diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 8c6721af..d5af1dd1 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -96,10 +96,6 @@ jobs: env: RELEASE: v2.0.${{ github.run_number }} CLIENT: release - ArmoBEServer: api.armo.cloud - ArmoAuthServer: auth.armo.cloud - ArmoERServer: report.armo.cloud - ArmoWebsite: portal.armo.cloud CGO_ENABLED: 1 run: python3 --version && python3 build.py @@ -134,7 +130,7 @@ jobs: name: Build docker container, tag and upload to registry needs: build runs-on: ubuntu-latest - if: ${{ github.repository == 'armosec/kubescape' }} # TODO + if: ${{ github.repository == 'kubescape/kubescape' }} # TODO permissions: id-token: write packages: write diff --git a/.github/workflows/build_dev.yaml b/.github/workflows/build_dev.yaml index 64888aa0..ad03b6d8 100644 --- a/.github/workflows/build_dev.yaml +++ b/.github/workflows/build_dev.yaml @@ -88,10 +88,6 @@ jobs: env: RELEASE: v2.0.${{ github.run_number }} CLIENT: release-dev - ArmoBEServer: api.armo.cloud - ArmoAuthServer: auth.armo.cloud - ArmoERServer: report.armo.cloud - ArmoWebsite: portal.armo.cloud CGO_ENABLED: 1 run: python3 --version && python3 build.py @@ -110,7 +106,7 @@ jobs: build-docker: name: Build docker container, tag and upload to registry needs: build - if: ${{ github.repository == 'armosec/kubescape' }} # TODO + if: ${{ github.repository == 'kubescape/kubescape' }} # TODO runs-on: ubuntu-latest permissions: id-token: write diff --git a/.github/workflows/pr_checks.yaml b/.github/workflows/pr_checks.yaml index b9e5aa5d..ca3c7b9d 100644 --- a/.github/workflows/pr_checks.yaml +++ b/.github/workflows/pr_checks.yaml @@ -81,10 +81,6 @@ jobs: env: RELEASE: v2.0.${{ github.run_number }} CLIENT: test - ArmoBEServer: api.armo.cloud - ArmoAuthServer: auth.armo.cloud - ArmoERServer: report.armo.cloud - ArmoWebsite: portal.armo.cloud CGO_ENABLED: 1 run: python3 --version && python3 build.py diff --git a/README.md b/README.md index aa355e3a..c4fc63cf 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ logo -[![build](https://github.com/armosec/kubescape/actions/workflows/build.yaml/badge.svg)](https://github.com/armosec/kubescape/actions/workflows/build.yaml) -[![Go Report Card](https://goreportcard.com/badge/github.com/armosec/kubescape)](https://goreportcard.com/report/github.com/armosec/kubescape) +[![build](https://github.com/kubescape/kubescape/actions/workflows/build.yaml/badge.svg)](https://github.com/kubescape/kubescape/actions/workflows/build.yaml) +[![Go Report Card](https://goreportcard.com/badge/github.com/kubescape/kubescape)](https://goreportcard.com/report/github.com/kubescape/kubescape) @@ -29,7 +29,7 @@ Kubescape integrates natively with other DevOps tools, including Jenkins, Circle # TL;DR ## Install: ```sh -curl -s https://raw.githubusercontent.com/armosec/kubescape/master/install.sh | /bin/bash +curl -s https://raw.githubusercontent.com/kubescape/kubescape/master/install.sh | /bin/bash ``` [Install on windows](#install-on-windows) @@ -53,7 +53,7 @@ kubescape scan --submit --enable-host-scan --verbose
-### Click [πŸ‘](https://github.com/armosec/kubescape/stargazers) if you want us to continue to develop and improve Kubescape πŸ˜€ +### Click [πŸ‘](https://github.com/kubescape/kubescape/stargazers) if you want us to continue to develop and improve Kubescape πŸ˜€
@@ -96,7 +96,7 @@ Want to contribute? Want to discuss something? Have an issue? **Requires powershell v5.0+** ``` powershell -iwr -useb https://raw.githubusercontent.com/armosec/kubescape/master/install.ps1 | iex +iwr -useb https://raw.githubusercontent.com/kubescape/kubescape/master/install.ps1 | iex ``` Note: if you get an error you might need to change the execution policy (i.e. enable Powershell) with @@ -200,7 +200,7 @@ kubescape scan *.yaml --submit #### Scan kubernetes manifest files from a git repository [and submit the results](https://hub.armosec.io/docs/repository-scanning?utm_source=github&utm_medium=repository) ``` -kubescape scan https://github.com/armosec/kubescape --submit +kubescape scan https://github.com/kubescape/kubescape --submit ``` #### Display all scanned resources (including the resources who passed) @@ -411,7 +411,7 @@ The results by default printed in a pretty "console friendly" manner, but they c Kubescape is an open source project, we welcome your feedback and ideas for improvement. We’re also aiming to collaborate with the Kubernetes community to help make the tests themselves more robust and complete as Kubernetes develops. ## Thanks to all the contributors ❀️ - - + + diff --git a/build.py b/build.py index 786edc1c..a1ad193b 100644 --- a/build.py +++ b/build.py @@ -4,7 +4,7 @@ import hashlib import platform import subprocess -BASE_GETTER_CONST = "github.com/armosec/kubescape/v2/core/cautils/getter" +BASE_GETTER_CONST = "github.com/kubescape/kubescape/v2/core/cautils/getter" def check_status(status, msg): if status != 0: @@ -35,10 +35,10 @@ def main(): # Set some variables package_name = get_package_name() - build_url = "github.com/armosec/kubescape/v2/core/cautils.BuildNumber" + build_url = "github.com/kubescape/kubescape/v2/core/cautils.BuildNumber" release_version = os.getenv("RELEASE") - client_var = "github.com/armosec/kubescape/v2/core/cautils.Client" + client_var = "github.com/kubescape/kubescape/v2/core/cautils.Client" client_name = os.getenv("CLIENT") # Create build directory diff --git a/build/README.md b/build/README.md index 581416f2..89cef4d2 100644 --- a/build/README.md +++ b/build/README.md @@ -4,7 +4,7 @@ 1. Clone Project ``` -git clone https://github.com/armosec/kubescape.git kubescape && cd "$_" +git clone https://github.com/kubescape/kubescape.git kubescape && cd "$_" ``` 2. Build diff --git a/cmd/config/config.go b/cmd/config/config.go index 9b48aee5..9259bc64 100644 --- a/cmd/config/config.go +++ b/cmd/config/config.go @@ -1,7 +1,7 @@ package config import ( - "github.com/armosec/kubescape/v2/core/meta" + "github.com/kubescape/kubescape/v2/core/meta" "github.com/spf13/cobra" ) diff --git a/cmd/config/delete.go b/cmd/config/delete.go index e3425d74..eb71db3f 100644 --- a/cmd/config/delete.go +++ b/cmd/config/delete.go @@ -1,9 +1,9 @@ package config import ( - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/config/set.go b/cmd/config/set.go index a460b003..4bcca3e6 100644 --- a/cmd/config/set.go +++ b/cmd/config/set.go @@ -4,9 +4,9 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/core/meta" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/meta" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/config/view.go b/cmd/config/view.go index 98dadf30..cb46bf85 100644 --- a/cmd/config/view.go +++ b/cmd/config/view.go @@ -3,9 +3,9 @@ package config import ( "os" - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/delete/delete.go b/cmd/delete/delete.go index 459bed1c..1967889c 100644 --- a/cmd/delete/delete.go +++ b/cmd/delete/delete.go @@ -1,8 +1,8 @@ package delete import ( - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/delete/exceptions.go b/cmd/delete/exceptions.go index 2d193517..4d1787b3 100644 --- a/cmd/delete/exceptions.go +++ b/cmd/delete/exceptions.go @@ -4,9 +4,9 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/download/download.go b/cmd/download/download.go index 1d2e6910..89106eed 100644 --- a/cmd/download/download.go +++ b/cmd/download/download.go @@ -5,11 +5,11 @@ import ( "path/filepath" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/core" - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/core" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/list/list.go b/cmd/list/list.go index 0ac3141a..f02235da 100644 --- a/cmd/list/list.go +++ b/cmd/list/list.go @@ -4,11 +4,11 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/core" - "github.com/armosec/kubescape/v2/core/meta" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/core" + "github.com/kubescape/kubescape/v2/core/meta" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/root.go b/cmd/root.go index 5e06fd0c..a94c5f5e 100644 --- a/cmd/root.go +++ b/cmd/root.go @@ -4,20 +4,20 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/cmd/completion" - "github.com/armosec/kubescape/v2/cmd/config" - "github.com/armosec/kubescape/v2/cmd/delete" - "github.com/armosec/kubescape/v2/cmd/download" - "github.com/armosec/kubescape/v2/cmd/list" - "github.com/armosec/kubescape/v2/cmd/scan" - "github.com/armosec/kubescape/v2/cmd/submit" - "github.com/armosec/kubescape/v2/cmd/version" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/core" - "github.com/armosec/kubescape/v2/core/meta" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/cmd/completion" + "github.com/kubescape/kubescape/v2/cmd/config" + "github.com/kubescape/kubescape/v2/cmd/delete" + "github.com/kubescape/kubescape/v2/cmd/download" + "github.com/kubescape/kubescape/v2/cmd/list" + "github.com/kubescape/kubescape/v2/cmd/scan" + "github.com/kubescape/kubescape/v2/cmd/submit" + "github.com/kubescape/kubescape/v2/cmd/version" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/core" + "github.com/kubescape/kubescape/v2/core/meta" "github.com/spf13/cobra" ) diff --git a/cmd/rootutils.go b/cmd/rootutils.go index 95aa6aac..cf6e533f 100644 --- a/cmd/rootutils.go +++ b/cmd/rootutils.go @@ -5,9 +5,9 @@ import ( "os" "strings" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "github.com/mattn/go-isatty" ) diff --git a/cmd/scan/control.go b/cmd/scan/control.go index f113e539..8de9d66c 100644 --- a/cmd/scan/control.go +++ b/cmd/scan/control.go @@ -8,10 +8,10 @@ import ( apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/meta" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/meta" "github.com/enescakir/emoji" "github.com/spf13/cobra" diff --git a/cmd/scan/framework.go b/cmd/scan/framework.go index 52c427a7..5a50b628 100644 --- a/cmd/scan/framework.go +++ b/cmd/scan/framework.go @@ -8,10 +8,10 @@ import ( apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/meta" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/meta" "github.com/enescakir/emoji" "github.com/spf13/cobra" diff --git a/cmd/scan/scan.go b/cmd/scan/scan.go index 3a5bc25d..251bb769 100644 --- a/cmd/scan/scan.go +++ b/cmd/scan/scan.go @@ -3,9 +3,9 @@ package scan import ( "fmt" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/meta" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/meta" "github.com/spf13/cobra" ) @@ -93,7 +93,7 @@ func GetScanCommand(ks meta.IKubescape) *cobra.Command { scanCmd.PersistentFlags().MarkHidden("silent") // this flag should be deprecated since we added the --logger support // scanCmd.PersistentFlags().MarkHidden("format-version") // meant for testing different output approaches and not for common use - hostF := scanCmd.PersistentFlags().VarPF(&scanInfo.HostSensorEnabled, "enable-host-scan", "", "Deploy ARMO K8s host-sensor daemonset in the scanned cluster. Deleting it right after we collecting the data. Required to collect valuable data from cluster nodes for certain controls. Yaml file: https://github.com/armosec/kubescape/blob/master/core/pkg/hostsensorutils/hostsensor.yaml") + hostF := scanCmd.PersistentFlags().VarPF(&scanInfo.HostSensorEnabled, "enable-host-scan", "", "Deploy ARMO K8s host-sensor daemonset in the scanned cluster. Deleting it right after we collecting the data. Required to collect valuable data from cluster nodes for certain controls. Yaml file: https://github.com/kubescape/kubescape/blob/master/core/pkg/hostsensorutils/hostsensor.yaml") hostF.NoOptDefVal = "true" hostF.DefValue = "false, for no TTY in stdin" diff --git a/cmd/submit/exceptions.go b/cmd/submit/exceptions.go index 34a2f53f..fade70da 100644 --- a/cmd/submit/exceptions.go +++ b/cmd/submit/exceptions.go @@ -3,9 +3,9 @@ package submit import ( "fmt" - "github.com/armosec/kubescape/v2/core/meta" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/meta" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/submit/rbac.go b/cmd/submit/rbac.go index 811d6b10..b0f33a14 100644 --- a/cmd/submit/rbac.go +++ b/cmd/submit/rbac.go @@ -3,16 +3,16 @@ package submit import ( "fmt" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/meta" - "github.com/armosec/kubescape/v2/core/meta/cliinterfaces" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" - reporterv2 "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter/v2" "github.com/google/uuid" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/meta" + "github.com/kubescape/kubescape/v2/core/meta/cliinterfaces" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" + reporterv2 "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter/v2" "github.com/kubescape/rbac-utils/rbacscanner" "github.com/spf13/cobra" diff --git a/cmd/submit/results.go b/cmd/submit/results.go index ba9f1f07..c8aa2430 100644 --- a/cmd/submit/results.go +++ b/cmd/submit/results.go @@ -8,13 +8,13 @@ import ( "github.com/google/uuid" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" - "github.com/armosec/kubescape/v2/core/meta" - "github.com/armosec/kubescape/v2/core/meta/cliinterfaces" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" - reporterv2 "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter/v2" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/meta" + "github.com/kubescape/kubescape/v2/core/meta/cliinterfaces" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" + reporterv2 "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter/v2" "github.com/spf13/cobra" ) diff --git a/cmd/submit/submit.go b/cmd/submit/submit.go index f0e4b7a6..158f9b37 100644 --- a/cmd/submit/submit.go +++ b/cmd/submit/submit.go @@ -1,8 +1,8 @@ package submit import ( - "github.com/armosec/kubescape/v2/core/meta" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" + "github.com/kubescape/kubescape/v2/core/meta" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/spf13/cobra" ) diff --git a/cmd/version/version.go b/cmd/version/version.go index e6de3290..e5cc8b13 100644 --- a/cmd/version/version.go +++ b/cmd/version/version.go @@ -4,7 +4,7 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/spf13/cobra" ) diff --git a/core/cautils/customerloader.go b/core/cautils/customerloader.go index dc30b9c2..a7bbb0e9 100644 --- a/core/cautils/customerloader.go +++ b/core/cautils/customerloader.go @@ -9,9 +9,9 @@ import ( metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils/getter" corev1 "k8s.io/api/core/v1" ) diff --git a/core/cautils/datastructures.go b/core/cautils/datastructures.go index a01dc898..39946da8 100644 --- a/core/cautils/datastructures.go +++ b/core/cautils/datastructures.go @@ -44,6 +44,23 @@ func NewOPASessionObj(frameworks []reporthandling.Framework, k8sResources *K8SRe } } +func (sessionObj *OPASessionObj) SetMapNamespaceToNumberOfResources(mapNamespaceToNumberOfResources map[string]int) { + if sessionObj.Metadata.ContextMetadata.ClusterContextMetadata == nil { + sessionObj.Metadata.ContextMetadata.ClusterContextMetadata = &reporthandlingv2.ClusterMetadata{} + } + if sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources == nil { + sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources = make(map[string]int) + } + sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources = mapNamespaceToNumberOfResources +} + +func (sessionObj *OPASessionObj) SetNumberOfWorkerNodes(n int) { + if sessionObj.Metadata.ContextMetadata.ClusterContextMetadata == nil { + sessionObj.Metadata.ContextMetadata.ClusterContextMetadata = &reporthandlingv2.ClusterMetadata{} + } + sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.NumberOfWorkerNodes = n +} + func NewOPASessionObjMock() *OPASessionObj { return &OPASessionObj{ Policies: nil, diff --git a/core/cautils/scaninfo.go b/core/cautils/scaninfo.go index 329433b8..a40d58b4 100644 --- a/core/cautils/scaninfo.go +++ b/core/cautils/scaninfo.go @@ -12,10 +12,10 @@ import ( apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" giturl "github.com/armosec/go-git-url" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "github.com/kubescape/opa-utils/reporthandling" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" diff --git a/core/cautils/scaninfo_test.go b/core/cautils/scaninfo_test.go index ae944ff1..c8705879 100644 --- a/core/cautils/scaninfo_test.go +++ b/core/cautils/scaninfo_test.go @@ -20,7 +20,7 @@ func TestSetContextMetadata(t *testing.T) { } { ctx := reporthandlingv2.ContextMetadata{} - setContextMetadata(&ctx, "https://github.com/armosec/kubescape") + setContextMetadata(&ctx, "https://github.com/kubescape/kubescape") assert.Nil(t, ctx.ClusterContextMetadata) assert.Nil(t, ctx.DirectoryContextMetadata) @@ -29,7 +29,7 @@ func TestSetContextMetadata(t *testing.T) { assert.NotNil(t, ctx.RepoContextMetadata) assert.Equal(t, "kubescape", ctx.RepoContextMetadata.Repo) - assert.Equal(t, "armosec", ctx.RepoContextMetadata.Owner) + assert.Equal(t, "kubescape", ctx.RepoContextMetadata.Owner) assert.Equal(t, "master", ctx.RepoContextMetadata.Branch) } } @@ -40,5 +40,5 @@ func TestGetHostname(t *testing.T) { func TestGetScanningContext(t *testing.T) { assert.Equal(t, ContextCluster, GetScanningContext("")) - assert.Equal(t, ContextGitURL, GetScanningContext("https://github.com/armosec/kubescape")) + assert.Equal(t, ContextGitURL, GetScanningContext("https://github.com/kubescape/kubescape")) } diff --git a/core/cautils/versioncheck.go b/core/cautils/versioncheck.go index b222dfbd..2492d6f3 100644 --- a/core/cautils/versioncheck.go +++ b/core/cautils/versioncheck.go @@ -6,10 +6,10 @@ import ( "net/http" "os" - "github.com/armosec/kubescape/v2/core/cautils/getter" "github.com/armosec/utils-go/boolutils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "golang.org/x/mod/semver" ) diff --git a/core/core/cachedconfig.go b/core/core/cachedconfig.go index 7d0bebc4..b575eb9c 100644 --- a/core/core/cachedconfig.go +++ b/core/core/cachedconfig.go @@ -3,7 +3,7 @@ package core import ( "fmt" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" ) func (ks *Kubescape) SetCachedConfig(setConfig *metav1.SetConfig) error { diff --git a/core/core/delete.go b/core/core/delete.go index 4992ec8f..0439db68 100644 --- a/core/core/delete.go +++ b/core/core/delete.go @@ -3,10 +3,10 @@ package core import ( "fmt" - "github.com/armosec/kubescape/v2/core/cautils/getter" - v1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + v1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" ) func (ks *Kubescape) DeleteExceptions(delExceptions *v1.DeleteExceptions) error { diff --git a/core/core/download.go b/core/core/download.go index b3dcc4ef..d5760a65 100644 --- a/core/core/download.go +++ b/core/core/download.go @@ -7,10 +7,10 @@ import ( "strings" "github.com/armosec/armoapi-go/armotypes" - "github.com/armosec/kubescape/v2/core/cautils/getter" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" ) var downloadFunc = map[string]func(*metav1.DownloadInfo) error{ diff --git a/core/core/initutils.go b/core/core/initutils.go index b08814cd..bb145b1a 100644 --- a/core/core/initutils.go +++ b/core/core/initutils.go @@ -3,15 +3,15 @@ package core import ( "fmt" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/pkg/hostsensorutils" - "github.com/armosec/kubescape/v2/core/pkg/resourcehandler" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter" - reporterv2 "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter/v2" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/pkg/hostsensorutils" + "github.com/kubescape/kubescape/v2/core/pkg/resourcehandler" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter" + reporterv2 "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter/v2" "github.com/google/uuid" diff --git a/core/core/list.go b/core/core/list.go index 9471149c..a0383bf3 100644 --- a/core/core/list.go +++ b/core/core/list.go @@ -6,8 +6,8 @@ import ( "sort" "strings" - "github.com/armosec/kubescape/v2/core/cautils/getter" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" ) var listFunc = map[string]func(*metav1.ListPolicies) ([]string, error){ diff --git a/core/core/scan.go b/core/core/scan.go index 313504ab..3eac8071 100644 --- a/core/core/scan.go +++ b/core/core/scan.go @@ -7,17 +7,17 @@ import ( "github.com/kubescape/k8s-interface/k8sinterface" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/pkg/hostsensorutils" - "github.com/armosec/kubescape/v2/core/pkg/opaprocessor" - "github.com/armosec/kubescape/v2/core/pkg/policyhandler" - "github.com/armosec/kubescape/v2/core/pkg/resourcehandler" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/pkg/hostsensorutils" + "github.com/kubescape/kubescape/v2/core/pkg/opaprocessor" + "github.com/kubescape/kubescape/v2/core/pkg/policyhandler" + "github.com/kubescape/kubescape/v2/core/pkg/resourcehandler" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter" "github.com/kubescape/opa-utils/resources" ) diff --git a/core/core/submit.go b/core/core/submit.go index 2227cfad..115fc00f 100644 --- a/core/core/submit.go +++ b/core/core/submit.go @@ -1,9 +1,9 @@ package core import ( - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/meta/cliinterfaces" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/meta/cliinterfaces" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" diff --git a/core/meta/cliinterfaces/submit.go b/core/meta/cliinterfaces/submit.go index 1d3d7eb4..6463b23e 100644 --- a/core/meta/cliinterfaces/submit.go +++ b/core/meta/cliinterfaces/submit.go @@ -1,9 +1,9 @@ package cliinterfaces import ( - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" ) diff --git a/core/meta/datastructures/v1/delete.go b/core/meta/datastructures/v1/delete.go index 68d1ac30..b3c72d9d 100644 --- a/core/meta/datastructures/v1/delete.go +++ b/core/meta/datastructures/v1/delete.go @@ -1,6 +1,6 @@ package v1 -import "github.com/armosec/kubescape/v2/core/cautils" +import "github.com/kubescape/kubescape/v2/core/cautils" type DeleteExceptions struct { Credentials cautils.Credentials diff --git a/core/meta/datastructures/v1/download.go b/core/meta/datastructures/v1/download.go index 10de6d8a..6b44c323 100644 --- a/core/meta/datastructures/v1/download.go +++ b/core/meta/datastructures/v1/download.go @@ -1,6 +1,6 @@ package v1 -import "github.com/armosec/kubescape/v2/core/cautils" +import "github.com/kubescape/kubescape/v2/core/cautils" type DownloadInfo struct { Path string // directory to save artifact. Default is "~/.kubescape/" diff --git a/core/meta/datastructures/v1/listpolicies.go b/core/meta/datastructures/v1/listpolicies.go index f3926a11..c1833278 100644 --- a/core/meta/datastructures/v1/listpolicies.go +++ b/core/meta/datastructures/v1/listpolicies.go @@ -1,6 +1,6 @@ package v1 -import "github.com/armosec/kubescape/v2/core/cautils" +import "github.com/kubescape/kubescape/v2/core/cautils" type ListPolicies struct { Target string diff --git a/core/meta/datastructures/v1/submit.go b/core/meta/datastructures/v1/submit.go index 21794a06..20ec27cd 100644 --- a/core/meta/datastructures/v1/submit.go +++ b/core/meta/datastructures/v1/submit.go @@ -1,6 +1,6 @@ package v1 -import "github.com/armosec/kubescape/v2/core/cautils" +import "github.com/kubescape/kubescape/v2/core/cautils" type Submit struct { Credentials cautils.Credentials diff --git a/core/meta/ksinterface.go b/core/meta/ksinterface.go index bb4f4a5e..199b1710 100644 --- a/core/meta/ksinterface.go +++ b/core/meta/ksinterface.go @@ -1,10 +1,10 @@ package meta import ( - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/meta/cliinterfaces" - metav1 "github.com/armosec/kubescape/v2/core/meta/datastructures/v1" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/meta/cliinterfaces" + metav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling" ) type IKubescape interface { diff --git a/core/pkg/hostsensorutils/hostsensordeploy.go b/core/pkg/hostsensorutils/hostsensordeploy.go index bff85709..faf21aa6 100644 --- a/core/pkg/hostsensorutils/hostsensordeploy.go +++ b/core/pkg/hostsensorutils/hostsensordeploy.go @@ -8,11 +8,11 @@ import ( "sync" "time" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" appsv1 "k8s.io/api/apps/v1" corev1 "k8s.io/api/core/v1" diff --git a/core/pkg/opaprocessor/processorhandler.go b/core/pkg/opaprocessor/processorhandler.go index 0f2622a8..f7fcbd01 100644 --- a/core/pkg/opaprocessor/processorhandler.go +++ b/core/pkg/opaprocessor/processorhandler.go @@ -6,10 +6,10 @@ import ( "time" "github.com/armosec/armoapi-go/armotypes" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/score" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/score" "github.com/kubescape/opa-utils/objectsenvelopes" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/reporthandling/apis" diff --git a/core/pkg/opaprocessor/processorhandler_test.go b/core/pkg/opaprocessor/processorhandler_test.go index 9de3ac75..65099d17 100644 --- a/core/pkg/opaprocessor/processorhandler_test.go +++ b/core/pkg/opaprocessor/processorhandler_test.go @@ -4,8 +4,8 @@ import ( "testing" "github.com/armosec/armoapi-go/armotypes" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/mocks" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/mocks" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/resources" "github.com/stretchr/testify/assert" diff --git a/core/pkg/opaprocessor/processorhandlerutils.go b/core/pkg/opaprocessor/processorhandlerutils.go index aee77a5d..ef796ae8 100644 --- a/core/pkg/opaprocessor/processorhandlerutils.go +++ b/core/pkg/opaprocessor/processorhandlerutils.go @@ -1,8 +1,8 @@ package opaprocessor import ( - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/k8s-interface/k8sinterface" "github.com/kubescape/k8s-interface/workloadinterface" diff --git a/core/pkg/opaprocessor/utils.go b/core/pkg/opaprocessor/utils.go index 4e238feb..726ae3d6 100644 --- a/core/pkg/opaprocessor/utils.go +++ b/core/pkg/opaprocessor/utils.go @@ -1,7 +1,7 @@ package opaprocessor import ( - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" ) diff --git a/core/pkg/opaprocessor/utils_test.go b/core/pkg/opaprocessor/utils_test.go index 5ab81ce6..aca866a1 100644 --- a/core/pkg/opaprocessor/utils_test.go +++ b/core/pkg/opaprocessor/utils_test.go @@ -5,7 +5,7 @@ import ( "github.com/stretchr/testify/assert" - "github.com/armosec/kubescape/v2/core/mocks" + "github.com/kubescape/kubescape/v2/core/mocks" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" ) diff --git a/core/pkg/policyhandler/handlenotification.go b/core/pkg/policyhandler/handlenotification.go index 683971c5..cb86ae14 100644 --- a/core/pkg/policyhandler/handlenotification.go +++ b/core/pkg/policyhandler/handlenotification.go @@ -4,8 +4,8 @@ import ( "fmt" "github.com/armosec/armoapi-go/armotypes" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resourcehandler" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resourcehandler" ) // PolicyHandler - diff --git a/core/pkg/policyhandler/handlepullpolicies.go b/core/pkg/policyhandler/handlepullpolicies.go index 59100622..3c1ec482 100644 --- a/core/pkg/policyhandler/handlepullpolicies.go +++ b/core/pkg/policyhandler/handlepullpolicies.go @@ -6,10 +6,10 @@ import ( apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "github.com/kubescape/opa-utils/reporthandling" ) diff --git a/core/pkg/policyhandler/handlepullpoliciesutils.go b/core/pkg/policyhandler/handlepullpoliciesutils.go index 53a3334c..4e109e8a 100644 --- a/core/pkg/policyhandler/handlepullpoliciesutils.go +++ b/core/pkg/policyhandler/handlepullpoliciesutils.go @@ -6,7 +6,7 @@ import ( apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" ) func getScanKind(policyIdentifier []cautils.PolicyIdentifier) apisv1.NotificationPolicyKind { diff --git a/core/pkg/registryadaptors/armosec/v1/civksadaptor.go b/core/pkg/registryadaptors/armosec/v1/civksadaptor.go index c3ae80ce..885b3906 100644 --- a/core/pkg/registryadaptors/armosec/v1/civksadaptor.go +++ b/core/pkg/registryadaptors/armosec/v1/civksadaptor.go @@ -4,11 +4,11 @@ import ( "encoding/json" "fmt" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/pkg/containerscan" - "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/pkg/containerscan" + "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" ) func NewKSAdaptor(api *getter.KSCloudAPI) *KSCivAdaptor { diff --git a/core/pkg/registryadaptors/armosec/v1/civksadaptor_test.go b/core/pkg/registryadaptors/armosec/v1/civksadaptor_test.go index 03b87d6a..cd83a94f 100644 --- a/core/pkg/registryadaptors/armosec/v1/civksadaptor_test.go +++ b/core/pkg/registryadaptors/armosec/v1/civksadaptor_test.go @@ -3,7 +3,7 @@ package v1 import ( "testing" - "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" + "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" "github.com/stretchr/testify/assert" ) diff --git a/core/pkg/registryadaptors/armosec/v1/civksadaptormock.go b/core/pkg/registryadaptors/armosec/v1/civksadaptormock.go index 14747536..fcf598c1 100644 --- a/core/pkg/registryadaptors/armosec/v1/civksadaptormock.go +++ b/core/pkg/registryadaptors/armosec/v1/civksadaptormock.go @@ -3,8 +3,8 @@ package v1 import ( "encoding/json" - "github.com/armosec/kubescape/v2/core/pkg/containerscan" - "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" + "github.com/kubescape/kubescape/v2/core/pkg/containerscan" + "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" ) type ArmoCivAdaptorMock struct { diff --git a/core/pkg/registryadaptors/armosec/v1/civksadaptorutils.go b/core/pkg/registryadaptors/armosec/v1/civksadaptorutils.go index 504dbe47..5aaf2d32 100644 --- a/core/pkg/registryadaptors/armosec/v1/civksadaptorutils.go +++ b/core/pkg/registryadaptors/armosec/v1/civksadaptorutils.go @@ -4,8 +4,8 @@ import ( "encoding/json" "fmt" - "github.com/armosec/kubescape/v2/core/pkg/containerscan" - "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" + "github.com/kubescape/kubescape/v2/core/pkg/containerscan" + "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" ) func (armoCivAdaptor *KSCivAdaptor) getImageLastScanId(imageID *registryvulnerabilities.ContainerImageIdentifier) (string, error) { diff --git a/core/pkg/registryadaptors/armosec/v1/datastructures.go b/core/pkg/registryadaptors/armosec/v1/datastructures.go index bc49b4c8..5667f8e9 100644 --- a/core/pkg/registryadaptors/armosec/v1/datastructures.go +++ b/core/pkg/registryadaptors/armosec/v1/datastructures.go @@ -3,7 +3,7 @@ package v1 import ( "time" - "github.com/armosec/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/cautils/getter" ) type V2ListRequest struct { diff --git a/core/pkg/resourcehandler/filesloader.go b/core/pkg/resourcehandler/filesloader.go index d104a325..44ec7a8d 100644 --- a/core/pkg/resourcehandler/filesloader.go +++ b/core/pkg/resourcehandler/filesloader.go @@ -10,10 +10,10 @@ import ( "github.com/kubescape/opa-utils/reporthandling" "k8s.io/apimachinery/pkg/version" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils" ) // FileResourceHandler handle resources from files and URLs diff --git a/core/pkg/resourcehandler/filesloaderutils.go b/core/pkg/resourcehandler/filesloaderutils.go index f1f2b62a..7f9ec407 100644 --- a/core/pkg/resourcehandler/filesloaderutils.go +++ b/core/pkg/resourcehandler/filesloaderutils.go @@ -5,11 +5,11 @@ import ( "path/filepath" giturl "github.com/armosec/go-git-url" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/k8sinterface" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling" ) diff --git a/core/pkg/resourcehandler/k8sresources.go b/core/pkg/resourcehandler/k8sresources.go index 36329d14..8035335e 100644 --- a/core/pkg/resourcehandler/k8sresources.go +++ b/core/pkg/resourcehandler/k8sresources.go @@ -5,10 +5,10 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/hostsensorutils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/hostsensorutils" "github.com/kubescape/opa-utils/objectsenvelopes" "github.com/kubescape/opa-utils/reporthandling/apis" @@ -76,9 +76,7 @@ func (k8sHandler *K8sResourceHandler) GetResources(sessionObj *cautils.OPASessio if err != nil { logger.L().Debug("failed to collect worker nodes number", helpers.Error(err)) } else { - if sessionObj.Metadata != nil && sessionObj.Metadata.ContextMetadata.ClusterContextMetadata != nil { - sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.NumberOfWorkerNodes = numberOfWorkerNodes - } + sessionObj.SetNumberOfWorkerNodes(numberOfWorkerNodes) } imgVulnResources := cautils.MapImageVulnResources(ksResourceMap) @@ -118,6 +116,9 @@ func (k8sHandler *K8sResourceHandler) GetResources(sessionObj *cautils.OPASessio } cloudResources := cautils.MapCloudResources(ksResourceMap) + + setMapNamespaceToNumOfResources(allResources, sessionObj) + // check that controls use cloud resources if len(cloudResources) > 0 { provider, err := getCloudProviderDescription(allResources, ksResourceMap) @@ -147,6 +148,30 @@ func (k8sHandler *K8sResourceHandler) GetClusterAPIServerInfo() *version.Info { return clusterAPIServerInfo } +// set namespaceToNumOfResources map in report +func setMapNamespaceToNumOfResources(allResources map[string]workloadinterface.IMetadata, sessionObj *cautils.OPASessionObj) { + + mapNamespaceToNumberOfResources := make(map[string]int) + for _, resource := range allResources { + if obj := workloadinterface.NewWorkloadObj(resource.GetObject()); obj != nil { + ownerReferences, err := obj.GetOwnerReferences() + if err == nil { + // Add an object to the map if the object does not have a parent but is contained within a