Comments (5)
Got it, thank you.
Feel free to close since it's on me to do magic combining Policy Reporter metrics with kyverno_policy_results_total
when it has certain value (not surfacing all Policy Reporter metrics, but those that are actually failing) and go to Kyverno to surface my concern.
from policy-reporter.
Policy Reporter reflect the information given by your PolicyReports. So there should be PolicyReports in this excluded namespace. Did you exclude this namespace later on? Maybe Kyverno cleaned it not up correctly. You could manually delete the reports in this namespace.
But theres nothing really todo in PolicyReporter. Because the source of truth is generated by Kyverno only.
from policy-reporter.
Hey, thank you for a quick response! Just figured this out that it uses backgroundscanreports.kyverno.io resources to build it's knowledge base. I'll clean all backgroundscanreports.kyverno.io and see if it helps.
Yes, namespace exclusion was added later.
from policy-reporter.
Hey @fjogeleit, even after removing all backgroundscanreports.kyverno.io and PolicyReport resources, restarting Policy Reporter — still new PolicyReport is created.
from policy-reporter.
As mentioned PolicyReport
s are created by Kyverno. Not Policy Reporter. So this is an issue by Kyverno / Policy definition.
from policy-reporter.
Related Issues (20)
- Cant work with Workload Identity HOT 15
- Splunk as a target HOT 1
- [DOCS] The external-cluster section needs to mention that rest.enabled: true is required HOT 1
- Policy Reporter Targets as CRDs HOT 4
- Include the timestamp HOT 7
- Helm chart won't start due to "Error: unknown flag: --template-dir" HOT 2
- Kyverno Policy Reporter writes extensively on node disk storage in certain ocassions. HOT 2
- strange S3 config error when using SecurityHub as target HOT 3
- Helm: Ingress template has wrong selection for pathType
- Allow for not rendering a Kubernetes Secret HOT 2
- policy-reporter presents incomplete results HOT 7
- Slack Channel Override does not work HOT 4
- Support for new reports.x-k8s.io reports group
- Support for multicluster HOT 1
- Loki not receiving/showing logs HOT 6
- Wrong key "label" instead of "labels" in redis mainfest file HOT 1
- The Secrets do not have the namespace in manifests HOT 1
- Question: Integration with Security Hub HOT 5
- CrashLoopBackOff policy-reporter-kyverno-plugin when deploying the manifest HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from policy-reporter.