knative-extensions / security-guard

Runtime security plug to protect user containers

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add alert aggregation

davidhadas opened this issue · comments

This enhancement is in preparation for integrating into CWPP systems.

Have all gates send the alerts to the guard service.

Alert information should include the following:

  • namespace
  • sid
  • pod name (to identify the affected service instance)
  • time
  • Decision Object
  • Is this a gate-level alert or a session-level alert?

Guard service may log all alerts (have a flag in env to indicate if to log in info or in debug)
Guard service may send all using grpc or... (TBD) to CWPP systems (destination if available is defined by env)

Solved by #152