namespace (except Job) + if len(ownerReferences) == 0 { + if ns := resource.GetNamespace(); ns != "" { + if obj.GetKind() != "Job" { + mapNamespaceToNumberOfResources[ns]++ + } + } + } + } else { + logger.L().Warning(fmt.Sprintf("failed to get owner references. Resource %s will not be counted", obj.GetName()), helpers.Error(err)) + } + } + } + sessionObj.SetMapNamespaceToNumberOfResources(mapNamespaceToNumberOfResources) +} + func (k8sHandler *K8sResourceHandler) pullResources(k8sResources *cautils.K8SResources, allResources map[string]workloadinterface.IMetadata, namespace string, labels map[string]string) error { var errs error diff --git a/core/pkg/resourcehandler/k8sresources_test.go b/core/pkg/resourcehandler/k8sresources_test.go index 326ddbbc..849650c4 100644 --- a/core/pkg/resourcehandler/k8sresources_test.go +++ b/core/pkg/resourcehandler/k8sresources_test.go @@ -1,9 +1,13 @@ package resourcehandler import ( + _ "embed" "encoding/json" + "reflect" "testing" + "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/k8s-interface/workloadinterface" "github.com/stretchr/testify/assert" v1 "k8s.io/api/core/v1" ) @@ -158,8 +162,8 @@ func TestIsMasterNodeTaints(t *testing.T) { }, { "names": [ - "quay.io/armosec/kubescape@sha256:6196f766be50d94b45d903a911f5ee95ac99bc392a1324c3e063bec41efd98ba", - "quay.io/armosec/kubescape:v2.0.153" + "quay.io/kubescape/kubescape@sha256:6196f766be50d94b45d903a911f5ee95ac99bc392a1324c3e063bec41efd98ba", + "quay.io/kubescape/kubescape:v2.0.153" ], "sizeBytes": 110345054 }, @@ -423,8 +427,8 @@ func TestIsMasterNodeTaints(t *testing.T) { }, { "names": [ - "quay.io/armosec/kubescape@sha256:6196f766be50d94b45d903a911f5ee95ac99bc392a1324c3e063bec41efd98ba", - "quay.io/armosec/kubescape:v2.0.153" + "quay.io/kubescape/kubescape@sha256:6196f766be50d94b45d903a911f5ee95ac99bc392a1324c3e063bec41efd98ba", + "quay.io/kubescape/kubescape:v2.0.153" ], "sizeBytes": 110345054 }, @@ -530,3 +534,35 @@ func TestIsMasterNodeTaints(t *testing.T) { _ = json.Unmarshal([]byte(taintNode), &l) assert.True(t, isMasterNodeTaints(l.Spec.Taints)) } + +func TestSetMapNamespaceToNumOfResources(t *testing.T) { + allResources := make(map[string]workloadinterface.IMetadata) + mocks := map[string]string{ + "deployment1": `{ "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "armo", "meta.helm.sh/release-namespace": "armo-system" }, "creationTimestamp": "2022-05-18T20:36:07Z", "generation": 1, "labels": { "app": "armo-web-socket", "app.kubernetes.io/managed-by": "Helm", "tier": "armo-system-control-plane" }, "name": "armo-web-socket", "namespace": "armo-system", "resourceVersion": "219521227", "uid": "55a36934-4b36-4f95-843a-1b0b503ea6bb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "tier": "armo-system-control-plane" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "armo-web-socket", "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "helm.sh/chart": "armo-cluster-components-1.7.6", "helm.sh/revision": "1", "tier": "armo-system-control-plane" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "-alsologtostderr", "-v=4", "2\u003e\u00261" ], "env": [ { "name": "CA_NAMESPACE", "value": "armo-system" }, { "name": "CA_SYSTEM_MODE", "value": "SCAN" } ], "image": "quay.io/armosec/action-trigger:v0.0.5", "imagePullPolicy": "Always", "name": "armo-web-socket", "ports": [ { "containerPort": 4002, "name": "trigger-port", "protocol": "TCP" }, { "containerPort": 8000, "name": "readiness-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/v1/readiness", "port": "readiness-port", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "300Mi" }, "requests": { "cpu": "50m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config", "name": "armo-be-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "armo-scanner-service-account", "serviceAccountName": "armo-scanner-service-account", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "clusterData", "path": "clusterData.json" } ], "name": "armo-be-config" }, "name": "armo-be-config" } ] } } }, "status": { "conditions": [ { "lastTransitionTime": "2022-05-18T20:36:07Z", "lastUpdateTime": "2022-05-18T20:36:32Z", "message": "ReplicaSet \"armo-web-socket-7ccc76fc6b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2022-07-27T13:47:46Z", "lastUpdateTime": "2022-07-27T13:47:46Z", "message": "Deployment does not have minimum availability.", "reason": "MinimumReplicasUnavailable", "status": "False", "type": "Available" } ], "observedGeneration": 1, "replicas": 1, "unavailableReplicas": 1, "updatedReplicas": 1 } }`, + "clusterrole": `{"apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRole", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2021-06-13T13:42:00Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:disruption-controller", "resourceVersion": "76", "uid": "f6f2f2bf-4c39-4999-a143-591790249c4d" }, "rules": [ { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "replicationcontrollers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "*" ], "resources": [ "*/scale" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }`, + "job": `{"apiVersion": "batch/v1", "kind": "Job", "metadata": { "creationTimestamp": "2022-08-15T00:00:00Z", "generation": 1, "labels": { "controller-uid": "5188335d-ea13-4bad-b332-ebe215ee3af7", "job-name": "armo-scan-scheduler-27675360" }, "name": "armo-scan-scheduler-27675360", "namespace": "armo-system", "ownerReferences": [ { "apiVersion": "batch/v1", "blockOwnerDeletion": true, "controller": true, "kind": "CronJob", "name": "armo-scan-scheduler", "uid": "2f77e996-b2d8-45bd-a99e-4c16a353d4c4" } ], "resourceVersion": "229672794", "uid": "5188335d-ea13-4bad-b332-ebe215ee3af7" }, "spec": { "backoffLimit": 6, "completionMode": "NonIndexed", "completions": 1, "parallelism": 1, "selector": { "matchLabels": { "controller-uid": "5188335d-ea13-4bad-b332-ebe215ee3af7" } }, "suspend": false, "template": { "metadata": { "creationTimestamp": null, "labels": { "controller-uid": "5188335d-ea13-4bad-b332-ebe215ee3af7", "job-name": "armo-scan-scheduler-27675360" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "echo Starting; ls -ltr /home/curl_user/; /bin/sh -x ./home/curl_user/trigger-script.sh; sleep 30; echo Done;" ], "command": [ "/bin/sh", "-c" ], "image": "curlimages/curl:latest", "imagePullPolicy": "IfNotPresent", "name": "armo-scan-scheduler", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/home/curl_user/trigger-script.sh", "name": "armo-scan-scheduler-volume", "readOnly": true, "subPath": "trigger-script.sh" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Never", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 511, "name": "armo-scan-scheduler-config" }, "name": "armo-scan-scheduler-volume" } ] } } }, "status": { "active": 1, "startTime": "2022-08-15T00:00:00Z" } }`, + "deployment2": `{ "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "6", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.21.0-gke.0\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.21.0-gke.0\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.21.0-gke.0\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" }, "creationTimestamp": "2021-06-13T13:42:19Z", "generation": 7, "labels": { "addonmanager.kubernetes.io/mode": "Reconcile", "k8s-app": "kube-dns", "kubernetes.io/cluster-service": "true" }, "name": "kube-dns", "namespace": "kube-system", "resourceVersion": "222203400", "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "kube-dns" } }, "strategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "components.gke.io/component-name": "kubedns", "prometheus.io/port": "10054", "prometheus.io/scrape": "true", "scheduler.alpha.kubernetes.io/critical-pod": "", "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" }, "creationTimestamp": null, "labels": { "k8s-app": "kube-dns" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--domain=cluster.local.", "--dns-port=10053", "--config-dir=/kube-dns-config", "--v=2" ], "env": [ { "name": "PROMETHEUS_PORT", "value": "10055" } ], "image": "gke.gcr.io/k8s-dns-kube-dns:1.22.2-gke.0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthcheck/kubedns", "port": 10054, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kubedns", "ports": [ { "containerPort": 10053, "name": "dns-local", "protocol": "UDP" }, { "containerPort": 10053, "name": "dns-tcp-local", "protocol": "TCP" }, { "containerPort": 10055, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "210Mi" }, "requests": { "cpu": "100m", "memory": "70Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsGroup": 1001, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/kube-dns-config", "name": "kube-dns-config" } ] }, { "args": [ "-v=2", "-logtostderr", "-configDir=/etc/k8s/dns/dnsmasq-nanny", "-restartDnsmasq=true", "--", "-k", "--cache-size=1000", "--no-negcache", "--dns-forward-max=1500", "--log-facility=-", "--server=/cluster.local/127.0.0.1#10053", "--server=/in-addr.arpa/127.0.0.1#10053", "--server=/ip6.arpa/127.0.0.1#10053" ], "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.22.2-gke.0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthcheck/dnsmasq", "port": 10054, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dnsmasq", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "150m", "memory": "20Mi" } }, "securityContext": { "capabilities": { "add": [ "NET_BIND_SERVICE", "SETGID" ], "drop": [ "all" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/k8s/dns/dnsmasq-nanny", "name": "kube-dns-config" } ] }, { "args": [ "--v=2", "--logtostderr", "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" ], "image": "gke.gcr.io/k8s-dns-sidecar:1.22.2-gke.0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/metrics", "port": 10054, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "sidecar", "ports": [ { "containerPort": 10054, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsGroup": 1001, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "supplementalGroups": [ 65534 ] }, "serviceAccount": "kube-dns", "serviceAccountName": "kube-dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "key": "components.gke.io/gke-managed-components", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-dns", "optional": true }, "name": "kube-dns-config" } ] } } }, "status": { "conditions": [ { "lastTransitionTime": "2022-07-27T13:47:47Z", "lastUpdateTime": "2022-07-27T13:47:47Z", "message": "Deployment does not have minimum availability.", "reason": "MinimumReplicasUnavailable", "status": "False", + "type": "Available" }, { "lastTransitionTime": "2022-08-01T16:46:08Z", "lastUpdateTime": "2022-08-01T16:46:08Z", "message": "ReplicaSet \"kube-dns-7d774598cf\" has timed out progressing.", "reason": "ProgressDeadlineExceeded", "status": "False", "type": "Progressing" } ], "observedGeneration": 7, "replicas": 3, "unavailableReplicas": 3, "updatedReplicas": 1 } }`, + "replicaset": `{ "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "armo", "meta.helm.sh/release-namespace": "armo-system" }, "creationTimestamp": "2022-05-18T20:36:07Z", "generation": 1, "labels": { "app": "armo-web-socket", "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "helm.sh/chart": "armo-cluster-components-1.7.6", "helm.sh/revision": "1", "pod-template-hash": "7ccc76fc6b", "tier": "armo-system-control-plane" }, "name": "armo-web-socket-7ccc76fc6b", "namespace": "armo-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "armo-web-socket", "uid": "55a36934-4b36-4f95-843a-1b0b503ea6bb" } ], "resourceVersion": "219521226", "uid": "49b47eb7-5f4b-403a-a16d-a53cbc7451ba" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "pod-template-hash": "7ccc76fc6b", "tier": "armo-system-control-plane" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "armo-web-socket", "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "helm.sh/chart": "armo-cluster-components-1.7.6", "helm.sh/revision": "1", "pod-template-hash": "7ccc76fc6b", "tier": "armo-system-control-plane" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "-alsologtostderr", "-v=4", "2\u003e\u00261" ], "env": [ { "name": "CA_NAMESPACE", "value": "armo-system" }, { "name": "CA_SYSTEM_MODE", "value": "SCAN" } ], "image": "quay.io/armosec/action-trigger:v0.0.5", "imagePullPolicy": "Always", "name": "armo-web-socket", "ports": [ { "containerPort": 4002, "name": "trigger-port", "protocol": "TCP" }, { "containerPort": 8000, "name": "readiness-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/v1/readiness", "port": "readiness-port", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "300Mi" }, "requests": { "cpu": "50m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config", "name": "armo-be-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "armo-scanner-service-account", "serviceAccountName": "armo-scanner-service-account", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "clusterData", "path": "clusterData.json" } ], "name": "armo-be-config" }, "name": "armo-be-config" } ] } } }, "status": { "fullyLabeledReplicas": 1, "observedGeneration": 1, "replicas": 1 } }`, + "service": ` { "apiVersion": "v1", "kind": "Service", "metadata": { "annotations": { "meta.helm.sh/release-name": "armo", "meta.helm.sh/release-namespace": "armo-system" }, "creationTimestamp": "2022-05-18T20:36:07Z", "labels": { "app": "armo-vuln-scan", "app.kubernetes.io/managed-by": "Helm" }, "name": "armo-vuln-scan", "namespace": "armo-system", "resourceVersion": "176011314", "uid": "e1ad4cc5-d437-44d0-88cf-a01b592ad931" }, "spec": { "clusterIP": "10.72.9.228", "clusterIPs": [ "10.72.9.228" ], "internalTrafficPolicy": "Cluster", "ipFamilies": [ "IPv4" ], "ipFamilyPolicy": "SingleStack", "ports": [ { "name": "vuln-scan-port", "port": 8080, "protocol": "TCP", "targetPort": 8080 }, { "name": "readiness-port", "port": 8000, "protocol": "TCP", "targetPort": 8000 } ], "selector": { "app": "armo-vuln-scan" }, "sessionAffinity": "None", "type": "ClusterIP" }, "status": { "loadBalancer": {} } }`, + "cronjob": ` { "apiVersion": "batch/v1", "kind": "CronJob", "metadata": { "annotations": { "meta.helm.sh/release-name": "armo", "meta.helm.sh/release-namespace": "armo-system" }, "creationTimestamp": "2022-05-18T20:36:07Z", "labels": { "app": "armo-scan-scheduler", "app.kubernetes.io/managed-by": "Helm", "tier": "armo-system-control-plane" }, "name": "armo-scan-scheduler", "namespace": "armo-system", "resourceVersion": "234167493", "uid": "2f77e996-b2d8-45bd-a99e-4c16a353d4c4" }, "spec": { "concurrencyPolicy": "Allow", "failedJobsHistoryLimit": 1, "jobTemplate": { "metadata": { "creationTimestamp": null }, "spec": { "template": { "metadata": { "creationTimestamp": null }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "echo Starting; ls -ltr /home/curl_user/; /bin/sh -x ./home/curl_user/trigger-script.sh; sleep 30; echo Done;" ], "command": [ "/bin/sh", "-c" ], "image": "curlimages/curl:latest", "imagePullPolicy": "IfNotPresent", "name": "armo-scan-scheduler", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/home/curl_user/trigger-script.sh", "name": "armo-scan-scheduler-volume", "readOnly": true, "subPath": "trigger-script.sh" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Never", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 511, "name": "armo-scan-scheduler-config" }, "name": "armo-scan-scheduler-volume" } ] } } } }, "schedule": "0 0 * * *", "successfulJobsHistoryLimit": 3, "suspend": false }, "status": { "active": [ { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27649440", "namespace": "armo-system", "resourceVersion": "219744472", "uid": "36f60d4f-2ec4-4c35-be2c-22efc1a6ec24" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27650880", "namespace": "armo-system", "resourceVersion": "220268279", "uid": "9e0a08b3-4714-4268-bea2-ed1334a48ae8" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27652320", "namespace": "armo-system", "resourceVersion": "220791853", "uid": "8d96de16-3c6d-4d76-b097-adae599b1e15" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27653760", "namespace": "armo-system", "resourceVersion": "221315424", "uid": "bd4b9a5f-ce4d-4e3a-9074-910f4244b63e" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27655200", "namespace": "armo-system", "resourceVersion": "221838997", "uid": "7ce282cf-f20f-4ee5-a5d6-073192fe4468" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27656640", "namespace": "armo-system", "resourceVersion": "222372820", "uid": "9ed33ce8-239f-47bb-a099-4953392df459" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27658080", "namespace": "armo-system", "resourceVersion": "222934799", "uid": "b6dea67e-32d1-4fa0-99a4-443ed98acf36" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27659520", "namespace": "armo-system", "resourceVersion": "223496386", "uid": "1d94cc14-c14c-48ef-a143-a58ea3a813bc" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27660960", "namespace": "armo-system", "resourceVersion": "224055857", "uid": "3431522d-4415-4182-91fc-a413f52f891b" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27662400", "namespace": "armo-system", "resourceVersion": "224616616", "uid": "03de2e61-8aef-4903-bdb9-da07c5cb4eda" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27663840", "namespace": "armo-system", "resourceVersion": "225177696", "uid": "ebd3b17a-0f9c-4265-b8bd-4d03d90ad037" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27665280", "namespace": "armo-system", "resourceVersion": "225739409", "uid": "28cddb55-73e0-42d6-b5af-2029dd9e6224" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27666720", "namespace": "armo-system", "resourceVersion": "226301092", "uid": "05931b5a-1664-4fb1-8761-1ccab0c9e617" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27668160", "namespace": "armo-system", "resourceVersion": "226863002", "uid": "ebeb511f-b4f5-44e2-aff4-af12693158dd" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27669600", "namespace": "armo-system", "resourceVersion": "227424963", "uid": "1cea66fc-251e-4325-a7e8-215ebf6a130d" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27671040", "namespace": "armo-system", "resourceVersion": "227986904", "uid": "873bfc55-283d-423c-8b30-4a7486cc7a29" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27672480", "namespace": "armo-system", "resourceVersion": "228548881", "uid": "55d74401-42b3-47f1-bf75-2f224ae08ee6" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27673920", "namespace": "armo-system", "resourceVersion": "229110817", "uid": "84c6e444-fe2d-4032-8902-1666af52b70e" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27675360", "namespace": "armo-system", "resourceVersion": "229672786", "uid": "5188335d-ea13-4bad-b332-ebe215ee3af7" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27676800", "namespace": "armo-system", "resourceVersion": "230234728", "uid": "3bd848dd-4db4-464d-b257-e0b8034b7280" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27678240", "namespace": "armo-system", "resourceVersion": "230795059", "uid": "b54c1443-9e9d-442e-a2b0-62f1ab2767a4" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27679680", "namespace": "armo-system", "resourceVersion": "231358298", "uid": "acb05160-1b20-47df-b99b-aeac4ee08f1f" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27681120", "namespace": "armo-system", "resourceVersion": "231921395", "uid": "e48c2617-7b65-4a60-82be-0a8819a16384" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27682560", "namespace": "armo-system", "resourceVersion": "232480542", "uid": "03d79cbf-9e15-40f1-b007-260133148765" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27684000", "namespace": "armo-system", "resourceVersion": "233041990", "uid": "64f53c6d-6fa0-4a7b-adb5-90632aecef04" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27685440", "namespace": "armo-system", "resourceVersion": "233604167", "uid": "51ef6f1d-077c-4ed6-b86c-4fdee554e608" }, { "apiVersion": "batch/v1", "kind": "Job", "name": "armo-scan-scheduler-27686880", "namespace": "armo-system", "resourceVersion": "234167491", "uid": "98b9537e-7bad-40ed-8b45-adeaa0ed41cf" } ], "lastScheduleTime": "2022-08-23T00:00:00Z", "lastSuccessfulTime": "2022-07-27T00:00:34Z" } }`, + "pod": ` { "apiVersion": "v1", "kind": "Pod", "metadata": { "creationTimestamp": "2022-07-27T13:47:46Z", "generateName": "armo-web-socket-7ccc76fc6b-", "labels": { "app": "armo-web-socket", "app.kubernetes.io/instance": "armo", "app.kubernetes.io/name": "armo-web-socket", "helm.sh/chart": "armo-cluster-components-1.7.6", "helm.sh/revision": "1", "pod-template-hash": "7ccc76fc6b", "tier": "armo-system-control-plane" }, "name": "armo-web-socket-7ccc76fc6b-qfbvv", "namespace": "armo-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "ReplicaSet", "name": "armo-web-socket-7ccc76fc6b", "uid": "49b47eb7-5f4b-403a-a16d-a53cbc7451ba" } ], "resourceVersion": "219522666", "uid": "2fa36622-55ff-4f8d-8eeb-98779536035d" }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "-alsologtostderr", "-v=4", "2\u003e\u00261" ], "env": [ { "name": "CA_NAMESPACE", "value": "armo-system" }, { "name": "CA_SYSTEM_MODE", "value": "SCAN" } ], "image": "quay.io/armosec/action-trigger:v0.0.5", "imagePullPolicy": "Always", "name": "armo-web-socket", "ports": [ { "containerPort": 4002, "name": "trigger-port", "protocol": "TCP" }, { "containerPort": 8000, "name": "readiness-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/v1/readiness", "port": "readiness-port", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "300Mi" }, "requests": { "cpu": "50m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config", "name": "armo-be-config", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access-cp5cf", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "preemptionPolicy": "PreemptLowerPriority", "priority": 0, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "armo-scanner-service-account", "serviceAccountName": "armo-scanner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 300 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 300 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "clusterData", "path": "clusterData.json" } ], "name": "armo-be-config" }, "name": "armo-be-config" }, { "name": "kube-api-access-cp5cf", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3607, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] }, "status": { "conditions": [ { "lastProbeTime": null, "lastTransitionTime": "2022-07-27T13:47:46Z", "message": "no nodes available to schedule pods", "reason": "Unschedulable", "status": "False", "type": "PodScheduled" } ], "phase": "Pending", "qosClass": "Burstable" } }`, + } + for mock, data := range mocks { + w, err := workloadinterface.NewWorkload([]byte(data)) + assert.NoError(t, err) + allResources[mock] = w + } + + sessionObj := cautils.NewOPASessionObjMock() + setMapNamespaceToNumOfResources(allResources, sessionObj) + expected := map[string]int{ + "kube-system": 1, + "armo-system": 3, + } + assert.True(t, reflect.DeepEqual(expected, sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources)) + assert.NotContains(t, sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources, "job") + assert.NotContains(t, sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources, "replicaset") + assert.NotContains(t, sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources, "clusterrole") + assert.NotContains(t, sessionObj.Metadata.ContextMetadata.ClusterContextMetadata.MapNamespaceToNumberOfResources, "pod") +} diff --git a/core/pkg/resourcehandler/k8sresourcesutils.go b/core/pkg/resourcehandler/k8sresourcesutils.go index a8cbc03c..045c53c4 100644 --- a/core/pkg/resourcehandler/k8sresourcesutils.go +++ b/core/pkg/resourcehandler/k8sresourcesutils.go @@ -3,7 +3,7 @@ package resourcehandler import ( "strings" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling" "k8s.io/utils/strings/slices" diff --git a/core/pkg/resourcehandler/k8sresourcesutils_test.go b/core/pkg/resourcehandler/k8sresourcesutils_test.go index eb0e80bf..6b667755 100644 --- a/core/pkg/resourcehandler/k8sresourcesutils_test.go +++ b/core/pkg/resourcehandler/k8sresourcesutils_test.go @@ -1,8 +1,8 @@ package resourcehandler import ( - "github.com/armosec/kubescape/v2/core/cautils" "github.com/kubescape/k8s-interface/k8sinterface" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling" "github.com/stretchr/testify/assert" diff --git a/core/pkg/resourcehandler/registrydata.go b/core/pkg/resourcehandler/registrydata.go index fcfea29c..9160124c 100644 --- a/core/pkg/resourcehandler/registrydata.go +++ b/core/pkg/resourcehandler/registrydata.go @@ -3,13 +3,13 @@ package resourcehandler import ( "fmt" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - armosecadaptorv1 "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/armosec/v1" - "github.com/armosec/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" logger "github.com/kubescape/go-logger" "github.com/kubescape/k8s-interface/k8sinterface" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + armosecadaptorv1 "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/armosec/v1" + "github.com/kubescape/kubescape/v2/core/pkg/registryadaptors/registryvulnerabilities" "github.com/kubescape/opa-utils/shared" ) diff --git a/core/pkg/resourcehandler/repositoryscanner.go b/core/pkg/resourcehandler/repositoryscanner.go index 50688a53..4e92cb28 100644 --- a/core/pkg/resourcehandler/repositoryscanner.go +++ b/core/pkg/resourcehandler/repositoryscanner.go @@ -8,7 +8,7 @@ import ( "path/filepath" "strings" - "github.com/armosec/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/cautils/getter" giturls "github.com/whilp/git-urls" "k8s.io/utils/strings/slices" ) diff --git a/core/pkg/resourcehandler/repositoryscanner_test.go b/core/pkg/resourcehandler/repositoryscanner_test.go index e5275560..8470f92d 100644 --- a/core/pkg/resourcehandler/repositoryscanner_test.go +++ b/core/pkg/resourcehandler/repositoryscanner_test.go @@ -7,10 +7,10 @@ import ( ) var ( - urlA = "https://github.com/armosec/kubescape" - urlB = "https://github.com/armosec/kubescape/blob/master/examples/online-boutique/adservice.yaml" - urlC = "https://github.com/armosec/kubescape/tree/master/examples/online-boutique" - urlD = "https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml" + urlA = "https://github.com/kubescape/kubescape" + urlB = "https://github.com/kubescape/kubescape/blob/master/examples/online-boutique/adservice.yaml" + urlC = "https://github.com/kubescape/kubescape/tree/master/examples/online-boutique" + urlD = "https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml" ) func TestScanRepository(t *testing.T) { @@ -117,12 +117,12 @@ func TestGithubParse(t *testing.T) { { gh := NewGitHubRepository() assert.NoError(t, gh.parse(urlA)) - assert.Equal(t, "armosec/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) + assert.Equal(t, "kubescape/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) } { gh := NewGitHubRepository() assert.NoError(t, gh.parse(urlB)) - assert.Equal(t, "armosec/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) + assert.Equal(t, "kubescape/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) assert.Equal(t, "master", gh.branch) assert.Equal(t, "examples/online-boutique/adservice.yaml", gh.path) assert.True(t, gh.isFile) @@ -132,7 +132,7 @@ func TestGithubParse(t *testing.T) { { gh := NewGitHubRepository() assert.NoError(t, gh.parse(urlC)) - assert.Equal(t, "armosec/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) + assert.Equal(t, "kubescape/kubescape", joinOwnerNRepo(gh.owner, gh.repo)) assert.Equal(t, "master", gh.branch) assert.Equal(t, "examples/online-boutique", gh.path) assert.False(t, gh.isFile) diff --git a/core/pkg/resourcehandler/resourceshandler.go b/core/pkg/resourcehandler/resourceshandler.go index 98ae2448..f68e43bc 100644 --- a/core/pkg/resourcehandler/resourceshandler.go +++ b/core/pkg/resourcehandler/resourceshandler.go @@ -2,8 +2,8 @@ package resourcehandler import ( "github.com/armosec/armoapi-go/armotypes" - "github.com/armosec/kubescape/v2/core/cautils" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" "k8s.io/apimachinery/pkg/version" ) diff --git a/core/pkg/resourcehandler/urlloader.go b/core/pkg/resourcehandler/urlloader.go index 1787c2c5..d93b3bf1 100644 --- a/core/pkg/resourcehandler/urlloader.go +++ b/core/pkg/resourcehandler/urlloader.go @@ -2,10 +2,10 @@ package resourcehandler import ( giturl "github.com/armosec/go-git-url" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" ) func loadResourcesFromUrl(inputPatterns []string) (map[string][]workloadinterface.IMetadata, error) { diff --git a/core/pkg/resourcehandler/urlloader_test.go b/core/pkg/resourcehandler/urlloader_test.go index 21eeea39..aa7356c8 100644 --- a/core/pkg/resourcehandler/urlloader_test.go +++ b/core/pkg/resourcehandler/urlloader_test.go @@ -8,13 +8,13 @@ import ( func TestLoadResourcesFromUrl(t *testing.T) { { - workloads, err := loadResourcesFromUrl([]string{"https://github.com/armosec/kubescape/tree/master/examples/online-boutique"}) + workloads, err := loadResourcesFromUrl([]string{"https://github.com/kubescape/kubescape/tree/master/examples/online-boutique"}) assert.NoError(t, err) assert.Equal(t, 12, len(workloads)) for i, w := range workloads { switch i { - case "https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml": + case "https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml": assert.Equal(t, 2, len(w)) assert.Equal(t, "apps/v1//Deployment/adservice", w[0].GetID()) assert.Equal(t, "/v1//Service/adservice", w[1].GetID()) @@ -22,13 +22,13 @@ func TestLoadResourcesFromUrl(t *testing.T) { } } { - workloads, err := loadResourcesFromUrl([]string{"https://github.com/armosec/kubescape"}) + workloads, err := loadResourcesFromUrl([]string{"https://github.com/kubescape/kubescape"}) assert.NoError(t, err) assert.Less(t, 12, len(workloads)) for i, w := range workloads { switch i { - case "https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml": + case "https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml": assert.Equal(t, 2, len(w)) assert.Equal(t, "apps/v1//Deployment/adservice", w[0].GetID()) assert.Equal(t, "/v1//Service/adservice", w[1].GetID()) @@ -36,13 +36,13 @@ func TestLoadResourcesFromUrl(t *testing.T) { } } { - workloads, err := loadResourcesFromUrl([]string{"https://github.com/armosec/kubescape/blob/master/examples/online-boutique/adservice.yaml"}) + workloads, err := loadResourcesFromUrl([]string{"https://github.com/kubescape/kubescape/blob/master/examples/online-boutique/adservice.yaml"}) assert.NoError(t, err) assert.Equal(t, 1, len(workloads)) for i, w := range workloads { switch i { - case "https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml": + case "https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml": assert.Equal(t, 2, len(w)) assert.Equal(t, "apps/v1//Deployment/adservice", w[0].GetID()) assert.Equal(t, "/v1//Service/adservice", w[1].GetID()) @@ -50,13 +50,13 @@ func TestLoadResourcesFromUrl(t *testing.T) { } } { - workloads, err := loadResourcesFromUrl([]string{"https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml"}) + workloads, err := loadResourcesFromUrl([]string{"https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml"}) assert.NoError(t, err) assert.Equal(t, 1, len(workloads)) for i, w := range workloads { switch i { - case "https://raw.githubusercontent.com/armosec/kubescape/master/examples/online-boutique/adservice.yaml": + case "https://raw.githubusercontent.com/kubescape/kubescape/master/examples/online-boutique/adservice.yaml": assert.Equal(t, 2, len(w)) assert.Equal(t, "apps/v1//Deployment/adservice", w[0].GetID()) assert.Equal(t, "/v1//Service/adservice", w[1].GetID()) diff --git a/core/pkg/resultshandling/printer/printresults.go b/core/pkg/resultshandling/printer/printresults.go index 55c54459..0b922cc9 100644 --- a/core/pkg/resultshandling/printer/printresults.go +++ b/core/pkg/resultshandling/printer/printresults.go @@ -5,8 +5,8 @@ import ( "os" "path/filepath" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" ) var INDENT = " " diff --git a/core/pkg/resultshandling/printer/v1/jsonprinter.go b/core/pkg/resultshandling/printer/v1/jsonprinter.go index 0ae77ca7..c90722bd 100644 --- a/core/pkg/resultshandling/printer/v1/jsonprinter.go +++ b/core/pkg/resultshandling/printer/v1/jsonprinter.go @@ -5,9 +5,9 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" ) type JsonPrinter struct { diff --git a/core/pkg/resultshandling/printer/v1/prometheusprinter.go b/core/pkg/resultshandling/printer/v1/prometheusprinter.go index a8a81c64..3ef81a6d 100644 --- a/core/pkg/resultshandling/printer/v1/prometheusprinter.go +++ b/core/pkg/resultshandling/printer/v1/prometheusprinter.go @@ -4,10 +4,10 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/reporthandling" ) diff --git a/core/pkg/resultshandling/printer/v2/controltable.go b/core/pkg/resultshandling/printer/v2/controltable.go index bd87cff5..e78288fb 100644 --- a/core/pkg/resultshandling/printer/v2/controltable.go +++ b/core/pkg/resultshandling/printer/v2/controltable.go @@ -4,8 +4,8 @@ import ( "fmt" "sort" - "github.com/armosec/kubescape/v2/core/cautils" "github.com/fatih/color" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling/apis" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/olekukonko/tablewriter" diff --git a/core/pkg/resultshandling/printer/v2/html/report.gohtml b/core/pkg/resultshandling/printer/v2/html/report.gohtml index 890dd579..2c51d34a 100644 --- a/core/pkg/resultshandling/printer/v2/html/report.gohtml +++ b/core/pkg/resultshandling/printer/v2/html/report.gohtml @@ -69,7 +69,7 @@ } - +

