-
-
Notifications
You must be signed in to change notification settings - Fork 37
Open
Labels
Description
We're working on mapping Kubernetes clusters composition as BOM (aka "KBOM"). For that, we want to use properties to designate cluster components roles, and attributes that are meaningful to understanding the cluster composition.
For example, here's a snippet from generated KBOM that describes a Kubernetes API Server component:
{
"bom-ref": "e86fd8d5-c302-4c44-b1b2-833b97540f13",
"type": "application",
"name": "kube-apiserver-kind-control-plane",
"properties": [
{
"name": "aquasecurity:trivy:SchemaVersion",
"value": "0"
},
{
"name": "aquasecurity:trivy:k8s:controlplane_components",
"value": "apiserver"
}
]
}We're proposing to register a kubernetes namespace for the Kubernetes-specific metadata.
As for usage, for now, we are following the Kubernetes taxonomy as defined here: https://kubernetes.io/docs/concepts/overview/components/
Which means we will add:
kubernetes:controlplane_componentkubernetes:node_componentkubernetes:addon
If this is acceptable, I'll create a PR with the namespace reservation and initial documentation.
jkowalleck