Comments (2)
@roopeshsn I was talking to some users and friends about this while testing the core functionality a while ago. I think this goes hand in hand with this: #108
Once the functionality for scanning a specific policy is in place, I think it would make sense to build on that to include some version of that functionality in the main scanning logic as well.
from netfetch.
Description:
Currently, a pod will be marked as covered if it is targeted by a policy. We dont do much as far as analysing the ingress and egress rules inside the policy goes. We simply check if it has rules or not to determine what type of policy it is.
Goal:
We should improve the scanning logic so that once it has detected a policy, this poilicy should be scanned to determine what the policy is actually doing for the pod as far as cover go.
Do you have an idea of how to actually implement this?
from netfetch.
Related Issues (20)
- Feature: update suggestions API
- Bug: duplicate visualisations
- Integration with K9s as plugin
- Bug: score container disappears
- Feature: implement cronjob in helm chart
- Bug: Network policies with same name are displayed incorrectly HOT 2
- Feature Request: Add Support to Scan Ingress Resources
- netfetch linux binary. Below 22.04 seems to not be supported. HOT 3
- FR: Better package manager support (Linuxbrew + `asdf`) HOT 1
- Bug: scanning dead pods
- Feature request: ability to scan specific policy HOT 4
- Feature request: exclude a policy from a scan
- Bug: check both ingress and egress for default deny all policies
- Version is a constant so the same version is reported no matter the actual version. HOT 1
- Bug: error suggesting policies when "default" namespace is chosen HOT 5
- Feature: prometheus endpoint
- Bug: netpol suggestions get unknown name
- FR: Add support for Antrea Network Policy HOT 3
- Feature: relevant metrics in dashboard mode. HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from netfetch.