policy-reporter-preview-3.0.0-beta.3

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Full Changelog: policy-reporter-preview-3.0.0-beta.2...policy-reporter-preview-3.0.0-beta.3

policy-reporter-preview-3.0.0-beta.2

Improvements:

Policy Reporter UI v2

• Improved light and dark color schema
• Using the correct UI image tag

policy-reporter-preview-3.0.0-beta.1

First Beta Release of Policy Reporter v3 and Policy Reporter UI v2

New features:

Policy Reporter

• Support runtime changes of target secretRefs by @fjogeleit in #465

Policy Reporter UI

• Show Creation Time of failed results
• Fix Skip Chip position

policy-reporter-2.24.1

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

policy-reporter-2.24.0

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

policy-reporter-2.23.1

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

policy-reporter-2.23.0

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

policy-reporter-preview-3.0.0-alpha.28

New PolicyReport Filter Layer "SourceFilter"

This new filter options can be applied on a subset of (Cluster)PolicyReport selected by source, to optimize report processing based on the underlying engine

Filter Options:

• Namespace Filter
• Kind Filter
• Disable ClustrPolicyReports
• Process Uncontrolled Resources only
  • If enabled all PolicyReports related to an controlled scope resource like Pod and Job are skipped
  • Its useful and enabled by default for Kyverno to skip PolicyReports of Pods, Jobs or ReplicaSets if the same report exists for the related controller like Deployment, DaemonSet, Statefulset, CronJob

Side Effects:

• Reduces/Impacts the amount of Metrics because it only processes reports of the controller resource
• Only one Notification for the controller resource
• Better API performance because less data in the Database

Default Configuration

# -- Source based PolicyReport filter
sourceFilters:
  # -- PolicyReport selector.
- selector:
    # -- select PolicyReport by source
    source: kyverno
  # -- Filter out PolicyReports of controlled Pods and Jobs, only works for PolicyReport with scope resource
  uncontrolledOnly: true
  # -- Filter out ClusterPolicyReports
  disableClusterReports: false
  # -- Filter out PolicyReports based on the scope resource kind
  kinds:
    exclude: [ReplicaSet]

Full Changelog: policy-reporter-preview-3.0.0-alpha.25...policy-reporter-preview-3.0.0-alpha.28

policy-reporter-preview-3.0.0-alpha.27

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

policy-reporter-preview-3.0.0-alpha.26

Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord