Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Other plugins like KubeBench and Falco #60

Open
pachr opened this issue Jan 6, 2025 · 1 comment
Open

Other plugins like KubeBench and Falco #60

pachr opened this issue Jan 6, 2025 · 1 comment

Comments

@pachr
Copy link

pachr commented Jan 6, 2025

Hello,

I am reaching out to you to know more about plugins for the "Policy reporter UI".

In the documentation I can see some references about "Kube Bench" and "Falco" (maybe in earlier versions of the Policy Reporter UI).

I tried to understand the documentation about the "plugin system", but I don't really see how to add a custom plugin for Falco or Kube Bench for example.

Should I implement a plugin in this repository for example? Or do we have a more straight forward way to reference a new plugin?

I can for sure help on that.

Best regards.

@fjogeleit
Copy link
Member

Hey, thanks for your interest.

Es the documentation explains are plugins away to add additional metadata to engines and there policies into the UI. They are not required to enable general support for an engine. Tools like Falco or KubeBench already work out of the box as soon as they generate (Cluster)PolicyReport resources.

In case of Falco you need e.g. to enable the PolicyReport Output in Falcosidekick.

A Falco plugin could add details to the underlaying rule which are not available in the PolicyReport output.

A Plugin is a Webservice which provides a defined set of API routes and JSON Responses as described in the docs. Plugins within the plugin repo are the current official maintained ones. You can create your own repo or contribute it to the existing mono repo.

I don't have a template or something right now. Also the used programming language and/or frameworks are not restricted in any way. You could only use the existing plugins as reference.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants