarding privileges"} 74 +# Number of resources excluded as part of ArmoBest control Portforwarding privileges +kubescape_resources_excluded_count{framework="ArmoBest",control="Portforwarding privileges"} 0 +# Number of resources failed as part of ArmoBest control Portforwarding privileges +kubescape_resources_failed_count{framework="ArmoBest",control="Portforwarding privileges"} 8 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Failed object from "ArmoBest" control "Portforwarding privileges" +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +# Number of resources found as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_found_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 22 +# Number of resources excluded as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_excluded_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 0 +# Number of resources failed as part of ArmoBest control Image pull policy on latest image tag +kubescape_resources_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 2 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Image pull policy on latest image tag" +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Number of resources found as part of ArmoBest control Namespace without service accounts +kubescape_resources_found_count{framework="ArmoBest",control="Namespace without service accounts"} 54 +# Number of resources excluded as part of ArmoBest control Namespace without service accounts +kubescape_resources_excluded_count{framework="ArmoBest",control="Namespace without service accounts"} 0 +# Number of resources failed as part of ArmoBest control Namespace without service accounts +kubescape_resources_failed_count{framework="ArmoBest",control="Namespace without service accounts"} 3 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="default",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Number of resources found as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_found_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 +# Number of resources excluded as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_excluded_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 0 +# Number of resources failed as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability +kubescape_resources_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 +# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 diff --git a/resultshandling/printer/junit.go b/resultshandling/printer/junit.go index ac03753d..9c480b50 100644 --- a/resultshandling/printer/junit.go +++ b/resultshandling/printer/junit.go @@ -103,7 +103,7 @@ func convertPostureReportToJunitResult(postureResult *reporthandling.PostureRepo testCase := JUnitTestCase{} testCase.Name = controlReports.Name testCase.Classname = "Kubescape" - testCase.Time = "0" + testCase.Time = postureResult.ReportGenerationTime.String() if 0 < len(controlReports.RuleReports[0].RuleResponses) { testCase.Resources = controlReports.GetNumberOfResources() diff --git a/resultshandling/printer/prometheusprinter.go b/resultshandling/printer/prometheusprinter.go index 8c6547f9..a211f55e 100644 --- a/resultshandling/printer/prometheusprinter.go +++ b/resultshandling/printer/prometheusprinter.go @@ -3,7 +3,6 @@ package printer import ( "fmt" "os" - "strings" "github.com/armosec/k8s-interface/workloadinterface" "github.com/armosec/kubescape/cautils" @@ -38,14 +37,30 @@ func (printer *PrometheusPrinter) printResources(allResources map[string]workloa } func (printer *PrometheusPrinter) printDetails(allResources map[string]workloadinterface.IMetadata, resourcesIDs []string, frameworkName, controlName, status string) { - fmt.Fprintf(printer.writer, "# Number of resources found as part of %s control \"%s\"\nkubescape_resources_found_count{framework=\"%s\",control=\"%s\"} %d\n", status, controlName, frameworkName, controlName, len(resourcesIDs)) + objs := make(map[string]map[string]map[string]int) for _, resourceID := range resourcesIDs { resource := allResources[resourceID] - fmt.Fprintf(printer.writer, "# %s object from \"%s\" control \"%s\"\n", strings.Title(status), frameworkName, controlName) - if resource.GetNamespace() != "" { - fmt.Fprintf(printer.writer, "kubescape_object_%s_count{framework=\"%s\",control=\"%s\",namespace=\"%s\",name=\"%s\",groupVersionKind=\"%s\"} %d\n", status, frameworkName, controlName, resource.GetNamespace(), resource.GetName(), fmt.Sprintf("%s/%s", resource.GetApiVersion(), resource.GetKind()), 1) - } else { - fmt.Fprintf(printer.writer, "kubescape_object_%s_count{framework=\"%s\",control=\"%s\",name=\"%s\",groupVersionKind=\"%s\"} %d\n", status, frameworkName, controlName, resource.GetName(), fmt.Sprintf("%s/%s", resource.GetApiVersion(), resource.GetKind()), 1) + + gvk := fmt.Sprintf("%s/%s", resource.GetApiVersion(), resource.GetKind()) + + if objs[gvk] == nil { + objs[gvk] = make(map[string]map[string]int) + } + if objs[gvk][resource.GetNamespace()] == nil { + objs[gvk][resource.GetNamespace()] = make(map[string]int) + } + objs[gvk][resource.GetNamespace()][resource.GetName()]++ + } + for gvk, namespaces := range objs { + for namespace, names := range namespaces { + for name, value := range names { + fmt.Fprintf(printer.writer, "# Failed object from \"%s\" control \"%s\"\n", frameworkName, controlName) + if namespace != "" { + fmt.Fprintf(printer.writer, "kubescape_object_failed_count{framework=\"%s\",control=\"%s\",namespace=\"%s\",name=\"%s\",groupVersionKind=\"%s\"} %d\n", frameworkName, controlName, namespace, name, gvk, value) + } else { + fmt.Fprintf(printer.writer, "kubescape_object_failed_count{framework=\"%s\",control=\"%s\",name=\"%s\",groupVersionKind=\"%s\"} %d\n", frameworkName, controlName, name, gvk, value) + } + } } } } @@ -56,6 +71,13 @@ func (printer *PrometheusPrinter) printReports(allResources map[string]workloadi if controlReport.GetNumberOfResources() == 0 { continue // the control did not test any resources } + if controlReport.Passed() { + continue // control passed, do not print results + } + fmt.Fprintf(printer.writer, "# Number of resources found as part of %s control %s\nkubescape_resources_found_count{framework=\"%s\",control=\"%s\"} %d\n", frameworkReport.Name, controlReport.Name, frameworkReport.Name, controlReport.Name, controlReport.GetNumberOfResources()) + fmt.Fprintf(printer.writer, "# Number of resources excluded as part of %s control %s\nkubescape_resources_excluded_count{framework=\"%s\",control=\"%s\"} %d\n", frameworkReport.Name, controlReport.Name, frameworkReport.Name, controlReport.Name, controlReport.GetNumberOfWarningResources()) + fmt.Fprintf(printer.writer, "# Number of resources failed as part of %s control %s\nkubescape_resources_failed_count{framework=\"%s\",control=\"%s\"} %d\n", frameworkReport.Name, controlReport.Name, frameworkReport.Name, controlReport.Name, controlReport.GetNumberOfFailedResources()) + printer.printResources(allResources, controlReport.ListResourcesIDs(), frameworkReport.Name, controlReport.Name) } } From 13e805b2134ff79e6d78df0ea784e94f4e65ae00 Mon Sep 17 00:00:00 2001 From: dwertent Date: Sun, 12 Dec 2021 10:50:22 +0200 Subject: [PATCH 2/3] remove passed resources --- examples/output_mocks/prometheus.txt | 3474 +++----------------------- 1 file changed, 387 insertions(+), 3087 deletions(-) diff --git a/examples/output_mocks/prometheus.txt b/examples/output_mocks/prometheus.txt index 95f90c0a..51a594bb 100644 --- a/examples/output_mocks/prometheus.txt +++ b/examples/output_mocks/prometheus.txt @@ -5,9 +5,9 @@ kubescape_resources_excluded_count{framework="NSA",control="Immutable container # Number of resources failed as part of NSA control Immutable container filesystem kubescape_resources_failed_count{framework="NSA",control="Immutable container filesystem"} 21 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" @@ -15,28 +15,16 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 @@ -45,9 +33,19 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "NSA" control "Immutable container filesystem" +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Privileged container kubescape_resources_found_count{framework="NSA",control="Privileged container"} 22 # Number of resources excluded as part of NSA control Privileged container @@ -56,48 +54,6 @@ kubescape_resources_excluded_count{framework="NSA",control="Privileged container kubescape_resources_failed_count{framework="NSA",control="Privileged container"} 1 # Failed object from "NSA" control "Privileged container" kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Allowed hostPath kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 22 # Number of resources excluded as part of NSA control Allowed hostPath @@ -113,41 +69,11 @@ kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespa # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Number of resources found as part of NSA control Automatic mapping of service account kubescape_resources_found_count{framework="NSA",control="Automatic mapping of service account"} 47 # Number of resources excluded as part of NSA control Automatic mapping of service account @@ -155,77 +81,77 @@ kubescape_resources_excluded_count{framework="NSA",control="Automatic mapping of # Number of resources failed as part of NSA control Automatic mapping of service account kubescape_resources_failed_count{framework="NSA",control="Automatic mapping of service account"} 47 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" @@ -237,12 +163,12 @@ kubescape_object_failed_count{framework="NSA",control="Automatic mapping of serv # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 @@ -255,7 +181,9 @@ kubescape_resources_excluded_count{framework="NSA",control="hostNetwork access"} # Number of resources failed as part of NSA control hostNetwork access kubescape_resources_failed_count{framework="NSA",control="hostNetwork access"} 6 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "hostNetwork access" +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" @@ -263,41 +191,7 @@ kubescape_object_failed_count{framework="NSA",control="hostNetwork access",names # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Number of resources found as part of NSA control Resource policies kubescape_resources_found_count{framework="NSA",control="Resource policies"} 22 # Number of resources excluded as part of NSA control Resource policies @@ -305,49 +199,23 @@ kubescape_resources_excluded_count{framework="NSA",control="Resource policies"} # Number of resources failed as part of NSA control Resource policies kubescape_resources_failed_count{framework="NSA",control="Resource policies"} 9 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Resource policies" +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Number of resources found as part of NSA control Allow privilege escalation kubescape_resources_found_count{framework="NSA",control="Allow privilege escalation"} 22 # Number of resources excluded as part of NSA control Allow privilege escalation @@ -355,8 +223,6 @@ kubescape_resources_excluded_count{framework="NSA",control="Allow privilege esca # Number of resources failed as part of NSA control Allow privilege escalation kubescape_resources_failed_count{framework="NSA",control="Allow privilege escalation"} 21 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 @@ -365,11 +231,15 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Allow privilege escalation" +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" @@ -377,17 +247,15 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" @@ -396,8 +264,6 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of NSA control Applications credentials in configuration files kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of NSA control Applications credentials in configuration files @@ -405,10 +271,6 @@ kubescape_resources_excluded_count{framework="NSA",control="Applications credent # Number of resources failed as part of NSA control Applications credentials in configuration files kubescape_resources_failed_count{framework="NSA",control="Applications credentials in configuration files"} 8 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 @@ -421,77 +283,9 @@ kubescape_object_failed_count{framework="NSA",control="Applications credentials # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of NSA control Cluster-admin binding kubescape_resources_found_count{framework="NSA",control="Cluster-admin binding"} 74 # Number of resources excluded as part of NSA control Cluster-admin binding @@ -506,110 +300,6 @@ kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",na kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 # Number of resources found as part of NSA control Exec into container kubescape_resources_found_count{framework="NSA",control="Exec into container"} 74 # Number of resources excluded as part of NSA control Exec into container @@ -617,117 +307,13 @@ kubescape_resources_excluded_count{framework="NSA",control="Exec into container" # Number of resources failed as part of NSA control Exec into container kubescape_resources_failed_count{framework="NSA",control="Exec into container"} 4 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Number of resources found as part of NSA control Insecure capabilities kubescape_resources_found_count{framework="NSA",control="Insecure capabilities"} 22 # Number of resources excluded as part of NSA control Insecure capabilities @@ -736,48 +322,6 @@ kubescape_resources_excluded_count{framework="NSA",control="Insecure capabilitie kubescape_resources_failed_count{framework="NSA",control="Insecure capabilities"} 1 # Failed object from "NSA" control "Insecure capabilities" kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of NSA control Linux hardening kubescape_resources_found_count{framework="NSA",control="Linux hardening"} 22 # Number of resources excluded as part of NSA control Linux hardening @@ -785,29 +329,31 @@ kubescape_resources_excluded_count{framework="NSA",control="Linux hardening"} 0 # Number of resources failed as part of NSA control Linux hardening kubescape_resources_failed_count{framework="NSA",control="Linux hardening"} 17 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Linux hardening" +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" @@ -816,18 +362,6 @@ kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespac kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Number of resources found as part of NSA control Ingress and Egress blocked kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 22 # Number of resources excluded as part of NSA control Ingress and Egress blocked @@ -849,26 +383,26 @@ kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocke # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 @@ -885,10 +419,6 @@ kubescape_resources_excluded_count{framework="NSA",control="Network policies"} 0 # Number of resources failed as part of NSA control Network policies kubescape_resources_failed_count{framework="NSA",control="Network policies"} 7 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 @@ -898,6 +428,10 @@ kubescape_object_failed_count{framework="NSA",control="Network policies",name="k kubescape_object_failed_count{framework="NSA",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 +# Failed object from "NSA" control "Network policies" +kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "NSA" control "Network policies" +kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Number of resources found as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability kubescape_resources_found_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 # Number of resources excluded as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -906,76 +440,6 @@ kubescape_resources_excluded_count{framework="NSA",control="CVE-2021-25742-nginx kubescape_resources_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of MITRE control Access container service account kubescape_resources_found_count{framework="MITRE",control="Access container service account"} 216 # Number of resources excluded as part of MITRE control Access container service account @@ -983,10 +447,20 @@ kubescape_resources_excluded_count{framework="MITRE",control="Access container s # Number of resources failed as part of MITRE control Access container service account kubescape_resources_failed_count{framework="MITRE",control="Access container service account"} 31 # Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 +# Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 +# Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 @@ -997,16 +471,6 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="storage-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-scanner-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 @@ -1015,17 +479,11 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:coredns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="armo-kubescape-service-account-role-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1035,385 +493,21 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/Role"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kubelet-api-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:auth-delegator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kubelet-serving-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-edit",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:legacy-unknown-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:aggregate-to-view",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:nodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:certificatesigningrequests:selfnodeclient",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:certificates.k8s.io:kube-apiserver-client-kubelet-approver",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-problem-detector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:heapster",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-aggregator",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-bootstrapper",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRole"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:kubelet-config-1.22",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kubeadm:nodes-kubeadm-config",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::extension-apiserver-authentication-reader",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system::leader-locking-kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:cloud-provider",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:controller:token-cleaner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="system:controller:bootstrap-signer",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-public",name="kubeadm:bootstrap-signer-clusterinfo",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:job-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:node-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="minikube-rbac",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:disruption-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ephemeral-volume-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:persistent-volume-binder",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:route-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:statefulset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:clusterrole-aggregation-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslicemirroring-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:node-proxier",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:resourcequota-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:certificate-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:generic-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pv-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:basic-user",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpoint-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:cronjob-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:deployment-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replicaset-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:replication-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="cluster-admin",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:kubelet-bootstrap",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:node-autoapprove-certificate-rotation",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:public-info-viewer",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:volume-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pvc-protection-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:service-account-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-dns",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:service-account-issuer-discovery",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:attachdetach-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:expand-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:horizontal-pod-autoscaler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="kubeadm:get-nodes",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:endpointslice-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:root-ca-cert-publisher",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:ttl-after-finished-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:daemon-set-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:namespace-controller",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 -# Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="system:controller:pod-garbage-collector",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of MITRE control Applications credentials in configuration files kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of MITRE control Applications credentials in configuration files @@ -1421,14 +515,6 @@ kubescape_resources_excluded_count{framework="MITRE",control="Applications crede # Number of resources failed as part of MITRE control Applications credentials in configuration files kubescape_resources_failed_count{framework="MITRE",control="Applications credentials in configuration files"} 8 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 @@ -1437,77 +523,13 @@ kubescape_object_failed_count{framework="MITRE",control="Applications credential # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of MITRE control Cluster-admin binding kubescape_resources_found_count{framework="MITRE",control="Cluster-admin binding"} 74 # Number of resources excluded as part of MITRE control Cluster-admin binding @@ -1522,110 +544,6 @@ kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding", kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Number of resources found as part of MITRE control Cluster internal networking kubescape_resources_found_count{framework="MITRE",control="Cluster internal networking"} 7 # Number of resources excluded as part of MITRE control Cluster internal networking @@ -1633,8 +551,6 @@ kubescape_resources_excluded_count{framework="MITRE",control="Cluster internal n # Number of resources failed as part of MITRE control Cluster internal networking kubescape_resources_failed_count{framework="MITRE",control="Cluster internal networking"} 7 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 @@ -1646,6 +562,8 @@ kubescape_object_failed_count{framework="MITRE",control="Cluster internal networ kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-public",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Cluster internal networking" +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Number of resources found as part of MITRE control Exec into container kubescape_resources_found_count{framework="MITRE",control="Exec into container"} 74 # Number of resources excluded as part of MITRE control Exec into container @@ -1653,117 +571,13 @@ kubescape_resources_excluded_count{framework="MITRE",control="Exec into containe # Number of resources failed as part of MITRE control Exec into container kubescape_resources_failed_count{framework="MITRE",control="Exec into container"} 4 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Number of resources found as part of MITRE control hostPath mount kubescape_resources_found_count{framework="MITRE",control="hostPath mount"} 22 # Number of resources excluded as part of MITRE control hostPath mount @@ -1784,36 +598,6 @@ kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespa kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control Kubernetes CronJob kubescape_resources_found_count{framework="MITRE",control="Kubernetes CronJob"} 2 # Number of resources excluded as part of MITRE control Kubernetes CronJob @@ -1821,9 +605,9 @@ kubescape_resources_excluded_count{framework="MITRE",control="Kubernetes CronJob # Number of resources failed as part of MITRE control Kubernetes CronJob kubescape_resources_failed_count{framework="MITRE",control="Kubernetes CronJob"} 2 # Failed object from "MITRE" control "Kubernetes CronJob" -kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Kubernetes CronJob" kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "MITRE" control "Kubernetes CronJob" +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control List Kubernetes secrets kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 74 # Number of resources excluded as part of MITRE control List Kubernetes secrets @@ -1831,18 +615,14 @@ kubescape_resources_excluded_count{framework="MITRE",control="List Kubernetes se # Number of resources failed as part of MITRE control List Kubernetes secrets kubescape_resources_failed_count{framework="MITRE",control="List Kubernetes secrets"} 15 # Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 @@ -1853,99 +633,15 @@ kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "List Kubernetes secrets" +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 # Number of resources found as part of MITRE control Mount service principal kubescape_resources_found_count{framework="MITRE",control="Mount service principal"} 22 # Number of resources excluded as part of MITRE control Mount service principal @@ -1953,49 +649,19 @@ kubescape_resources_excluded_count{framework="MITRE",control="Mount service prin # Number of resources failed as part of MITRE control Mount service principal kubescape_resources_failed_count{framework="MITRE",control="Mount service principal"} 7 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Mount service principal" +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of MITRE control Network mapping kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 7 # Number of resources excluded as part of MITRE control Network mapping @@ -2003,12 +669,6 @@ kubescape_resources_excluded_count{framework="MITRE",control="Network mapping"} # Number of resources failed as part of MITRE control Network mapping kubescape_resources_failed_count{framework="MITRE",control="Network mapping"} 7 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-public",groupVersionKind="v1/Namespace"} 1 -# Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="armo-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 @@ -2016,6 +676,12 @@ kubescape_object_failed_count{framework="MITRE",control="Network mapping",name=" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Network mapping" +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Network mapping" +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kube-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "MITRE" control "Network mapping" +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Number of resources found as part of MITRE control Privileged container kubescape_resources_found_count{framework="MITRE",control="Privileged container"} 22 # Number of resources excluded as part of MITRE control Privileged container @@ -2024,48 +690,6 @@ kubescape_resources_excluded_count{framework="MITRE",control="Privileged contain kubescape_resources_failed_count{framework="MITRE",control="Privileged container"} 1 # Failed object from "MITRE" control "Privileged container" kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control Writable hostPath mount kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 22 # Number of resources excluded as part of MITRE control Writable hostPath mount @@ -2075,47 +699,17 @@ kubescape_resources_failed_count{framework="MITRE",control="Writable hostPath mo # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Writable hostPath mount" +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Number of resources found as part of MITRE control Malicious admission controller (mutating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 # Number of resources excluded as part of MITRE control Malicious admission controller (mutating) @@ -2139,117 +733,17 @@ kubescape_resources_excluded_count{framework="MITRE",control="Delete Kubernetes # Number of resources failed as part of MITRE control Delete Kubernetes events kubescape_resources_failed_count{framework="MITRE",control="Delete Kubernetes events"} 6 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Number of resources found as part of MITRE control CoreDNS poisoning kubescape_resources_found_count{framework="MITRE",control="CoreDNS poisoning"} 74 # Number of resources excluded as part of MITRE control CoreDNS poisoning @@ -2259,115 +753,15 @@ kubescape_resources_failed_count{framework="MITRE",control="CoreDNS poisoning"} # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Number of resources found as part of MITRE control Data Destruction kubescape_resources_found_count{framework="MITRE",control="Data Destruction"} 74 # Number of resources excluded as part of MITRE control Data Destruction @@ -2375,121 +769,45 @@ kubescape_resources_excluded_count{framework="MITRE",control="Data Destruction"} # Number of resources failed as part of MITRE control Data Destruction kubescape_resources_failed_count{framework="MITRE",control="Data Destruction"} 20 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 2 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 # Number of resources found as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability kubescape_resources_found_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 # Number of resources excluded