Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Task: Implement resource collector #157

Open
JingChen23 opened this issue Feb 9, 2023 · 0 comments
Open

Task: Implement resource collector #157

JingChen23 opened this issue Feb 9, 2023 · 0 comments
Assignees

Comments

@JingChen23
Copy link
Contributor

Resource collector's duty is to collect the data from the securiy insepctors of every demensions. Such as image scanners, k8s misconfigurations and runtime intrutions.

For single-cluster architechture, resource collector can:

  1. Proactively call K8s API to get the images of the pods.
  2. Proactively call Harbor API to fetch the image security issues.
  3. Provide an API endpoint for the daemonSet agents to report unstructured security data. The daemonSet agents are those ones must use the node information for doing things, such as misconfiguration detection and intrution detection by syscall.
  4. Can save the data to the database, for "Analyst" to use it.

For multi-cluster architechture:

  1. Above resource collector will become an deployment on each cluster.
  2. As long as the resource collectors can connect the DB, then things still will work.

After done this, there will be no conjobs in the whole Narrows scope.

  1. Resource collector will have a for loop internally to call external APIs to fetch information.
  2. The DaemonSets will be triggered by events to report their data.

So the subtasks of this task will be:

  1. Change Kubebench into DaemonSet.
  2. Remove the cronjobs of image scanner and risk scanner, but without functionality regression from the user's perspective.
  3. Modify the policy CRD controller, to adapt to this new design.
@JingChen23 JingChen23 changed the title Task: Implement the service of resource collector Task: Implement resource collector Feb 9, 2023
@JingChen23 JingChen23 added this to the 0.3.0 milestone Feb 9, 2023
@JingChen23 JingChen23 self-assigned this Feb 17, 2023
@JingChen23 JingChen23 removed this from the 0.3.0 milestone Mar 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant