Skip to content

feat: add ORCS monitoring #2308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 54 commits into
base: main
Choose a base branch
from
Open

feat: add ORCS monitoring #2308

wants to merge 54 commits into from

Conversation

CasLubbers
Copy link
Contributor

@CasLubbers CasLubbers commented Jul 3, 2025 •
edited by Ani1357
Loading

📌 Summary

We want to have a mechanism which allows to see which images are using ORCS when it is enabled.
This PR adds:

  • a new ClusterPolicy (POC) which checks if imaged are pulled from ORCS.
  • a new charts (policy-reporter) which exposes k8s policy reports (produced by the Kyverno Validating Policy)as metrics.
  • grafana dashboards to visualize those metrics

🔍 Reviewer Notes

🧹 Checklist

  • Code is readable, maintainable, and robust.
  • Unit tests added/updated

otomi-admin and others added 30 commits July 2, 2025 15:43
feat: add ORCS compliance policies and alerting rules for supply chai…
60dd66f 
…n security
feat: fix team-ns chart
7bb466e
feat: add cluster wide policy
29c204e
feat: fix kyverno raw
9a593e5
feat: fix kyverno raw
1cf51e8
feat: fix kyverno raw
16f26ef
feat: temporarly delete cluster policy
58b8e55
fix: uncomment clusterpolicy
6c252c3
fix: update policy
b1afa17
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
c3c253d
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
3e9b2d9
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
2284f00
@CasLubbers
fix: remove team-ns orcs compliancy
bf8d4f4
@Ani1357
feat: adding orcs prometheus rule
67dd182
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
4718471
@Ani1357
feat: image capturing expression
a77eea5
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
5e72de4
@CasLubbers
feat: add ORCS compliance policies to alerts configuration
86a750e
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
d863aed
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
7051768
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
4f38ddb
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
64c0cf4
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
63ffa4e
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
7ffb02d
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
f63e49f
@Ani1357
feat: adding policy-reporter
343cd93
@Ani1357
feat: added defaults and value-schema chages
b204828
@Ani1357
Revert "feat: add ORCS compliance policies to alerts configuration"
0675feb 
This reverts commit 86a750e.
@Ani1357
fix: schema
532a44b
@Ani1357
fix: defaults
b0dc255
Ani1357 and others added 24 commits July 18, 2025 14:29
@Ani1357
fix: defaults
a153584
@Ani1357
feat: removed policy-reporter service and disabled ui
f3b84e2
@Ani1357
feat: disabling ui and kyverno plugin for the policy-reporter
7800d63
@Ani1357
feat: namespaceOverride
02af3b9
@Ani1357
fix: namespace creation
9fa0401
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
f46420c
@Ani1357
feat: added grafana dashboards
3a1c80c
@Ani1357
Revert "feat: added grafana dashboards"
99dca1a 
This reverts commit 3a1c80c.
@Ani1357
feat: adding grafana config for policy-reporter
1da3141
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
33c828d
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
081d7ba
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
6c8d5c2
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
8a4fdd6
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
864b83a
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
28e8429
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
b831e0d
@svcAPLBot
Merge remote-tracking branch 'origin/main' into APL-886
eaed06e
@Ani1357
Merge branch 'main' into APL-886
9dbbd3d
@Ani1357
feat: policy source filter update
e2c7e74
@Ani1357
feat: remove kube-system namespace from orcs clusterpolicy
001bde8
@Ani1357
feat: adding grafana dashboards
3b8da23
@Ani1357
feat: adding grafana dashboards
8c2c15d
@Ani1357
feat: adding ORCS support
6a4e58c
@Ani1357
Merge branch 'main' into APL-886
6a91714
@Ani1357 Ani1357 marked this pull request as ready for review July 28, 2025 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@j-zimnowoda j-zimnowoda Awaiting requested review from j-zimnowoda j-zimnowoda is a code owner

@merll merll Awaiting requested review from merll merll is a code owner

@Ani1357 Ani1357 Awaiting requested review from Ani1357 Ani1357 is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@CasLubbers @svcAPLBot @Ani1357