Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Separate asset discovery from scanning #438

Merged
merged 4 commits into from
Jul 10, 2023
Merged

Conversation

ghost
Copy link

@ghost ghost commented Jun 28, 2023

Description

This commit removes the concept of scopes and instead replaces it with periodic discovery of assets. These assets will be created in the system and a ScanConfig can be configured with an ODATA $filter expression to choose the assets to scan.

This increases user visibility into the assets available to scan by VMClarity, it also gives the system an opportunity to estimate how many items a ScanConfig might scan based on a particular query.

It also opens the door for additional features such as the ability to scan a specific asset which has never been scanned before.

Assets are tracked with lastSeen timestamp which indicates when it was last seen by discovery. When they are not found in a discovery round they are marked as terminated. Terminated assets will not be included in scans even if they match the $filter configured by the user for the scan.

Type of Change

[ ] Bug Fix
[X] New Feature
[ ] Breaking Change
[X] Refactor
[ ] Documentation
[ ] Other (please describe)

Checklist

  • I have read the contributing guidelines
  • Existing issues have been referenced (where applicable)
  • I have verified this change is not present in other open pull requests
  • Functionality is documented
  • All code style checks pass
  • New code contribution is covered by automated tests
  • All new and existing tests pass

@ghost ghost self-requested a review as a code owner June 28, 2023 16:20
@ghost ghost force-pushed the separate_discovery_new branch from 1f9d119 to e857900 Compare June 28, 2023 16:21
api/openapi.yaml Outdated Show resolved Hide resolved
@ghost ghost mentioned this pull request Jun 29, 2023
7 tasks
api/openapi.yaml Show resolved Hide resolved
runtime_scan/pkg/orchestrator/discovery/scope.go Outdated Show resolved Hide resolved
runtime_scan/pkg/provider/aws/client.go Outdated Show resolved Hide resolved
runtime_scan/pkg/provider/aws/helpers.go Show resolved Hide resolved
@ghost ghost force-pushed the separate_discovery_new branch 2 times, most recently from 3fb38aa to 447aa43 Compare July 3, 2023 14:56
@ghost ghost force-pushed the separate_discovery_new branch from 447aa43 to 2fae375 Compare July 5, 2023 14:09
This commit removes the concept of scopes and instead replaces it with
periodic discovery of assets. These assets will be created in the
system and a ScanConfig can be configured with an ODATA $filter
expression to choose the assets to scan.

This increases user visibility into the assets available to scan by
VMClarity, it also gives the system an opportunity to estimate how many
items a ScanConfig might scan based on a particular query.

It also opens the door for additional features such as the ability to
scan a specific asset which has never been scanned before.

Assets are tracked with lastSeen timestamp which indicates when it was
last seen by discovery. When they are not found in a discovery round
they are marked as terminated. Terminated assets will not be included in
scans even if they match the $filter configured by the user for the
scan.
@akpsgit akpsgit enabled auto-merge July 10, 2023 09:46
@akpsgit akpsgit added this pull request to the merge queue Jul 10, 2023
Merged via the queue into main with commit 4522c5b Jul 10, 2023
5 checks passed
@akpsgit akpsgit deleted the separate_discovery_new branch July 10, 2023 10:45
@chrisgacsal chrisgacsal mentioned this pull request Nov 6, 2023
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants