github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,292 Commits 23 Branches 553 Tags
a090a296fab450be55600ca58be8a2d6a480640d
Commit Graph

401 Commits

Author SHA1 Message Date
Frédéric BIDON
a090a296fa refact(hostsensorutils): unexported fields that don't need to be exposed 
Also:
* declared scanner resources as an enum type
* replaced stdlib json, added uit tests for skipped resources
* unexported worker pool
* more unexported methods (i.e. everything that is not part of the interface)
* refact(core): clarified mock injection logic and added a few unit tests at the caller's (CLI init utils)

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-03-25 09:37:24 +01:00
Matthias Bertschy
1e1a48bd9a Merge pull request #1064 from fredbi/perf/opaprocessor-process 
perf(opaprocessor): run OPA rule compilation and evaluation in parallel
 2023-03-24 15:38:14 +01:00
Frederic BIDON
dee3a10bac test(utils): introduced internal/testutils package to factorize testing utilities 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

Conflicts:
	core/pkg/hostsensorutils/hostsensordeploy_test.go
 2023-03-24 11:15:25 +01:00
Frédéric BIDON
5b62b0b749 addressed review from David: reverted on unconditional loop exit 
Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
 2023-03-23 16:56:37 +01:00
Frédéric BIDON
e4f34f6173 refact(host-sensor): refactors the host sensor 
This PR factorizes the list of calls to the host-scanner API in a loop.

More godoc-friendly doc strings are added.

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
 2023-03-23 16:56:37 +01:00
Frédéric BIDON
4a9f26b27c perf(opaprocessor): run OPA rule compilation and evaluation in parallel 
This parallelize the Process() portion of the OPA processor.

The main change is that called methods to evaluate a rule no longer
mutate the internal state of the opaprocessor and allocate maps (less
often, in larger chunks) that are merged at the end of the processing.

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
 2023-03-23 16:56:21 +01:00
David Wertenteil
b4180b34e7 core(logs): Enhance logs (#1158) 
* adding ks version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Initialize scanInfo

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* print if logger level is lower than warning

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: scan default frameworks when scanning files

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change print to log

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: Add end-line after last log

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: silent spinner when logger is warn

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-20 17:49:51 +02:00
David Wertenteil
d0b5c7c2c2 update host scanner image tag 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-16 09:45:12 +02:00
David Wertenteil
6671ac46f4 change failed to submit message 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-16 09:42:39 +02:00
David Wertenteil
ec4a098b1c replace error by warning 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-15 17:17:29 +02:00
David Wertenteil
1e0b9563a1 Merge to master - PR number: 1129 2023-03-13 13:43:07 +02:00
Alessio Greggi
5aa56b1c0a feat: integrate support to retrieve eks policies 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-03-13 11:35:07 +01:00
Matthias Bertschy
3b9ce494f5 Merge pull request #1131 from fredbi/test/more-tests-report-receiver 
test(reports): adds unit test to the report receiver
 2023-03-08 16:56:51 +01:00
Frederic BIDON
91af277a1c fixup unit test: error handling 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-03-08 08:53:28 +01:00
Frederic BIDON
556962a7e1 test(hostsensorutils): added unit tests to the hostsensorutils package 
This PR introduces a (limited) mock for the kubernetes client API.

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-03-07 20:35:29 +01:00
Frederic BIDON
306da021db test(reports): adds unit test to the report receiver 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

