policy-reporter

Fix Typo in values.yaml [#102 by christophefromparis]

• Policy Reporter UI v1.2.0
  • New configurations to customize the dashboard by disable PolicyReport- or ClusterPolicyReport information

• Fix KyvernoPlugin Metrics ServiceMonitor Port [#96 by z0rc]
• Remove unused Port from KyvernoPlugin Deployment and Service

• KyvernoPlugin v1.1.0
  • New KyvernoPlugin API - VerifyImages Rules (details)
• Policy Reporter UI v1.1.0
  • New Kyverno VerifyImages view in Policy Reporter UI
  • New Configurations to disable views (details)

• Remove NetworkPolicy ingress rule for UI if not enabled
• Update Policy Reporter UI
  • Fix: Show PolicyReportResult Properties in Tables

Chart

• Removed deprecated values crdVersion, cleanupDebounceTime
• Simplify policyPriorities, policyPriorities.enabled was removed along with the watch feature
  • Priority determined mainly over severity
• Add sources filter to target configurations
• Improved NetworkPolicy configuration for all components
• Metrics now an optional feature
• Each component expose a single Port 8080

See Migration Docs for details

Policy Reporter

• modular functions for separate activation/deactivation
  • REST API
  • Metrics API
  • Target pushes
• PolicyReports are now stored in an internal SQLite
• extended REST API based on the new SQLite DB for filters and grouping of data
• metrics API is now optional
• metrics and REST API using the same HTTP Server (were separated before)
• improved CRD watch logic with Kubernetes client informer
• Yandex changed to a general S3 target.

Policy Reporter UI

• Rewrite with NuxtJS
• New dark mode
• Simplified Proxy
• Improved SPA file handling

Policy Reporter Kyverno Plugin

• modular functions for separate activation/deactivation
  • REST API
  • Metrics API
• metrics and REST API using the same HTTP Server (were separated before)
• improved CRD watch logic with Kubernetes client informer

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

• Current and all new versions of all components are now hosted in the Github Container Registry alongside the Kyverno images
• Updated the Go Verison of all Components to Go 1.17
• Policy Reporter UI Filters are now added as GET Parameters which makes filtering shareable over links

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

• Implement NetworkPolicy for Policy Reporter and related Components [#68 by windowsrefund]
• Customize liveness- and readinessProbe for Policy Reporter [#67 by windowsrefund]
• Add additional egress rules to kyvernoPlugin and UI subchart with networkPolicy.egress
• Configure the Kubernetes API Port for NetworkPolicy with networkPolicy.kubernetesApiPort

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

K8s PolicyReporter watches for wgpolicyk8s.io/v1alpha1.PolicyReport resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord