Skip to content

Commit 386ff45

Browse files
daviddetorresdaviddetorres
authored
Merge pull request #184 from sysdiglabs/staging
Staging to prod
2 parents 9ea62ef + b912277 commit 386ff45

File tree

12 files changed

+982
-0
lines changed

12 files changed

+982
-0
lines changed

‎apps/images/sysdig.svg‎

Lines changed: 16 additions & 0 deletions
Loading

‎apps/sysdig-admission-controller.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
---
2+
apiVersion: v1
3+
kind: App
4+
name: "Sysdig Admission Controller"
5+
keywords:
6+
- Kubernetes
7+
- Available
8+
availableVersions:
9+
- '0.0.9'
10+
shortDescription: "Sysdig Admission Controller."
11+
description: |
12+
Sysdig’s Admission Controller builds upon Kubernetes and enhances the capacity of the image scanner to check images, elevating the scan policies from detection to actual prevention.
13+
icon: https://raw.githubusercontent.com/sysdiglabs/promcat-resources/master/apps/images/sysdig.svg
14+
website: https://docs.sysdig.com/en/docs/sysdig-secure/scanning/admission-controller/
15+
available: true

‎resources/sysdig-admission-controller/ALERTS.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
# Alerts
2+
## [Sysdig Admission Controller] No K8s Audit Events Received
3+
The Admission Controller is not receiving Kubernetes Audit events.
4+
5+
## [Sysdig Admission Controller] K8s Audit Events Throttling
6+
Kubernetes Audit events is being throttled.
7+
8+
## [Sysdig Admission Controller] Scanning Events Throttling
9+
Scanning events is being throttled.

‎resources/sysdig-admission-controller/INSTALL.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Setup
2+
Sysdig Admission Controller expose Prometheus metrics natively.
3+
4+
As it is annotated with the standard Prometheus annotations, it will be scraped by default for both Prometheus and the Sysdig Agent, so no further configuration is required.

‎resources/sysdig-admission-controller/README.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
# Sysdig Admission Controller
2+
Kubernetes' admission controllers help you define and customize which requests are allowed on your cluster. An admission controller intercepts and processes requests to the Kubernetes API prior to persistence of the object, but after the request is authenticated and authorized.
3+
4+
Sysdig’s Admission Controller builds upon Kubernetes and enhances the capacity of the image scanner to check images for Common Vulnerabilities and Exposures (CVEs), misconfigurations, outdated images, etc., elevating the scan policies from detection to actual prevention. Container images that do not fulfill the configured admission policies will be rejected from the cluster before being assigned to a node and allowed to run.
5+
6+
# Metrics
7+
Sysdig Admission Controller expose metrics on:
8+
* Kubernetes Audit Events
9+
* Image scanning
10+
* Procession queues
11+
* Inline image scanning metrics
12+
13+
# Number of time series generated
14+
Sysdig Admission Controller generates around 150 metrics per admission controller.
15+
16+
# Attributions
17+
Configuration files, alerts, and dashboards are maintained by [Sysdig team](https://sysdig.com/).

‎resources/sysdig-admission-controller/alerts.yaml‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
apiVersion: v1
2+
kind: Alert
3+
app: Sysdig Admission Controller
4+
version: 1.0.0
5+
appVersion:
6+
- '0.0.9'
7+
descriptionFile: ALERTS.md
8+
configurations:
9+
- kind: Prometheus
10+
data: |
11+
groups:
12+
- name: SysdigAdmissionController
13+
rules:
14+
- alert: "[Sysdig Admission Controller] No K8s Audit Events Received"
15+
expr: |
16+
sum(rate(k8s_audit_ac_events_received_total[5m])) == 0
17+
for: 10m
18+
labels:
19+
severity: High
20+
annotations:
21+
summary: The Admission Controller is not receiving Kubernetes Audit events.
22+
- alert: "[Sysdig Admission Controller] K8s Audit Events Throttling"
23+
expr: |
24+
(sum(rate(k8s_audit_ac_events_processed_total[5m]))
25+
- sum(rate(k8s_audit_ac_events_received_total[5m]))
26+
) > 32
27+
for: 15m
28+
labels:
29+
severity: Medium
30+
annotations:
31+
summary: Kubernetes Audit events is being throttled.
32+
- alert: "[Sysdig Admission Controller] Scanning Events Throttling"
33+
expr: |
34+
(sum(rate(scanning_ac_http_scanning_handler_requests_total[5m]))
35+
- sum(rate(scanning_ac_containers_processed_total[5m]))
36+
) > 32
37+
for: 15m
38+
labels:
39+
severity: Medium
40+
annotations:
41+
summary: Scanning events is being throttled.
42+

‎resources/sysdig-admission-controller/dashboards.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: v1
2+
kind: Dashboard
3+
app: Sysdig Admission Controller
4+
version: 1.0.0
5+
appVersion:
6+
- '0.0.9'
7+
configurations:
8+
- name: Sysdig Admission Controller
9+
kind: Sysdig
10+
image: sysdig-admission-controller/images/sysdig-admission-controller-sysdig.png
11+
description: |
12+
This dashboard offers information on:
13+
* Kubernetes Audit Events
14+
* Image scanning
15+
* Procession queues
16+
* Inline image scanning
17+
file: include/Sysdig_Admission_Controller.json

‎resources/sysdig-admission-controller/description.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
apiVersion: v1
2+
kind: Description
3+
app: Sysdig Admission Controller
4+
version: 1.0.0
5+
appVersion:
6+
- '0.0.9'
7+
descriptionFile: README.md

‎resources/sysdig-admission-controller/images/sysdig-admission-controller-sysdig.png‎

252 KB
Loading

0 commit comments

Comments
 (0)