ClusterComplianceReport
aquasecurity.github.io / v1alpha1
apiVersion: aquasecurity.github.io/v1alpha1
kind: ClusterComplianceReport
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
ReportSpec represent the compliance specification
compliance object required
controls []object required
Control represent the cps controls data and mapping checks
checks []object
id
string required
id define the check id as produced by scanner
commands []object
id
string required
id define the commands id
defaultStatus
string
define the default value for check status in case resource not found
enum:
PASS, WARN, FAIL
description
string
id
string required
id define the control check id
name
string required
severity
string required
define the severity of the control
enum:
CRITICAL, HIGH, MEDIUM, LOW, UNKNOWN
description
string required
id
string required
platform
string required
relatedResources
[]string required
title
string required
type
string required
version
string required
cron
string required
cron define the intervals for report generation
pattern:
pattern: ^(((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1-5]{1}){1}([0-9]{1}){1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){...
^(((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1-5]{1}){1}([0-9]{1}){1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1]{1}){1}([0-9]{1}){1}){1}|([2]{1}){1}([0-3]{1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([1-9]{1}){1}|(([1-2]{1}){1}([0-9]{1}){1}){1}|([3]{1}){1}([0-1]{1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([1-9]{1}){1}|(([1-2]{1}){1}([0-9]{1}){1}){1}|([3]{1}){1}([0-1]{1}){1}))|(jan|feb|mar|apr|may|jun|jul|aug|sep|okt|nov|dec)) ((([\*]{1}){1})|((\*\/){0,1}(([0-7]{1}){1}))|(sun|mon|tue|wed|thu|fri|sat)))$
reportType
string required
enum:
summary, allstatus object
detailReport object
ComplianceReport represents a kubernetes scan report
description
string
id
string
relatedVersion
[]string
results []object
checks []object required
category
string
checkID
string required
description
string
messages
[]string
remediation
string
Remediation provides description or links to external resources to remediate failing check.
severity
string required
Severity level of a vulnerability or a configuration audit check.
success
boolean required
target
string
title
string
description
string
id
string
name
string
severity
string
status
string
title
string
version
string
summary object
failCount
integer
passCount
integer
summaryReport object
SummaryReport represents a kubernetes scan report with consolidated findings
controlCheck []object
id
string
name
string
severity
string
totalFail
integer
id
string
title
string
updateTimestamp
string required
format:
date-timeNo matches. Try .spec.compliance for an exact path