policy-reporter

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

What's Changed

• fix(helm): typo in email report config by @sudoleg in https://github.com/kyverno/policy-reporter/pull/413

Full Changelog: https://github.com/kyverno/policy-reporter/compare/policy-reporter-2.22.2...policy-reporter-2.22.3

Policy Reporter v2.18.1

• Fix Resource Mapping in Violation Report E-Mails

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

What's Changed

• fix indentation in summary-report cronjob by @sudoleg in https://github.com/kyverno/policy-reporter/pull/407

New Contributors

• @sudoleg made their first contribution in https://github.com/kyverno/policy-reporter/pull/407

Full Changelog: https://github.com/kyverno/policy-reporter/compare/policy-reporter-2.22.0...policy-reporter-2.22.1

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

What's Changed

• Add basic auth to loki client by @YannickTeKulve in https://github.com/kyverno/policy-reporter/pull/394
• updated README to include up to date list of targets, fix links by @vponoikoait in https://github.com/kyverno/policy-reporter/pull/396
• feat(helm:dashboard): add rule filter in policyreport details by @lukashankeln in https://github.com/kyverno/policy-reporter/pull/399
• SecurityHub Updates by @fjogeleit in https://github.com/kyverno/policy-reporter/pull/401
• Removed unused from config.yaml. Stream name isn't a property of Security Hub by @vponoikoait in https://github.com/kyverno/policy-reporter/pull/403
• add extra volumes to email cronjobs by @fjogeleit in https://github.com/kyverno/policy-reporter/pull/405
• Prepare Release v2.22.0 by @fjogeleit in https://github.com/kyverno/policy-reporter/pull/406

New Contributors

• @YannickTeKulve made their first contribution in https://github.com/kyverno/policy-reporter/pull/394
• @vponoikoait made their first contribution in https://github.com/kyverno/policy-reporter/pull/396
• @lukashankeln made their first contribution in https://github.com/kyverno/policy-reporter/pull/399

Full Changelog: https://github.com/kyverno/policy-reporter/compare/policy-reporter-2.21.6...policy-reporter-2.22.0

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter

• Fix ID generation for Policy Reports which using scope as resource reference

Helm Chart

• fix: Add chart parameters for setting revisionHistoryLimit [#363 by bodgit]
• fix: allow not setting .Values.podSecurityContext for kyvernoPlugin [#361 by haraldsk]

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

• Policy Reporter
  • fix: scope kind mapping
  • feat: add debug http logging [#346 by blakepettersson]
  • build: cache go mod [#345 by blakepettersson]

Policy Reporter

• Support GoogleChat as new notification target
• Support Telegram as new notification target
• Support HTTP BasicAuth for API and metrics
• Go update to v1.21

Policy Reporter UI

• Support HTTP BasicAuth authenticated API calls
• Go update to v1.21

Policy Reporter KyvernoPlugin

• Support HTTP BasicAuth for API and metrics
• Go update to v1.21

BasicAuth Summary:

Configure global HTTP BasicAuthentication via Helm:

• Username/Password can configured directly or as existing secret with username / password keys
• The Authentication is applied to REST APIs and metrics of the Core App and KyvernoPlugin (if enabled)
• The Authorization header will be set in the Policy Reporter UI automatically
  • External Cluster configuration also supports secretRef where you can set username / password as well as the API endpoints (api, kyvernoApi) and ssl configuration (skipTLS, certificate)
• If monitoring enabled the basicAuth configuration will also applied on the ServiceMonitors
  • direct configuration will create a dedicated auth secret for ServiceMonitors
  • secretRef will reuse the existing secret for ServiceMonitors

global:
  basicAuth:
    #https://github.com/kyverno/policy-reporter/releases/tag/policy-reporter-2.20.0 username: "username"
    #password: "password"
    secretRef: auth-secret

Example external cluster:

ui:
  ...
  clusters:
  - name: Minikube
    api: http://policy-reporter:8080
    kyvernoApi: http://policy-reporter-kyverno-plugin:8080
    basicAuth:
      username: user
      password: password
  - name: Secret
    api: http://policy-reporter:8080
    kyvernoApi: http://policy-reporter-kyverno-plugin:8080
    secretRef: auth-secret
  - name: Unauthorized
    api: http://policy-reporter:8080
    kyvernoApi: http://policy-reporter-kyverno-plugin:8080

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord