Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable Framework Selection During Helm Installation #566

Open
AdonisOkpidi opened this issue Dec 12, 2024 · 2 comments
Open

Enable Framework Selection During Helm Installation #566

AdonisOkpidi opened this issue Dec 12, 2024 · 2 comments
Assignees
Labels
enhancement New feature or request good first issue Good for newcomers

Comments

@AdonisOkpidi
Copy link

AdonisOkpidi commented Dec 12, 2024

Overview

Currently, all frameworks are scanned by default, and there is no existing mechanism to control this behaviour via Helm.

Problem

During installation, it is not possible to specify the framework required for a specific cloud provider. As a result, I must manually extract the necessary controls from the JSON reports, which can be a time-consuming process.

Solution

  1. Introduce a capability similar to Trivy Operator, allowing users to specify one or multiple frameworks in the values.yaml file. See Trivy Operator example.

    specs: 
    - k8s-cis-1.23 
    - k8s-nsa-1.0
    - k8s-pss-baseline-0.1
    - k8s-pss-restricted-0.1

Additionally, enable this configuration through the --set flag in the Helm install command.

Additional Information

# I would want to be able to set for GKE:
frameworks:
- AllControls
- cis-v1.23-t1.0.1

# For AKS:
frameworks:
- cis-aks-t1.2.0
@slashben slashben added enhancement New feature or request good first issue Good for newcomers labels Dec 17, 2024
@slashben slashben moved this to Feature in Kubescaping Dec 17, 2024
@dwertent dwertent self-assigned this Dec 17, 2024
@dwertent
Copy link
Contributor

We need to define the behavior when a user triggers a scan manually via the API and specifies frameworks that differ from the "default" frameworks. My intuition is that the API-triggered frameworks should override the "on-installation" frameworks list. Therefore, the naming should be: defaultFrameworks, which by default includes allControls, mitre, and nsa (as it currently does).

@dwertent
Copy link
Contributor

  1. Add the config
  2. Update the dependencies
  3. Add the code to the Operator and release the Operator
  4. Add the default values to the Helm and release the Helm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers
Projects
Status: Feature
Development

No branches or pull requests

3 participants