as part of MITRE control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -2498,76 +816,6 @@ kubescape_resources_excluded_count{framework="MITRE",control="CVE-2021-25742-ngi kubescape_resources_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of ArmoBest control Immutable container filesystem kubescape_resources_found_count{framework="ArmoBest",control="Immutable container filesystem"} 22 # Number of resources excluded as part of ArmoBest control Immutable container filesystem @@ -2575,11 +823,7 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Immutable conta # Number of resources failed as part of ArmoBest control Immutable container filesystem kubescape_resources_failed_count{framework="ArmoBest",control="Immutable container filesystem"} 21 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" @@ -2589,20 +833,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Immutable container # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 @@ -2611,13 +841,29 @@ kubescape_object_failed_count{framework="ArmoBest",control="Immutable container # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Immutable container filesystem" +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Privileged container kubescape_resources_found_count{framework="ArmoBest",control="Privileged container"} 22 # Number of resources excluded as part of ArmoBest control Privileged container @@ -2626,48 +872,6 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Privileged cont kubescape_resources_failed_count{framework="ArmoBest",control="Privileged container"} 1 # Failed object from "ArmoBest" control "Privileged container" kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Allowed hostPath kubescape_resources_found_count{framework="ArmoBest",control="Allowed hostPath"} 22 # Number of resources excluded as part of ArmoBest control Allowed hostPath @@ -2675,6 +879,8 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Allowed hostPat # Number of resources failed as part of ArmoBest control Allowed hostPath kubescape_resources_failed_count{framework="ArmoBest",control="Allowed hostPath"} 7 # Failed object from "ArmoBest" control "Allowed hostPath" +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 @@ -2686,38 +892,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",na kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Number of resources found as part of ArmoBest control Automatic mapping of service account kubescape_resources_found_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 # Number of resources excluded as part of ArmoBest control Automatic mapping of service account @@ -2725,99 +899,99 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Automatic mappi # Number of resources failed as part of ArmoBest control Automatic mapping of service account kubescape_resources_failed_count{framework="ArmoBest",control="Automatic mapping of service account"} 47 # Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 # Number of resources found as part of ArmoBest control hostNetwork access kubescape_resources_found_count{framework="ArmoBest",control="hostNetwork access"} 22 # Number of resources excluded as part of ArmoBest control hostNetwork access @@ -2836,38 +1010,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access", kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "hostNetwork access" kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Resource policies kubescape_resources_found_count{framework="ArmoBest",control="Resource policies"} 22 # Number of resources excluded as part of ArmoBest control Resource policies @@ -2875,9 +1017,11 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Resource polici # Number of resources failed as part of ArmoBest control Resource policies kubescape_resources_failed_count{framework="ArmoBest",control="Resource policies"} 9 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Resource policies" @@ -2885,39 +1029,11 @@ kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",n # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Allow privilege escalation kubescape_resources_found_count{framework="ArmoBest",control="Allow privilege escalation"} 22 # Number of resources excluded as part of ArmoBest control Allow privilege escalation @@ -2925,40 +1041,6 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Allow privilege # Number of resources failed as part of ArmoBest control Allow privilege escalation kubescape_resources_failed_count{framework="ArmoBest",control="Allow privilege escalation"} 21 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 @@ -2967,7 +1049,39 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege esca # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +# Failed object from "ArmoBest" control "Allow privilege escalation" +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Applications credentials in configuration files kubescape_resources_found_count{framework="ArmoBest",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of ArmoBest control Applications credentials in configuration files @@ -2990,78 +1104,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Applications credent kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Cluster-admin binding kubescape_resources_found_count{framework="ArmoBest",control="Cluster-admin binding"} 74 # Number of resources excluded as part of ArmoBest control Cluster-admin binding @@ -3069,117 +1111,13 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Cluster-admin b # Number of resources failed as part of ArmoBest control Cluster-admin binding kubescape_resources_failed_count{framework="ArmoBest",control="Cluster-admin binding"} 4 # Failed object from "ArmoBest" control "Cluster-admin binding" +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 +# Failed object from "ArmoBest" control "Cluster-admin binding" kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="default",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Number of resources found as part of ArmoBest control Exec into container