Kubescape Scan Report

{{ with .OPASessionObj.Report.SummaryDetails }}

By Controls

diff --git a/core/pkg/resultshandling/printer/v2/htmlprinter.go b/core/pkg/resultshandling/printer/v2/htmlprinter.go index f2d36ed6..5e0dfe13 100644 --- a/core/pkg/resultshandling/printer/v2/htmlprinter.go +++ b/core/pkg/resultshandling/printer/v2/htmlprinter.go @@ -8,10 +8,10 @@ import ( "sort" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/reporthandling/apis" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" diff --git a/core/pkg/resultshandling/printer/v2/jsonprinter.go b/core/pkg/resultshandling/printer/v2/jsonprinter.go index b823e9a0..7d123126 100644 --- a/core/pkg/resultshandling/printer/v2/jsonprinter.go +++ b/core/pkg/resultshandling/printer/v2/jsonprinter.go @@ -5,10 +5,10 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" ) type JsonPrinter struct { diff --git a/core/pkg/resultshandling/printer/v2/junit.go b/core/pkg/resultshandling/printer/v2/junit.go index b94a70e8..e73df0ad 100644 --- a/core/pkg/resultshandling/printer/v2/junit.go +++ b/core/pkg/resultshandling/printer/v2/junit.go @@ -7,11 +7,11 @@ import ( "sort" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/shared" ) @@ -19,7 +19,6 @@ import ( /* riskScore status - */ type JunitPrinter struct { writer *os.File diff --git a/core/pkg/resultshandling/printer/v2/pdf.go b/core/pkg/resultshandling/printer/v2/pdf.go index cdea95d9..cffdd1f4 100644 --- a/core/pkg/resultshandling/printer/v2/pdf.go +++ b/core/pkg/resultshandling/printer/v2/pdf.go @@ -9,10 +9,10 @@ import ( "strings" "time" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/johnfercher/maroto/pkg/color" diff --git a/core/pkg/resultshandling/printer/v2/prettyprinter.go b/core/pkg/resultshandling/printer/v2/prettyprinter.go index 4509d419..80e0cccf 100644 --- a/core/pkg/resultshandling/printer/v2/prettyprinter.go +++ b/core/pkg/resultshandling/printer/v2/prettyprinter.go @@ -6,10 +6,10 @@ import ( "sort" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" "github.com/enescakir/emoji" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/objectsenvelopes" "github.com/kubescape/opa-utils/reporthandling/apis" helpersv1 "github.com/kubescape/opa-utils/reporthandling/helpers/v1" diff --git a/core/pkg/resultshandling/printer/v2/prometheus.go b/core/pkg/resultshandling/printer/v2/prometheus.go index af426be9..3c7f0384 100644 --- a/core/pkg/resultshandling/printer/v2/prometheus.go +++ b/core/pkg/resultshandling/printer/v2/prometheus.go @@ -4,11 +4,11 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" ) diff --git a/core/pkg/resultshandling/printer/v2/prometheusutils.go b/core/pkg/resultshandling/printer/v2/prometheusutils.go index c37a8569..6ec997b8 100644 --- a/core/pkg/resultshandling/printer/v2/prometheusutils.go +++ b/core/pkg/resultshandling/printer/v2/prometheusutils.go @@ -4,8 +4,8 @@ import ( "fmt" "strings" - "github.com/armosec/kubescape/v2/core/cautils" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling/apis" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" diff --git a/core/pkg/resultshandling/printer/v2/resourcetable.go b/core/pkg/resultshandling/printer/v2/resourcetable.go index ad49ff6e..28951ec0 100644 --- a/core/pkg/resultshandling/printer/v2/resourcetable.go +++ b/core/pkg/resultshandling/printer/v2/resourcetable.go @@ -5,7 +5,7 @@ import ( "sort" "strings" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" "github.com/olekukonko/tablewriter" diff --git a/core/pkg/resultshandling/printer/v2/silentprinter.go b/core/pkg/resultshandling/printer/v2/silentprinter.go index f2524d8a..421cd85d 100644 --- a/core/pkg/resultshandling/printer/v2/silentprinter.go +++ b/core/pkg/resultshandling/printer/v2/silentprinter.go @@ -1,7 +1,7 @@ package v2 import ( - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" ) type SilentPrinter struct { diff --git a/core/pkg/resultshandling/printer/v2/utils.go b/core/pkg/resultshandling/printer/v2/utils.go index 575e1322..78f20594 100644 --- a/core/pkg/resultshandling/printer/v2/utils.go +++ b/core/pkg/resultshandling/printer/v2/utils.go @@ -1,10 +1,10 @@ package v2 import ( - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/reporthandling/results/v1/reportsummary" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" diff --git a/core/pkg/resultshandling/reporter/interface.go b/core/pkg/resultshandling/reporter/interface.go index 4a9d1d72..56ded5f6 100644 --- a/core/pkg/resultshandling/reporter/interface.go +++ b/core/pkg/resultshandling/reporter/interface.go @@ -1,6 +1,6 @@ package reporter -import "github.com/armosec/kubescape/v2/core/cautils" +import "github.com/kubescape/kubescape/v2/core/cautils" type IReport interface { Submit(opaSessionObj *cautils.OPASessionObj) error diff --git a/core/pkg/resultshandling/reporter/v2/mockreporter.go b/core/pkg/resultshandling/reporter/v2/mockreporter.go index f999cbe4..570757bd 100644 --- a/core/pkg/resultshandling/reporter/v2/mockreporter.go +++ b/core/pkg/resultshandling/reporter/v2/mockreporter.go @@ -4,8 +4,8 @@ import ( "fmt" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" ) const NO_SUBMIT_QUERY = "utm_source=GitHub&utm_medium=CLI&utm_campaign=no_submit" diff --git a/core/pkg/resultshandling/reporter/v2/reporteventreceiver.go b/core/pkg/resultshandling/reporter/v2/reporteventreceiver.go index 1fec5734..00a0d5de 100644 --- a/core/pkg/resultshandling/reporter/v2/reporteventreceiver.go +++ b/core/pkg/resultshandling/reporter/v2/reporteventreceiver.go @@ -8,11 +8,11 @@ import ( "os" "github.com/armosec/armoapi-go/apis" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/k8s-interface/workloadinterface" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "github.com/kubescape/opa-utils/reporthandling" "github.com/kubescape/opa-utils/reporthandling/results/v1/resourcesresults" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" diff --git a/core/pkg/resultshandling/reporter/v2/reporteventreceiver_test.go b/core/pkg/resultshandling/reporter/v2/reporteventreceiver_test.go index 24ea9fdf..d64a4f13 100644 --- a/core/pkg/resultshandling/reporter/v2/reporteventreceiver_test.go +++ b/core/pkg/resultshandling/reporter/v2/reporteventreceiver_test.go @@ -4,7 +4,7 @@ import ( "net/url" "testing" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" "github.com/stretchr/testify/assert" ) diff --git a/core/pkg/resultshandling/reporter/v2/reporteventreceiverutils.go b/core/pkg/resultshandling/reporter/v2/reporteventreceiverutils.go index 8b53908f..f3a4d19f 100644 --- a/core/pkg/resultshandling/reporter/v2/reporteventreceiverutils.go +++ b/core/pkg/resultshandling/reporter/v2/reporteventreceiverutils.go @@ -3,9 +3,9 @@ package v2 import ( "net/url" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" "github.com/google/uuid" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" ) diff --git a/core/pkg/resultshandling/results.go b/core/pkg/resultshandling/results.go index 747271cf..5545b397 100644 --- a/core/pkg/resultshandling/results.go +++ b/core/pkg/resultshandling/results.go @@ -3,13 +3,13 @@ package resultshandling import ( "encoding/json" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer" - printerv1 "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer/v1" - printerv2 "github.com/armosec/kubescape/v2/core/pkg/resultshandling/printer/v2" - "github.com/armosec/kubescape/v2/core/pkg/resultshandling/reporter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" + printerv1 "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer/v1" + printerv2 "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer/v2" + "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/reporter" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" ) diff --git a/core/pkg/score/score.go b/core/pkg/score/score.go index f6389a4e..e36b1c1b 100644 --- a/core/pkg/score/score.go +++ b/core/pkg/score/score.go @@ -5,11 +5,14 @@ import ( "github.com/kubescape/opa-utils/score" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" ) -/* provides a wrapper for scoreUtils, since there's no common interface between postureReportV1 and PostureReportV2 +/* + provides a wrapper for scoreUtils, since there's no common interface between postureReportV1 and PostureReportV2 + and the need of concrete objects + I've decided to create scoreWrapper that will allow calculating score regardless (as long as opaSessionObj is there) */ type ScoreWrapper struct { diff --git a/examples/cloud-vendor-integration/aws.sh b/examples/cloud-vendor-integration/aws.sh index 67f36bfe..58bbcad9 100755 --- a/examples/cloud-vendor-integration/aws.sh +++ b/examples/cloud-vendor-integration/aws.sh @@ -8,7 +8,7 @@ # Set environment variables echo 'Set environment variables' -export kubescape_namespace=armo-system +export kubescape_namespace=kubescape export kubescape_serviceaccount=armo-kubescape-service-account # Get current context @@ -65,4 +65,4 @@ eksctl create iamserviceaccount \ # Install/Upgrade Kubescape chart echo 'Install/Upgrade Kubescape chart' -helm upgrade --install armo armo-components/ -n armo-system --create-namespace --set clusterName=$cluster_name --set cloud_provider_engine=eks --set createKubescapeServiceAccount=false --set cloudRegion=$cluster_region +helm upgrade --install armo armo-components/ -n kubescape --create-namespace --set clusterName=$cluster_name --set cloud_provider_engine=eks --set createKubescapeServiceAccount=false --set cloudRegion=$cluster_region diff --git a/examples/cloud-vendor-integration/gcp.sh b/examples/cloud-vendor-integration/gcp.sh index 0f33cb15..794e5d03 100755 --- a/examples/cloud-vendor-integration/gcp.sh +++ b/examples/cloud-vendor-integration/gcp.sh @@ -17,7 +17,7 @@ gcloud iam service-accounts create kubescape --display-name=kubescape # Set environment variables echo 'Set environment variables' -export kubescape_namespace=armo-system +export kubescape_namespace=kubescape export kubescape_serviceaccount=armo-kubescape-service-account # Get current GCP project @@ -46,4 +46,4 @@ gcloud iam service-accounts add-iam-policy-binding $gcp_service_account --role r # Install/Upgrade Kubescape chart echo 'Install/Upgrade Kubescape chart' -helm upgrade --install armo armo-components/ -n armo-system --create-namespace --set cloud_provider_engine=gke --set gke_service_account=$gcp_service_account --set cloudRegion=$CLUSTER_REGION --set clusterName=$CLUSTER_NAME --set gkeProject=$gcp_project +helm upgrade --install armo armo-components/ -n kubescape --create-namespace --set cloud_provider_engine=gke --set gke_service_account=$gcp_service_account --set cloudRegion=$CLUSTER_REGION --set clusterName=$CLUSTER_NAME --set gkeProject=$gcp_project diff --git a/examples/exceptions/README.md b/examples/exceptions/README.md index 2edb3d29..a92e7d6f 100644 --- a/examples/exceptions/README.md +++ b/examples/exceptions/README.md @@ -24,7 +24,7 @@ e.g. When a `kube-system` resource fails and it is ok, simply add the resource t * `controlID` - Control ID can be find [here](https://github.com/armosec/regolibrary/tree/master/controls) (regex supported) * `ruleName` - Rule names can be find [here](https://github.com/armosec/regolibrary/tree/master/rules) (regex supported) -You can find [here](https://github.com/armosec/kubescape/tree/master/examples/exceptions) some examples of exceptions files +You can find [here](https://github.com/kubescape/kubescape/tree/master/examples/exceptions) some examples of exceptions files ## Usage diff --git a/examples/output_mocks/prometheus-verbose-flag.txt b/examples/output_mocks/prometheus-verbose-flag.txt index f77adaff..b798d4ec 100644 --- a/examples/output_mocks/prometheus-verbose-flag.txt +++ b/examples/output_mocks/prometheus-verbose-flag.txt @@ -15,9 +15,9 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" @@ -43,9 +43,9 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of NSA control Privileged container @@ -57,9 +57,9 @@ kubescape_resources_failed_count{framework="NSA",control="Privileged container"} # Failed object from "NSA" control "Privileged container" kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Privileged container" kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Privileged container" @@ -95,9 +95,9 @@ kubescape_object_failed_count{framework="NSA",control="Privileged container",nam # Failed object from "NSA" control "Privileged container" kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Privileged container" -kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Privileged container",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Allowed hostPath kubescape_resources_found_count{framework="NSA",control="Allowed hostPath"} 22 # Number of resources excluded as part of NSA control Allowed hostPath @@ -117,9 +117,9 @@ kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespa # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" @@ -141,9 +141,9 @@ kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespa # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" @@ -155,11 +155,11 @@ kubescape_resources_excluded_count{framework="NSA",control="Automatic mapping of # Number of resources failed as part of NSA control Automatic mapping of service account kubescape_resources_failed_count{framework="NSA",control="Automatic mapping of service account"} 47 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" @@ -267,9 +267,9 @@ kubescape_object_failed_count{framework="NSA",control="hostNetwork access",names # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "hostNetwork access" @@ -295,9 +295,9 @@ kubescape_object_failed_count{framework="NSA",control="hostNetwork access",names # Failed object from "NSA" control "hostNetwork access" kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "hostNetwork access" -kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="hostNetwork access",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Resource policies kubescape_resources_found_count{framework="NSA",control="Resource policies"} 22 # Number of resources excluded as part of NSA control Resource policies @@ -319,13 +319,13 @@ kubescape_object_failed_count{framework="NSA",control="Resource policies",namesp # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Resource policies" @@ -365,9 +365,9 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" @@ -393,9 +393,9 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of NSA control Applications credentials in configuration files @@ -405,7 +405,7 @@ kubescape_resources_excluded_count{framework="NSA",control="Applications credent # Number of resources failed as part of NSA control Applications credentials in configuration files kubescape_resources_failed_count{framework="NSA",control="Applications credentials in configuration files"} 8 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" @@ -431,15 +431,15 @@ kubescape_object_failed_count{framework="NSA",control="Applications credentials # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" @@ -465,9 +465,9 @@ kubescape_object_failed_count{framework="NSA",control="Applications credentials # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" @@ -527,9 +527,9 @@ kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",na # Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" -kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" kubescape_object_failed_count{framework="NSA",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Cluster-admin binding" @@ -625,9 +625,9 @@ kubescape_object_failed_count{framework="NSA",control="Exec into container",name # Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" -kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" kubescape_object_failed_count{framework="NSA",control="Exec into container",namespace="kube-system",name="replication-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "NSA" control "Exec into container" @@ -737,13 +737,13 @@ kubescape_resources_failed_count{framework="NSA",control="Insecure capabilities" # Failed object from "NSA" control "Insecure capabilities" kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Insecure capabilities" -kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Insecure capabilities" kubescape_object_failed_count{framework="NSA",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Insecure capabilities" @@ -787,9 +787,9 @@ kubescape_resources_failed_count{framework="NSA",control="Linux hardening"} 17 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" @@ -815,9 +815,9 @@ kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespac # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" @@ -835,9 +835,9 @@ kubescape_resources_excluded_count{framework="NSA",control="Ingress and Egress b # Number of resources failed as part of NSA control Ingress and Egress blocked kubescape_resources_failed_count{framework="NSA",control="Ingress and Egress blocked"} 22 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" @@ -865,9 +865,9 @@ kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocke # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" @@ -885,7 +885,7 @@ kubescape_resources_excluded_count{framework="NSA",control="Network policies"} 0 # Number of resources failed as part of NSA control Network policies kubescape_resources_failed_count{framework="NSA",control="Network policies"} 7 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" @@ -907,9 +907,9 @@ kubescape_resources_failed_count{framework="NSA",control="CVE-2021-25742-nginx-i # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -949,13 +949,13 @@ kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingr # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="NSA",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -983,7 +983,7 @@ kubescape_resources_excluded_count{framework="MITRE",control="Access container s # Number of resources failed as part of MITRE control Access container service account kubescape_resources_failed_count{framework="MITRE",control="Access container service account"} 31 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1019,9 +1019,9 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",name="nginx-ingress-roles-binding",groupVersionKind="rbac.authorization.k8s.io/v1/ClusterRoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1179,13 +1179,13 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "MITRE" control "Access container service account" @@ -1421,7 +1421,7 @@ kubescape_resources_excluded_count{framework="MITRE",control="Applications crede # Number of resources failed as part of MITRE control Applications credentials in configuration files kubescape_resources_failed_count{framework="MITRE",control="Applications credentials in configuration files"} 8 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" @@ -1437,9 +1437,9 @@ kubescape_object_failed_count{framework="MITRE",control="Applications credential # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" @@ -1477,9 +1477,9 @@ kubescape_object_failed_count{framework="MITRE",control="Applications credential # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kubelet-config-1.22",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" @@ -1491,11 +1491,11 @@ kubescape_object_failed_count{framework="MITRE",control="Applications credential # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" @@ -1523,9 +1523,9 @@ kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding", # Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" -kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" kubescape_object_failed_count{framework="MITRE",control="Cluster-admin binding",namespace="kube-system",name="kube-scheduler",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Cluster-admin binding" @@ -1641,7 +1641,7 @@ kubescape_object_failed_count{framework="MITRE",control="Cluster internal networ # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" @@ -1661,9 +1661,9 @@ kubescape_object_failed_count{framework="MITRE",control="Exec into container",na # Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" -kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" kubescape_object_failed_count{framework="MITRE",control="Exec into container",namespace="kube-system",name="endpointslice-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Exec into container" @@ -1779,19 +1779,19 @@ kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespa # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" @@ -1821,9 +1821,9 @@ kubescape_resources_excluded_count{framework="MITRE",control="Kubernetes CronJob # Number of resources failed as part of MITRE control Kubernetes CronJob kubescape_resources_failed_count{framework="MITRE",control="Kubernetes CronJob"} 2 # Failed object from "MITRE" control "Kubernetes CronJob" -kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Kubernetes CronJob" -kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control List Kubernetes secrets kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 74 # Number of resources excluded as part of MITRE control List Kubernetes secrets @@ -1831,9 +1831,9 @@ kubescape_resources_excluded_count{framework="MITRE",control="List Kubernetes se # Number of resources failed as part of MITRE control List Kubernetes secrets kubescape_resources_failed_count{framework="MITRE",control="List Kubernetes secrets"} 15 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" @@ -1961,13 +1961,13 @@ kubescape_object_failed_count{framework="MITRE",control="Mount service principal # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" @@ -1991,9 +1991,9 @@ kubescape_object_failed_count{framework="MITRE",control="Mount service principal # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Number of resources found as part of MITRE control Network mapping @@ -2003,7 +2003,7 @@ kubescape_resources_excluded_count{framework="MITRE",control="Network mapping"} # Number of resources failed as part of MITRE control Network mapping kubescape_resources_failed_count{framework="MITRE",control="Network mapping"} 7 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" @@ -2029,9 +2029,9 @@ kubescape_object_failed_count{framework="MITRE",control="Privileged container",n # Failed object from "MITRE" control "Privileged container" kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Privileged container" kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Privileged container" @@ -2063,9 +2063,9 @@ kubescape_object_failed_count{framework="MITRE",control="Privileged container",n # Failed object from "MITRE" control "Privileged container" kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Privileged container" -kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Privileged container",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control Writable hostPath mount kubescape_resources_found_count{framework="MITRE",control="Writable hostPath mount"} 22 # Number of resources excluded as part of MITRE control Writable hostPath mount @@ -2077,7 +2077,7 @@ kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Writable hostPath mount" @@ -2093,7 +2093,7 @@ kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" @@ -2113,9 +2113,9 @@ kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control Malicious admission controller (mutating) kubescape_resources_found_count{framework="MITRE",control="Malicious admission controller (mutating)"} 1 # Number of resources excluded as part of MITRE control Malicious admission controller (mutating) @@ -2151,9 +2151,9 @@ kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes event # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" -kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" kubescape_object_failed_count{framework="MITRE",control="Delete Kubernetes events",namespace="kube-system",name="deployment-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Delete Kubernetes events" @@ -2277,9 +2277,9 @@ kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",name="system:anonymous",groupVersionKind="rbac.authorization.k8s.io/User"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" -kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" kubescape_object_failed_count{framework="MITRE",control="CoreDNS poisoning",namespace="kube-system",name="namespace-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "CoreDNS poisoning" @@ -2415,9 +2415,9 @@ kubescape_object_failed_count{framework="MITRE",control="Data Destruction",names # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" -kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" kubescape_object_failed_count{framework="MITRE",control="Data Destruction",namespace="kube-system",name="pv-protection-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "Data Destruction" @@ -2501,9 +2501,9 @@ kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-in # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -2561,13 +2561,13 @@ kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-in # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Number of resources found as part of ArmoBest control Immutable container filesystem kubescape_resources_found_count{framework="ArmoBest",control="Immutable container filesystem"} 22 # Number of resources excluded as part of ArmoBest control Immutable container filesystem @@ -2585,9 +2585,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Immutable container # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" @@ -2613,9 +2613,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Immutable container # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Privileged container @@ -2627,9 +2627,9 @@ kubescape_resources_failed_count{framework="ArmoBest",control="Privileged contai # Failed object from "ArmoBest" control "Privileged container" kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Privileged container" kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Privileged container" @@ -2665,9 +2665,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Privileged container # Failed object from "ArmoBest" control "Privileged container" kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Privileged container" -kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Privileged container",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Allowed hostPath kubescape_resources_found_count{framework="ArmoBest",control="Allowed hostPath"} 22 # Number of resources excluded as part of ArmoBest control Allowed hostPath @@ -2683,7 +2683,7 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",na # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" @@ -2693,7 +2693,7 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",na # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" @@ -2711,9 +2711,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",na # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" @@ -2729,11 +2729,11 @@ kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" @@ -2837,9 +2837,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access", # Failed object from "ArmoBest" control "hostNetwork access" kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "hostNetwork access" kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "hostNetwork access" @@ -2865,9 +2865,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access", # Failed object from "ArmoBest" control "hostNetwork access" kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "hostNetwork access" -kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="hostNetwork access",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Resource policies kubescape_resources_found_count{framework="ArmoBest",control="Resource policies"} 22 # Number of resources excluded as part of ArmoBest control Resource policies @@ -2889,15 +2889,15 @@ kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",n # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Resource policies" @@ -2935,9 +2935,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege esca # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" @@ -2963,9 +2963,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege esca # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of ArmoBest control Applications credentials in configuration files @@ -2975,7 +2975,7 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Applications cr # Number of resources failed as part of ArmoBest control Applications credentials in configuration files kubescape_resources_failed_count{framework="ArmoBest",control="Applications credentials in configuration files"} 8 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" @@ -2991,9 +2991,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Applications credent # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kube-public",name="cluster-info",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" @@ -3007,11 +3007,11 @@ kubescape_object_failed_count{framework="ArmoBest",control="Applications credent # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" @@ -3023,9 +3023,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Applications credent # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="default",name="kubescape",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" @@ -3077,9 +3077,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin bindin # Failed object from "ArmoBest" control "Cluster-admin binding" kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" -kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" kubescape_object_failed_count{framework="ArmoBest",control="Cluster-admin binding",namespace="kube-system",name="daemon-set-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Cluster-admin binding" @@ -3275,9 +3275,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Exec into container" # Failed object from "ArmoBest" control "Exec into container" kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kube-system",name="service-controller",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Exec into container" -kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Exec into container" kubescape_object_failed_count{framework="ArmoBest",control="Exec into container",name="system:bootstrappers:kubeadm:default-node-token",groupVersionKind="rbac.authorization.k8s.io/Group"} 6 # Failed object from "ArmoBest" control "Exec into container" @@ -3307,9 +3307,9 @@ kubescape_resources_failed_count{framework="ArmoBest",control="Insecure capabili # Failed object from "ArmoBest" control "Insecure capabilities" kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="coredns",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="cyberarmor-system",name="ca-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" @@ -3345,9 +3345,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilitie # Failed object from "ArmoBest" control "Insecure capabilities" kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Insecure capabilities" -kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Insecure capabilities",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Linux hardening kubescape_resources_found_count{framework="ArmoBest",control="Linux hardening"} 22 # Number of resources excluded as part of ArmoBest control Linux hardening @@ -3359,9 +3359,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",nam # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" @@ -3385,9 +3385,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",nam # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Linux hardening" @@ -3417,9 +3417,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress b # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-oracle",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" @@ -3445,9 +3445,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress b # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Network policies kubescape_resources_found_count{framework="ArmoBest",control="Network policies"} 7 # Number of resources excluded as part of ArmoBest control Network policies @@ -3455,7 +3455,7 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Network policie # Number of resources failed as part of ArmoBest control Network policies kubescape_resources_failed_count{framework="ArmoBest",control="Network policies"} 7 # Failed object from "ArmoBest" control "Network policies" -kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" @@ -3481,13 +3481,13 @@ kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -3521,9 +3521,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-system",name="kube-proxy",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="ArmoBest",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-ocimage",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -3561,9 +3561,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",na # Failed object from "ArmoBest" control "No impersonation" kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "No impersonation" -kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "No impersonation" kubescape_object_failed_count{framework="ArmoBest",control="No impersonation",namespace="kube-system",name="root-ca-cert-publisher",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "No impersonation" @@ -3675,9 +3675,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privi # Failed object from "ArmoBest" control "Portforwarding privileges" kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" @@ -3789,9 +3789,9 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Image pull poli # Number of resources failed as part of ArmoBest control Image pull policy on latest image tag kubescape_resources_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 2 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" @@ -3817,9 +3817,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on # Failed object from "ArmoBest" control "Image pull policy on latest image tag" kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" @@ -3845,7 +3845,7 @@ kubescape_object_failed_count{framework="ArmoBest",control="Namespace without se # Failed object from "ArmoBest" control "Namespace without service accounts" kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kube-node-lease",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" @@ -3941,11 +3941,11 @@ kubescape_object_failed_count{framework="ArmoBest",control="Namespace without se # Failed object from "ArmoBest" control "Namespace without service accounts" kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="nginx-ingress",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Namespace without service accounts" -kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Namespace without service accounts",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Number of resources found as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability kubescape_resources_found_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability"} 36 # Number of resources excluded as part of cve-scanning control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -3975,13 +3975,13 @@ kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-n # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="nginx-ingress",name="ingress-controller-leader-nginx",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-be-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-kubescape-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-scan-scheduler-config",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" @@ -3999,9 +3999,9 @@ kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-n # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kube-node-lease",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" -kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" kubescape_object_failed_count{framework="cve-scanning",control="CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "cve-scanning" control "CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability" diff --git a/examples/output_mocks/prometheus.txt b/examples/output_mocks/prometheus.txt index 51a594bb..51822bf8 100644 --- a/examples/output_mocks/prometheus.txt +++ b/examples/output_mocks/prometheus.txt @@ -17,9 +17,9 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="cyberarmor-system",name="ca-dashboard-aggregator",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Immutable container filesystem" @@ -43,9 +43,9 @@ kubescape_object_failed_count{framework="NSA",control="Immutable container files # Failed object from "NSA" control "Immutable container filesystem" kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Immutable container filesystem" -kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Immutable container filesystem",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Privileged container kubescape_resources_found_count{framework="NSA",control="Privileged container"} 22 # Number of resources excluded as part of NSA control Privileged container @@ -67,7 +67,7 @@ kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespa # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allowed hostPath" -kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" kubescape_object_failed_count{framework="NSA",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allowed hostPath" @@ -157,11 +157,11 @@ kubescape_object_failed_count{framework="NSA",control="Automatic mapping of serv # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" kubescape_object_failed_count{framework="NSA",control="Automatic mapping of service account",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "NSA" control "Automatic mapping of service account" @@ -199,9 +199,9 @@ kubescape_resources_excluded_count{framework="NSA",control="Resource policies"} # Number of resources failed as part of NSA control Resource policies kubescape_resources_failed_count{framework="NSA",control="Resource policies"} 9 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" -kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Resource policies" kubescape_object_failed_count{framework="NSA",control="Resource policies",namespace="kube-system",name="kube-apiserver-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Resource policies" @@ -233,9 +233,9 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Allow privilege escalation" @@ -261,9 +261,9 @@ kubescape_object_failed_count{framework="NSA",control="Allow privilege escalatio # Failed object from "NSA" control "Allow privilege escalation" kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Allow privilege escalation" -kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Allow privilege escalation",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Applications credentials in configuration files kubescape_resources_found_count{framework="NSA",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of NSA control Applications credentials in configuration files @@ -271,7 +271,7 @@ kubescape_resources_excluded_count{framework="NSA",control="Applications credent # Number of resources failed as part of NSA control Applications credentials in configuration files kubescape_resources_failed_count{framework="NSA",control="Applications credentials in configuration files"} 8 # Failed object from "NSA" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="NSA",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "NSA" control "Applications credentials in configuration files" @@ -331,9 +331,9 @@ kubescape_resources_failed_count{framework="NSA",control="Linux hardening"} 17 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="cyberarmor-system",name="ca-posture",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Linux hardening" @@ -359,9 +359,9 @@ kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespac # Failed object from "NSA" control "Linux hardening" kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Linux hardening" -kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Linux hardening",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Ingress and Egress blocked kubescape_resources_found_count{framework="NSA",control="Ingress and Egress blocked"} 22 # Number of resources excluded as part of NSA control Ingress and Egress blocked @@ -379,9 +379,9 @@ kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocke # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-rbac",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" @@ -409,9 +409,9 @@ kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocke # Failed object from "NSA" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "NSA" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="NSA",control="Ingress and Egress blocked",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of NSA control Network policies kubescape_resources_found_count{framework="NSA",control="Network policies"} 7 # Number of resources excluded as part of NSA control Network policies @@ -429,7 +429,7 @@ kubescape_object_failed_count{framework="NSA",control="Network policies",name="k # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="nginx-ingress",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" -kubescape_object_failed_count{framework="NSA",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="NSA",control="Network policies",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "NSA" control "Network policies" kubescape_object_failed_count{framework="NSA",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Number of resources found as part of NSA control CVE-2021-25742-nginx-ingress-snippet-annotation-vulnerability @@ -449,7 +449,7 @@ kubescape_resources_failed_count{framework="MITRE",control="Access container ser # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kube-system",name="system:persistent-volume-provisioner",groupVersionKind="rbac.authorization.k8s.io/v1/RoleBinding"} 1 # Failed object from "MITRE" control "Access container service account" @@ -505,9 +505,9 @@ kubescape_object_failed_count{framework="MITRE",control="Access container servic # Failed object from "MITRE" control "Access container service account" kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Access container service account" -kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Access container service account",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of MITRE control Applications credentials in configuration files kubescape_resources_found_count{framework="MITRE",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of MITRE control Applications credentials in configuration files @@ -521,7 +521,7 @@ kubescape_object_failed_count{framework="MITRE",control="Applications credential # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kube-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="MITRE",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "MITRE" control "Applications credentials in configuration files" @@ -551,7 +551,7 @@ kubescape_resources_excluded_count{framework="MITRE",control="Cluster internal n # Number of resources failed as part of MITRE control Cluster internal networking kubescape_resources_failed_count{framework="MITRE",control="Cluster internal networking"} 7 # Failed object from "MITRE" control "Cluster internal networking" -kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" kubescape_object_failed_count{framework="MITRE",control="Cluster internal networking",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Cluster internal networking" @@ -593,7 +593,7 @@ kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespa # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" kubescape_object_failed_count{framework="MITRE",control="hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "hostPath mount" @@ -605,9 +605,9 @@ kubescape_resources_excluded_count{framework="MITRE",control="Kubernetes CronJob # Number of resources failed as part of MITRE control Kubernetes CronJob kubescape_resources_failed_count{framework="MITRE",control="Kubernetes CronJob"} 2 # Failed object from "MITRE" control "Kubernetes CronJob" -kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "MITRE" control "Kubernetes CronJob" -kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="MITRE",control="Kubernetes CronJob",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of MITRE control List Kubernetes secrets kubescape_resources_found_count{framework="MITRE",control="List Kubernetes secrets"} 74 # Number of resources excluded as part of MITRE control List Kubernetes secrets @@ -617,9 +617,9 @@ kubescape_resources_failed_count{framework="MITRE",control="List Kubernetes secr # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" -kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" kubescape_object_failed_count{framework="MITRE",control="List Kubernetes secrets",namespace="cyberarmor-system",name="ca-controller-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "MITRE" control "List Kubernetes secrets" @@ -661,7 +661,7 @@ kubescape_object_failed_count{framework="MITRE",control="Mount service principal # Failed object from "MITRE" control "Mount service principal" kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="cyberarmor-system",name="ca-websocket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Mount service principal" -kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Mount service principal",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Number of resources found as part of MITRE control Network mapping kubescape_resources_found_count{framework="MITRE",control="Network mapping"} 7 # Number of resources excluded as part of MITRE control Network mapping @@ -669,7 +669,7 @@ kubescape_resources_excluded_count{framework="MITRE",control="Network mapping"} # Number of resources failed as part of MITRE control Network mapping kubescape_resources_failed_count{framework="MITRE",control="Network mapping"} 7 # Failed object from "MITRE" control "Network mapping" -kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" kubescape_object_failed_count{framework="MITRE",control="Network mapping",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "MITRE" control "Network mapping" @@ -705,7 +705,7 @@ kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kube-system",name="kube-controller-manager-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "MITRE" control "Writable hostPath mount" -kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" kubescape_object_failed_count{framework="MITRE",control="Writable hostPath mount",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "MITRE" control "Writable hostPath mount" @@ -855,15 +855,15 @@ kubescape_object_failed_count{framework="ArmoBest",control="Immutable container # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Immutable container filesystem" -kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Immutable container filesystem",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Privileged container kubescape_resources_found_count{framework="ArmoBest",control="Privileged container"} 22 # Number of resources excluded as part of ArmoBest control Privileged container @@ -887,7 +887,7 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",na # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" -kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" kubescape_object_failed_count{framework="ArmoBest",control="Allowed hostPath",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allowed hostPath" @@ -979,11 +979,11 @@ kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" -kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="armo-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="kubescape",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" kubescape_object_failed_count{framework="ArmoBest",control="Automatic mapping of service account",namespace="cyberarmor-system",name="default",groupVersionKind="v1/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Automatic mapping of service account" @@ -1019,9 +1019,9 @@ kubescape_resources_failed_count{framework="ArmoBest",control="Resource policies # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Resource policies" -kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Resource policies" kubescape_object_failed_count{framework="ArmoBest",control="Resource policies",namespace="kube-system",name="etcd-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Resource policies" @@ -1051,9 +1051,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege esca # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="cyberarmor-system",name="ca-webhook",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" @@ -1079,9 +1079,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege esca # Failed object from "ArmoBest" control "Allow privilege escalation" kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Allow privilege escalation" -kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Allow privilege escalation",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Applications credentials in configuration files kubescape_resources_found_count{framework="ArmoBest",control="Applications credentials in configuration files"} 44 # Number of resources excluded as part of ArmoBest control Applications credentials in configuration files @@ -1089,7 +1089,7 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Applications cr # Number of resources failed as part of ArmoBest control Applications credentials in configuration files kubescape_resources_failed_count{framework="ArmoBest",control="Applications credentials in configuration files"} 8 # Failed object from "ArmoBest" control "Applications credentials in configuration files" -kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="armo-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="kubescape",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" kubescape_object_failed_count{framework="ArmoBest",control="Applications