Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(k8s): Asset scan support #864

Merged
merged 17 commits into from
Jan 31, 2024
Merged

feat(k8s): Asset scan support #864

merged 17 commits into from
Jan 31, 2024

Conversation

Tehsmash
Copy link
Contributor

@Tehsmash Tehsmash commented Oct 27, 2023

Description

Add RunAssetScan implementations for running containers and container images to the Kubernetes Provider. It builds on the foundation introduced by the Kubernetes Provider discovery logic to export containers and container images from the container runtime and then run a scanner job to analyse the resulting tar.

Type of Change

[ ] Bug Fix
[X] New Feature
[ ] Breaking Change
[ ] Refactor
[ ] Documentation
[ ] Other (please describe)

Checklist

  • I have read the contributing guidelines
  • Existing issues have been referenced (where applicable)
  • I have verified this change is not present in other open pull requests
  • Functionality is documented
  • All code style checks pass
  • New code contribution is covered by automated tests
  • All new and existing tests pass

@Tehsmash Tehsmash changed the title Kubernetes Asset scan support feat(kubernetes): Asset scan support Oct 27, 2023
@Tehsmash Tehsmash marked this pull request as ready for review October 31, 2023 16:59
@Tehsmash Tehsmash requested a review from a team as a code owner October 31, 2023 16:59

This comment has been minimized.

@Tehsmash Tehsmash changed the title feat(kubernetes): Asset scan support feat(k8s): Asset scan support Nov 3, 2023

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

@chrisgacsal chrisgacsal marked this pull request as ready for review January 30, 2024 14:27

This comment has been minimized.

ramizpolic
ramizpolic previously approved these changes Jan 30, 2024
Copy link
Member

@ramizpolic ramizpolic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, quite a lot of work here, well done 👍
just added a couple of smaller notes to consider

e2e/testenv/kubernetes/helm/config.go Show resolved Hide resolved
pkg/containerruntimediscovery/client.go Show resolved Hide resolved
pkg/containerruntimediscovery/containerd/discoverer.go Outdated Show resolved Hide resolved
pkg/orchestrator/provider/kubernetes/config.go Outdated Show resolved Hide resolved
pkg/orchestrator/provider/kubernetes/config.go Outdated Show resolved Hide resolved
pkg/orchestrator/provider/kubernetes/provider.go Outdated Show resolved Hide resolved
@ramizpolic ramizpolic self-requested a review January 30, 2024 21:08
@chrisgacsal
Copy link
Contributor

Thanks for the review @paralta and @ramizpolic. I'll address your comments asap. Also wanted to mention that my main goal was to ensure correctness of what is implemented in this PR by limiting the number of changes added on top of the original code. All the optimizations and improvements should be added in following PRs in my honest opinion. Ty

paralta
paralta previously approved these changes Jan 31, 2024
Copy link

Hey!

Your images are ready:

  • ghcr.io/openclarity/vmclarity-apiserver-dev:pr864-99ef80479fc9a40d042e584b523db9c4da85835e
  • ghcr.io/openclarity/vmclarity-orchestrator-dev:pr864-99ef80479fc9a40d042e584b523db9c4da85835e
  • ghcr.io/openclarity/vmclarity-ui-backend-dev:pr864-99ef80479fc9a40d042e584b523db9c4da85835e
  • ghcr.io/openclarity/vmclarity-ui-dev:pr864-99ef80479fc9a40d042e584b523db9c4da85835e
  • ghcr.io/openclarity/vmclarity-cli-dev:pr864-99ef80479fc9a40d042e584b523db9c4da85835e

@chrisgacsal chrisgacsal added this pull request to the merge queue Jan 31, 2024
Merged via the queue into main with commit 738775b Jan 31, 2024
33 checks passed
@chrisgacsal chrisgacsal deleted the k8s_scanning branch January 31, 2024 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

None yet

5 participants