add google cloud integration on k8sgpt

[tozastation]

Closes #1012

📑 Description

✅ Checks

• My pull request adheres to the code style of this project
• My code requires changes to the documentation
• I have updated the documentation as required
• All the tests have passed

ℹ Additional Information

• GKEClusterNotificationAnalysis
  • there are three type of notifications
    • UpgradeEvent (k8sgpt output example)
    • UpgradeAvailabilityEvent (k8sgpt output example)
    • SecurityBulletinEvent (k8sgpt output example)
  • there are two prompts
    • gke_cluster_notification_upgrade_prompt
    • gke_cluster_notification_security_bulletin_event_prompt
    • ※ I separated the prompts for vulnerability and update information because they are different types of notifications
  • reference url
    • https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications
• About Source Code
  • integration/googlecloud
    • gke.go
      • This file is an implementation of GKEAnalyzer, which can be optionally turned on or off, following Trivy's implementation method.
    • gke_test.go
      • This test checks if the cluster notification payload can be converted to a structure
    • googlecloud.go
      • It follows other integration implementations.
    • pubsubclient.go
      • PubSub Client is used to receive GKE cluster notifications from Cloud Pub/Sub; the reason for using the REST endpoint instead of gRPC is that we wanted to query only as much as needed, without using gRPC Streaming.
• k8sgpt.yaml
  • Parameters are required when initializing the client and GKEAnalyzer.

googlecloud:
    gke:
        cluster_notification_analysis_list:
            - cluster_notification_subscription_id: tozastation-gke-cluster-notification-pull-subscription
              project_id: 123456789
    pubsub:
        enable_ack: false # Default true
        timeout_sec: 10 # Default 10
        max_messages: 1 # Default 1

Next actions planned after PR is completed

• Server Mode support for Google Cloud Integration
• k8sgpt operator support for Google Cloud Integration
• Support for making it possible to specify the option because the explanation of CVE needed to loosen the Safety Setting when verified by GoogleCloudVertexAI.

[tozastation]

GKE Cluster Notification UpgradeEvent

--- VertexAI Gemini Pro Response Example ---

Notification

{
  "resourceType": "MASTER",
  "operation": "operation-1595889094437-87b7254a",
  "operationStartTime": "2020-07-27T22:31:34.437652293Z",
  "currentVersion": "1.15.12-gke.2",
  "targetVersion": "1.15.12-gke.9"
}

Notification Attribute

• project id: 123456789
• cluster location: us-central1-c
• cluster name: example-cluster

Explanation
This is a UpgradeEvent or UpgradeAvailabilityEvent of Google Kubernetes Engine (GKE) cluster notification.
The cluster is upgrading from version 1.15.12-gke.2 to version 1.15.12-gke.9.

Next Action
You can ignore this notification.

Reference URL
https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-upgrades

[tozastation]

GKE Cluster Notification UpgradeAvailabilityEvent

--- VertexAI Gemini Pro Response Example ---

Notification

{
  "version": "1.17.15-gke.800",
  "resourceType": "MASTER",
  "releaseChannel": {
    "channel": "RAPID"
  },
  "windowsVersions": [
    {
      "imageType": "WINDOWS_SAC",
      "osVersion": "10.0.18363.1198",
      "supportEndDate": {
        "day": 10,
        "month": 5,
        "year": 2022
      }
    },
    {
      "imageType": "WINDOWS_LTSC",
      "osVersion": "10.0.17763.1577",
      "supportEndDate": {
        "day": 9,
        "month": 1,
        "year": 2024
      }
    }
  ]
}

Notification Attribute

• project id: 123456789
• cluster location: us-central1-c
• cluster name: example-cluster

Explanation
This is a UpgradeEvent or UpgradeAvailabilityEvent of Google Kubernetes Engine (GKE) cluster notification.

Next Action
Please upgrade your cluster to the latest version to avoid potential security risks and performance issues.

Reference URL

• Upgrading a cluster

[tozastation]

GKE Cluster Notification Security Bulletin Event

--- VertexAI Gemini Pro Response Example ---

Notification

{
  "resourceTypeAffected": "RESOURCE_TYPE_CONTROLPLANE",
  "bulletinId": "GCP-2021-001",
  "cveIds": [
    "CVE-2021-3156"
  ],
  "severity": "Medium",
  "briefDescription": "A vulnerability was recently discovered in the Linux utility sudo, described in CVE-2021-3156, that may allow an attacker with unprivileged local shell access on a system with sudo installed to escalate their privileges to root on the system.",
  "affectedSupportedMinors": [
    "1.18",
    "1.19"
  ],
  "patchedVersions": [
    "1.18.9-gke.1900",
    "1.19.9-gke.1900"
  ],
  "suggestedUpgradeTarget": "1.19.9-gke.1900",
  "bulletinUri": "https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2021-001"
}

Notification Attribute

• project id: 123456789
• cluster location: us-central1-c
• cluster name: example-cluster

Severity

• Medium

CVE ID

• CVE-2021-3156

Description

• A vulnerability was recently discovered in the Linux utility sudo, described in CVE-2021-3156, that may allow an attacker with unprivileged local shell access on a system with sudo installed to escalate their privileges to root on the system.
• This vulnerability could allow an attacker to gain complete control of the affected system.

Solution

• Upgrade to a patched version of Kubernetes.
• The suggested upgrade target is 1.19.9-gke.1900.

Reference URL

• https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2021-001

[tozastation]

@AlexsJones @arbreezy @thschue
I have tried to implement google cloud integration.
Could you please review it...!!

[matthisholleville]

Shoudn't we add the reference guide https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications to te README ?