credentials in configuration files",namespace="cyberarmor-system",name="kube-root-ca.crt",groupVersionKind="v1/ConfigMap"} 1 # Failed object from "ArmoBest" control "Applications credentials in configuration files" @@ -1149,9 +1149,9 @@ kubescape_resources_failed_count{framework="ArmoBest",control="Linux hardening"} # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="storage-provisioner",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="cyberarmor-system",name="ca-audit",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Linux hardening" @@ -1177,9 +1177,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",nam # Failed object from "ArmoBest" control "Linux hardening" kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Linux hardening" -kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Linux hardening",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Ingress and Egress blocked kubescape_resources_found_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 # Number of resources excluded as part of ArmoBest control Ingress and Egress blocked @@ -1187,9 +1187,9 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Ingress and Egr # Number of resources failed as part of ArmoBest control Ingress and Egress blocked kubescape_resources_failed_count{framework="ArmoBest",control="Ingress and Egress blocked"} 22 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-vuln-scan",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-web-socket",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="cyberarmor-system",name="ca-notification-server",groupVersionKind="apps/v1/Deployment"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" @@ -1217,9 +1217,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress b # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-proxy",groupVersionKind="apps/v1/DaemonSet"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" -kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" kubescape_object_failed_count{framework="ArmoBest",control="Ingress and Egress blocked",namespace="kube-system",name="kube-scheduler-david-virtualbox",groupVersionKind="v1/Pod"} 1 # Failed object from "ArmoBest" control "Ingress and Egress blocked" @@ -1237,7 +1237,7 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Network policie # Number of resources failed as part of ArmoBest control Network policies kubescape_resources_failed_count{framework="ArmoBest",control="Network policies"} 7 # Failed object from "ArmoBest" control "Network policies" -kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="armo-system",groupVersionKind="v1/Namespace"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="kubescape",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" kubescape_object_failed_count{framework="ArmoBest",control="Network policies",name="cyberarmor-system",groupVersionKind="v1/Namespace"} 1 # Failed object from "ArmoBest" control "Network policies" @@ -1289,9 +1289,9 @@ kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privi # Failed object from "ArmoBest" control "Portforwarding privileges" kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="nginx-ingress",name="nginx-ingress",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kubescape",name="armo-kubescape-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" -kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="armo-system",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",namespace="kubescape",name="armo-scanner-service-account",groupVersionKind="/ServiceAccount"} 1 # Failed object from "ArmoBest" control "Portforwarding privileges" kubescape_object_failed_count{framework="ArmoBest",control="Portforwarding privileges",name="system:masters",groupVersionKind="rbac.authorization.k8s.io/Group"} 1 # Number of resources found as part of ArmoBest control Image pull policy on latest image tag @@ -1301,9 +1301,9 @@ kubescape_resources_excluded_count{framework="ArmoBest",control="Image pull poli # Number of resources failed as part of ArmoBest control Image pull policy on latest image tag kubescape_resources_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag"} 2 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-kubescape",groupVersionKind="batch/v1/CronJob"} 1 # Failed object from "ArmoBest" control "Image pull policy on latest image tag" -kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="armo-system",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 +kubescape_object_failed_count{framework="ArmoBest",control="Image pull policy on latest image tag",namespace="kubescape",name="armo-scan-scheduler",groupVersionKind="batch/v1/CronJob"} 1 # Number of resources found as part of ArmoBest control Namespace without service accounts kubescape_resources_found_count{framework="ArmoBest",control="Namespace without service accounts"} 54 # Number of resources excluded as part of ArmoBest control Namespace without service accounts diff --git a/go.mod b/go.mod index 3491b64b..fca6e349 100644 --- a/go.mod +++ b/go.mod @@ -1,4 +1,4 @@ -module github.com/armosec/kubescape/v2 +module github.com/kubescape/kubescape/v2 go 1.18 diff --git a/httphandler/README.md b/httphandler/README.md index 28201936..b40a9ec7 100644 --- a/httphandler/README.md +++ b/httphandler/README.md @@ -149,7 +149,7 @@ curl --header "Content-Type: application/json" --request POST --data '{"hostScan ```bash curl --header "Content-Type: application/json" \ --request POST \ - --data '{"hostScanner":true, "submit":true, "includeNamespaces": ["ks-scanner"], "targetType": "framework", "targetNames": ["nsa"] }' \ + --data '{"hostScanner":true, "submit":true, "includeNamespaces": ["kubescape"], "targetType": "framework", "targetNames": ["nsa"] }' \ http://127.0.0.1:8080/v1/scan ``` diff --git a/httphandler/build.py b/httphandler/build.py index 44c74815..317993a0 100644 --- a/httphandler/build.py +++ b/httphandler/build.py @@ -4,7 +4,7 @@ import hashlib import platform import subprocess -BASE_GETTER_CONST = "github.com/armosec/kubescape/v2/core/cautils/getter" +BASE_GETTER_CONST = "github.com/kubescape/kubescape/v2/core/cautils/getter" def checkStatus(status, msg): if status != 0: @@ -36,7 +36,7 @@ def main(): # Set some variables packageName = getPackageName() - buildUrl = "github.com/armosec/kubescape/v2/core/cautils.BuildNumber" + buildUrl = "github.com/kubescape/kubescape/v2/core/cautils.BuildNumber" releaseVersion = os.getenv("RELEASE") # Create build directory diff --git a/httphandler/docs/swagger.yaml b/httphandler/docs/swagger.yaml index d6f56e83..1d83789a 100644 --- a/httphandler/docs/swagger.yaml +++ b/httphandler/docs/swagger.yaml @@ -20,7 +20,7 @@ definitions: Same as `kubescape scan --excluded-namespaces`. example: - - armo-system + - kubescape - kube-system items: type: string diff --git a/httphandler/examples/microservice/ks-deployment.yaml b/httphandler/examples/microservice/ks-deployment.yaml index 6382e47e..83356e05 100644 --- a/httphandler/examples/microservice/ks-deployment.yaml +++ b/httphandler/examples/microservice/ks-deployment.yaml @@ -4,7 +4,7 @@ kind: Namespace metadata: labels: app: kubescape - name: ks-scanner + name: kubescape --- # ------------------- Kubescape Service Account ------------------- # apiVersion: v1 @@ -13,7 +13,7 @@ metadata: labels: app: kubescape name: kubescape-discovery - namespace: ks-scanner + namespace: kubescape --- # ------------------- Kubescape Cluster Role & Cluster Role Binding ------------------- # kind: ClusterRole @@ -38,13 +38,13 @@ roleRef: subjects: - kind: ServiceAccount name: kubescape-discovery - namespace: ks-scanner + namespace: kubescape --- apiVersion: v1 kind: Service metadata: name: kubescape - namespace: ks-scanner + namespace: kubescape labels: app: kubescape spec: @@ -61,7 +61,7 @@ apiVersion: apps/v1 kind: Deployment metadata: name: kubescape - namespace: ks-scanner + namespace: kubescape labels: app: kubescape spec: @@ -89,7 +89,7 @@ spec: port: 8080 initialDelaySeconds: 3 periodSeconds: 3 - image: quay.io/armosec/kubescape:latest + image: quay.io/kubescape/kubescape:latest imagePullPolicy: Always env: - name: KS_DEFAULT_CONFIGMAP_NAMESPACE diff --git a/httphandler/examples/prometheus/ks-deployment.yaml b/httphandler/examples/prometheus/ks-deployment.yaml index 7755af14..53d2c077 100644 --- a/httphandler/examples/prometheus/ks-deployment.yaml +++ b/httphandler/examples/prometheus/ks-deployment.yaml @@ -4,7 +4,7 @@ kind: Namespace metadata: labels: app: kubescape - name: ks-scanner + name: kubescape --- # ------------------- Kubescape Service Account ------------------- # apiVersion: v1 @@ -13,7 +13,7 @@ metadata: labels: app: kubescape name: kubescape-discovery - namespace: ks-scanner + namespace: kubescape --- # ------------------- Kubescape Cluster Role & Cluster Role Binding ------------------- # kind: ClusterRole @@ -38,13 +38,13 @@ roleRef: subjects: - kind: ServiceAccount name: kubescape-discovery - namespace: ks-scanner + namespace: kubescape --- apiVersion: v1 kind: Service metadata: name: kubescape - namespace: ks-scanner + namespace: kubescape labels: app: kubescape spec: @@ -61,7 +61,7 @@ apiVersion: apps/v1 kind: Deployment metadata: name: kubescape - namespace: ks-scanner + namespace: kubescape labels: app: kubescape spec: @@ -89,7 +89,7 @@ spec: port: 8080 initialDelaySeconds: 3 periodSeconds: 3 - image: quay.io/armosec/kubescape:latest + image: quay.io/kubescape/kubescape:latest imagePullPolicy: Always env: - name: KS_DEFAULT_CONFIGMAP_NAMESPACE diff --git a/httphandler/examples/prometheus/podmonitor.yaml b/httphandler/examples/prometheus/podmonitor.yaml index 5810dccb..2741f933 100644 --- a/httphandler/examples/prometheus/podmonitor.yaml +++ b/httphandler/examples/prometheus/podmonitor.yaml @@ -2,7 +2,7 @@ apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: kubescape - namespace: ks-scanner + namespace: kubescape labels: app: kubescape spec: diff --git a/httphandler/go.mod b/httphandler/go.mod index 366b5956..6a315828 100644 --- a/httphandler/go.mod +++ b/httphandler/go.mod @@ -1,11 +1,11 @@ -module github.com/armosec/kubescape/v2/httphandler +module github.com/kubescape/kubescape/v2/httphandler go 1.18 -replace github.com/armosec/kubescape/v2 => ../ +replace github.com/kubescape/kubescape/v2 => ../ require ( - github.com/armosec/kubescape/v2 v2.0.0-00010101000000-000000000000 + github.com/kubescape/kubescape/v2 v2.0.0-00010101000000-000000000000 github.com/armosec/utils-go v0.0.12 github.com/go-openapi/runtime v0.24.1 github.com/google/uuid v1.3.0 diff --git a/httphandler/handlerequests/v1/datastructuremethods.go b/httphandler/handlerequests/v1/datastructuremethods.go index 2428fc82..83c01132 100644 --- a/httphandler/handlerequests/v1/datastructuremethods.go +++ b/httphandler/handlerequests/v1/datastructuremethods.go @@ -7,8 +7,8 @@ import ( utilsmetav1 "github.com/kubescape/opa-utils/httpserver/meta/v1" "k8s.io/utils/strings/slices" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" ) func ToScanInfo(scanRequest *utilsmetav1.PostScanRequest) *cautils.ScanInfo { diff --git a/httphandler/handlerequests/v1/datastructuremethods_test.go b/httphandler/handlerequests/v1/datastructuremethods_test.go index c22a99e3..05386650 100644 --- a/httphandler/handlerequests/v1/datastructuremethods_test.go +++ b/httphandler/handlerequests/v1/datastructuremethods_test.go @@ -3,7 +3,7 @@ package v1 import ( "testing" - "github.com/armosec/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils" apisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" utilsmetav1 "github.com/kubescape/opa-utils/httpserver/meta/v1" "github.com/stretchr/testify/assert" diff --git a/httphandler/handlerequests/v1/prometheus.go b/httphandler/handlerequests/v1/prometheus.go index 66a3a2a9..80edd1f9 100644 --- a/httphandler/handlerequests/v1/prometheus.go +++ b/httphandler/handlerequests/v1/prometheus.go @@ -6,9 +6,9 @@ import ( "os" "path/filepath" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" utilsapisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" "github.com/google/uuid" diff --git a/httphandler/handlerequests/v1/prometheus_test.go b/httphandler/handlerequests/v1/prometheus_test.go index e7378cd1..a39aa81e 100644 --- a/httphandler/handlerequests/v1/prometheus_test.go +++ b/httphandler/handlerequests/v1/prometheus_test.go @@ -4,7 +4,7 @@ import ( "path/filepath" "testing" - "github.com/armosec/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/cautils/getter" "github.com/stretchr/testify/assert" ) diff --git a/httphandler/handlerequests/v1/requestparser.go b/httphandler/handlerequests/v1/requestparser.go index 159d973f..78737b8d 100644 --- a/httphandler/handlerequests/v1/requestparser.go +++ b/httphandler/handlerequests/v1/requestparser.go @@ -7,9 +7,9 @@ import ( "net/http" "sync" - "github.com/armosec/kubescape/v2/core/cautils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" utilsmetav1 "github.com/kubescape/opa-utils/httpserver/meta/v1" "github.com/gorilla/schema" diff --git a/httphandler/handlerequests/v1/requestshandlerutils.go b/httphandler/handlerequests/v1/requestshandlerutils.go index b55340f5..c823825d 100644 --- a/httphandler/handlerequests/v1/requestshandlerutils.go +++ b/httphandler/handlerequests/v1/requestshandlerutils.go @@ -7,12 +7,12 @@ import ( "path/filepath" "strings" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/core/cautils/getter" - "github.com/armosec/kubescape/v2/core/core" "github.com/armosec/utils-go/boolutils" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/cautils/getter" + "github.com/kubescape/kubescape/v2/core/core" utilsapisv1 "github.com/kubescape/opa-utils/httpserver/apis/v1" utilsmetav1 "github.com/kubescape/opa-utils/httpserver/meta/v1" reporthandlingv2 "github.com/kubescape/opa-utils/reporthandling/v2" diff --git a/httphandler/httphandler b/httphandler/httphandler new file mode 100755 index 00000000..e907f510 Binary files /dev/null and b/httphandler/httphandler differ diff --git a/httphandler/listener/init.go b/httphandler/listener/init.go index b03b1068..172338ea 100644 --- a/httphandler/listener/init.go +++ b/httphandler/listener/init.go @@ -3,10 +3,10 @@ package listener import ( "os" - "github.com/armosec/kubescape/v2/core/cautils/getter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/go-logger/zaplogger" + "github.com/kubescape/kubescape/v2/core/cautils/getter" ) func initialize() error { diff --git a/httphandler/listener/setup.go b/httphandler/listener/setup.go index e5dd529c..57616657 100644 --- a/httphandler/listener/setup.go +++ b/httphandler/listener/setup.go @@ -6,11 +6,11 @@ import ( "net/http" "os" - "github.com/armosec/kubescape/v2/core/cautils" - "github.com/armosec/kubescape/v2/httphandler/docs" - handlerequestsv1 "github.com/armosec/kubescape/v2/httphandler/handlerequests/v1" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/httphandler/docs" + handlerequestsv1 "github.com/kubescape/kubescape/v2/httphandler/handlerequests/v1" "github.com/gorilla/mux" ) diff --git a/httphandler/main.go b/httphandler/main.go index b2d744fd..40bf386e 100644 --- a/httphandler/main.go +++ b/httphandler/main.go @@ -1,9 +1,9 @@ package main import ( - _ "github.com/armosec/kubescape/v2/httphandler/docs" - "github.com/armosec/kubescape/v2/httphandler/listener" logger "github.com/kubescape/go-logger" + _ "github.com/kubescape/kubescape/v2/httphandler/docs" + "github.com/kubescape/kubescape/v2/httphandler/listener" ) func main() { diff --git a/install.ps1 b/install.ps1 index 0bbcf61b..08434c74 100644 --- a/install.ps1 +++ b/install.ps1 @@ -4,7 +4,7 @@ $BASE_DIR=$env:USERPROFILE + "\.kubescape" $packageName = "/kubescape-windows-latest" # Get latest release url -$config = Invoke-WebRequest "https://api.github.com/repos/armosec/kubescape/releases/latest" | ConvertFrom-Json +$config = Invoke-WebRequest "https://api.github.com/repos/kubescape/kubescape/releases/latest" | ConvertFrom-Json $url = $config.html_url.Replace("/tag/","/download/") $fullUrl = $url + $packageName diff --git a/install.sh b/install.sh index 5b7f4b81..a465b3e7 100755 --- a/install.sh +++ b/install.sh @@ -31,7 +31,7 @@ fi mkdir -p $BASE_DIR OUTPUT=$BASE_DIR/$KUBESCAPE_EXEC -DOWNLOAD_URL="https://github.com/armosec/kubescape/releases/${RELEASE}/kubescape-${osName}-latest" +DOWNLOAD_URL="https://github.com/kubescape/kubescape/releases/${RELEASE}/kubescape-${osName}-latest" curl --progress-bar -L $DOWNLOAD_URL -o $OUTPUT diff --git a/main.go b/main.go index 65c1e3ea..38b861c7 100644 --- a/main.go +++ b/main.go @@ -1,8 +1,8 @@ package main import ( - "github.com/armosec/kubescape/v2/cmd" logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/cmd" ) func main() {