kubescape_resources_found_count{framework="ArmoBest",control="Exec into container"} 74 # Number of resources excluded as part of ArmoBest control Exec into container @@ -3194,110 +1132,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Exec into container" kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Exec into container" kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 # Number of resources found as part of ArmoBest control Insecure capabilities kubescape_resources_found_count{framework="ArmoBest",control="Insecure capabilities"} 22 # Number of resources excluded as part of ArmoBest control Insecure capabilities @@ -3306,48 +1140,6 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Insecure capabi kubescape_resources_failed_count{framework="ArmoBest",control="Insecure capabilities"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Linux hardening kubescape_resources_found_count{framework="ArmoBest",control="Linux hardening"} 22 # Number of resources excluded as part of ArmoBest control Linux hardening @@ -3357,47 +1149,37 @@ kubescape_resources_failed_count{framework="ArmoBest",control="Linux hardening"} # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Ingress and Egress blocked kubescape_resources_found_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 # Number of resources excluded as part of ArmoBest control Ingress and Egress blocked @@ -3405,10 +1187,42 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Ingress and Egr # Number of resources failed as part of ArmoBest control Ingress and Egress blocked kubescape_resources_failed_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 # Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 +# Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 @@ -3416,38 +1230,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress b kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Number of resources found as part of ArmoBest control Network policies kubescape_resources_found_count{framework="ArmoBest",control="Network policies"} 7 # Number of resources excluded as part of ArmoBest control Network policies @@ -3455,6 +1237,10 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Network policie # Number of resources failed as part of ArmoBest control Network policies kubescape_resources_failed_count{framework="ArmoBest",control="Network policies"} 7 # Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Network policies" kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 @@ -3464,10 +1250,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Network policies",na kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kube-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Network policies" -kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Network policies" -kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Number of resources found as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability kubescape_resources_found_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 # Number of resources excluded as part of ArmoBest control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -3476,76 +1258,6 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="CVE-2021-25742- kubescape_resources_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of ArmoBest control No impersonation kubescape_resources_found_count{framework="ArmoBest",control="No impersonation"} 74 # Number of resources excluded as part of ArmoBest control No impersonation @@ -3560,110 +1272,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",na kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "No impersonation" kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Number of resources found as part of ArmoBest control Portforwarding privileges kubescape_resources_found_count{framework="ArmoBest",control="Portforwarding privileges"} 74 # Number of resources excluded as part of ArmoBest control Portforwarding privileges @@ -3686,102 +1294,6 @@ kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privi kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="attachdetach-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="bootstrap-signer",groupVersionKind="/ServiceAccount"} 4 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="certificate-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="token-cleaner",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cronjob-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="expand-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="statefulset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="storage-provisioner",groupVersionKind="/ServiceAccount"} 2 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="node-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="coredns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="disruption-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="service-account-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="replicaset-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-proxy",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="route-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-dns",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="kube-controller-manager",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="cloud-provider",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="endpoint-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="resourcequota-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kube-system",name="job-controller",groupVersionKind="/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-controller-manager",groupVersionKind="rbac.authorization.k8s.io/User"} 3 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-scheduler",groupVersionKind="rbac.authorization.k8s.io/User"} 4 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:kube-proxy",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:serviceaccounts",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:nodes",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:authenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 3 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:monitoring",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 -# Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:unauthenticated",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Number of resources found as part of ArmoBest control Image pull policy on latest image tag kubescape_resources_found_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 22 # Number of resources excluded as part of ArmoBest control Image pull policy on latest image tag @@ -3789,49 +1301,9 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Image pull poli # Number of resources failed as part of ArmoBest control Image pull policy on latest image tag kubescape_resources_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 2 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Namespace without service accounts kubescape_resources_found_count{framework="ArmoBest",control="Namespace without service accounts"} 54 # Number of resources excluded as part of ArmoBest control Namespace without service accounts @@ -3839,113 +1311,11 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Namespace witho # Number of resources failed as part of ArmoBest control Namespace without service accounts kubescape_resources_failed_count{framework="ArmoBest",control="Namespace without service accounts"} 3 # Failed object from "ArmoBest" control "Namespace without service accounts" +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-public",groupVersionKind="v1/Namespace"} 1 +# Failed object from "ArmoBest" control "Namespace without service accounts" kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="default",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-public",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="armo-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="default",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-node-lease",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-public",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpoint-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="bootstrap-signer",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="clusterrole-aggregation-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ephemeral-volume-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="expand-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="namespace-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="token-cleaner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="daemon-set-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replication-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="statefulset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pod-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pv-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="certificate-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="coredns",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="deployment-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslice-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="generic-garbage-collector",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="horizontal-pod-autoscaler",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="pvc-protection-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="replicaset-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="job-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="node-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="persistent-volume-binder",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="attachdetach-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="endpointslicemirroring-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="ttl-after-finished-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="cronjob-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="disruption-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="resourcequota-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="service-account-controller",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kube-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 -# Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Number of resources found as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability kubescape_resources_found_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 # Number of resources excluded as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -3954,73 +1324,3 @@ kubescape_resources_excluded_count{framework="cve-scanning",control="CVE-2021-25 kubescape_resources_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-public",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="extension-apiserver-authentication",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubeadm-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-posture-score-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 -# Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-nginx-ingress-deployment-nginx-ingress",groupVersionKind="v1/ConfigMap"} 1 From ced0b741b90da209f6085ef3e18a6a715ceae724 Mon Sep 17 00:00:00 2001 From: dwertent Date: Sun, 12 Dec 2021 11:36:35 +0200 Subject: [PATCH 3/3] Do not ask user about host sensor --- clihandler/initcli.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/clihandler/initcli.go b/clihandler/initcli.go index 78d5ae0b..f574286f 100644 --- a/clihandler/initcli.go +++ b/clihandler/initcli.go @@ -20,6 +20,7 @@ import ( "github.com/armosec/opa-utils/reporthandling" "github.com/armosec/rbac-utils/rbacscanner" "github.com/golang/glog" + "github.com/mattn/go-isatty" ) type componentInterfaces struct { @@ -205,6 +206,11 @@ func Submit(submitInterfaces cliinterfaces.SubmitInterfaces) error { } func askUserForHostSensor() bool { + return false + + if !isatty.IsTerminal(os.Stdin.Fd()) { + return false + } if ssss, err := os.Stdin.Stat(); err == nil { // fmt.Printf("Found stdin type: %s\n", ssss.Mode().Type()) if ssss.Mode().Type()&(fs.ModeDevice|fs.ModeCharDevice) > 0 { //has TTY