replace mock

Signed-off-by: Daniel-GrunbergerCA@armosec.com
 2023-03-07 19:59:31 +01:00
David Wertenteil
03b0147e39 Merge pull request #1130 from dwertent/update-utm-link-v2 
docs(links): Update URLs
 2023-03-06 14:08:25 +02:00
Frederic BIDON
7174f49f87 chore(lintin): run another pass of linting with the rules already in place 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-03-05 20:16:37 +01:00
David Wertenteil
0698c99241 wip: update UTMs & display UTM only on first scan 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 23:05:38 +02:00
David Wertenteil
c2b0e5c0a2 Do not display URL when message is empty 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 23:04:26 +02:00
David Wertenteil
6c54aff451 wip: removed unused code 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 22:46:20 +02:00
Arash Haghighat
3dfd758a82 refactor: update node scanner daemonset tolerations 
Signed-off-by: Arash Haghighat <arash@linja.pro>
 2023-03-01 16:36:08 +01:00
Alessio Greggi
39e2e34fc0 fix(hostsensorsutils): remove hostNet and hostPort from deployment 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-02-27 18:20:55 +01:00
David Wertenteil
ac2aa764a4 marking structs that are implementing IPrinter 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-24 09:18:54 +02:00
David Wertenteil
d02bef62d3 wip: re-arange struct 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-24 09:17:31 +02:00
David Wertenteil
01c65194a8 removing host scanner otel env 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-24 00:13:22 +02:00
David Wertenteil
7e5abbdd73 Merge pull request #1054 from fredbi/fix/1051-gc-pressure 
fix(processorhandler): reduce GC pressure
 2023-02-23 23:15:22 +02:00
Alessio Greggi
d900ce6146 fix(hostsensorutils): improve namespace deletion in host-scanner lifecycle 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-02-23 14:41:57 +01:00
Frédéric BIDON
65c26e22cf fix(processorhandler): reduce GC pressure 
* this onboards an optimization from the opa-utils package (caching
exceptions processing)

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-02-22 20:53:02 +01:00
David Wertenteil
915fa919b2 Fix HTML output (#1111) 
* Fixed HTML template

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Adding HTML output format example

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-21 13:55:12 +02:00
Rotem Refael
8fd9258efa Merge pull request #1101 from alegrey91/fix/improve-cloud-provider-detection 2023-02-16 15:25:38 +02:00
Alessio Greggi
159d3907b5 style(hostsensorutils): simplify code with gofmt 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-02-16 11:38:55 +01:00
Amir Malka
df39e10300 Statuses (#1016) (#1082) 
New statuses
 2023-02-14 15:00:21 +02:00
Alessio Greggi
c7d1292c7d fix(hostsensorutils): improve cloud provider detection 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-02-14 13:46:09 +01:00
yuleib
ca2730cd85 Revert "fix: add check to skip controlplaneinfo in case of cloud providers" 2023-02-14 08:59:03 +02:00
Alessio Greggi
46ca5036c4 fix: add check to skip controlplaneinfo in case of cloud providers 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-02-13 17:16:53 +01:00
David Wertenteil
6cc5116999 Loading kubeconfig name from env when running ms (#1089) 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-09 09:32:13 +02:00
David Wertenteil
d3abd66aa3 Default frameworks (#1085) 
* Update default frameworks names

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove error loggers, print debug instead.

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-08 08:59:10 +02:00
YiscahLevySilas1
2a0a2cf95a update logs in some resource getters (#1071) 
* change warning to debug

Signed-off-by: yiscah <yiscahls@armosec.io>

* update log

Signed-off-by: yiscah <yiscahls@armosec.io>

---------

Signed-off-by: yiscah <yiscahls@armosec.io>
Co-authored-by: David Wertenteil <dwertent@armosec.io>
 2023-02-07 22:37:13 +02:00
David Wertenteil
8b8fe92072 Merge pull request #1078 from dwertent/master 
Prepare for release
 2023-02-06 16:31:54 +02:00
David Wertenteil
086144c3da JSON version default v2 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-06 15:49:13 +02:00
David Wertenteil
a45ee8ed42 update compliance url 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-06 15:49:13 +02:00
YiscahLevySilas1
9f97f91f32 add context 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2023-02-05 12:03:10 +02:00
YiscahLevySilas1
c6eff8cbaa minor change 2023-02-05 11:54:21 +02:00
David Wertenteil
af9df548d6 Merge branch 'master' into CIS-EKS-support 2023-02-05 09:43:41 +02:00
Matthias Bertschy
3a90682c9e remove otel from CLI part 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-01-31 10:03:56 +01:00
Matthias Bertschy
160ac0db7c add otel with uptrace client 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-01-31 08:06:33 +01:00
yiscah
45fcc59b5f add unit test 
Signed-off-by: yiscah <yiscahls@armosec.io>
 2023-01-30 11:03:10 +02:00
YiscahLevySilas1
a7f810f0d1 Merge pull request #1043 from YiscahLevySilas1/dev 
Get cloud provider resources
 2023-01-29 08:59:01 +02:00
yiscah
9a7e61edd1 add cloud resource ListEntitiesForPolicies 2023-01-27 13:42:15 +02:00