Community
addon-kyverno-policy-reporter
By upbound
Last changed 2 months ago
Availability
Community
Standard
Enterprise
Business Critical
Security & Maintenance
Backporting
Source Code

Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.

Report this package
Overview
Policy Reporter is a monitoring and observability tool for the PolicyReport CRD standard.
apiVersionOverride.podDisruptionBudget
basicAuth.password
basicAuth.secretRef
basicAuth.username
database.connectionMaxIdleTime
database.connectionMaxLifetime
database.database
database.dsn
database.enableSSL
database.host
database.maxIdleConnections25
database.maxOpenConnections25
database.metrics
database.mountedSecret
database.password
database.secretRef
database.timeout10
database.type
database.username
emailReports.clusterName
emailReports.smtp.certificate
emailReports.smtp.encryption
emailReports.smtp.from
emailReports.smtp.host
emailReports.smtp.password
emailReports.smtp.port465
emailReports.smtp.secret
emailReports.smtp.skipTLS
emailReports.smtp.username
emailReports.summary.activeDeadlineSeconds300
emailReports.summary.backoffLimit3
emailReports.summary.channels[]
emailReports.summary.enabled
emailReports.summary.restartPolicyNever
emailReports.summary.schedule0 8 * * *
emailReports.summary.to[]
emailReports.summary.ttlSecondsAfterFinished
emailReports.titlePrefixReport
emailReports.violations.activeDeadlineSeconds300
emailReports.violations.backoffLimit3
emailReports.violations.channels[]
emailReports.violations.enabled
emailReports.violations.restartPolicyNever
emailReports.violations.schedule0 8 * * *
emailReports.violations.to[]
emailReports.violations.ttlSecondsAfterFinished
envVars[]
existingTargetConfig.enabled
existingTargetConfig.name
existingTargetConfig.subPath
extraManifests[]
extraVolumes.volumeMounts[]
extraVolumes.volumes[]
fullnameOverridepolicy-reporter
httproute.enabled
httproute.hostnames[]
httproute.parentRefs[]
httproute.rules[{"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}]
image.pullPolicyIfNotPresent
image.registryghcr.io
image.repositorykyverno/policy-reporter
image.tag
imagePullSecrets[]
ingress.className
ingress.enabled
ingress.hosts
ingress.tls[]
leaderElection.leaseDuration15
leaderElection.releaseOnCanceltrue
leaderElection.renewDeadline10
leaderElection.retryPeriod2
livenessProbe.httpGet.path/ready
livenessProbe.httpGet.porthttp
logging.encodingconsole
logging.logLevel
logging.server
metrics.customLabels[]
metrics.enabled
metrics.modedetailed
monitoring.clusterPolicyReportDetails.errorTable.enabledtrue
monitoring.clusterPolicyReportDetails.errorTable.height4
monitoring.clusterPolicyReportDetails.failTable.enabledtrue
monitoring.clusterPolicyReportDetails.failTable.height8
monitoring.clusterPolicyReportDetails.passTable.enabledtrue
monitoring.clusterPolicyReportDetails.passTable.height8
monitoring.clusterPolicyReportDetails.statusRow.height6
monitoring.clusterPolicyReportDetails.statusTimeline.enabledtrue
monitoring.clusterPolicyReportDetails.statusTimeline.height8
monitoring.clusterPolicyReportDetails.warningTable.enabledtrue
monitoring.clusterPolicyReportDetails.warningTable.height4
monitoring.enabled
monitoring.grafana.dashboards.enable.clusterPolicyReportDetailstrue
monitoring.grafana.dashboards.enable.overviewtrue
monitoring.grafana.dashboards.enable.policyReportDetailstrue
monitoring.grafana.dashboards.enabledtrue
monitoring.grafana.dashboards.labelgrafana_dashboard
monitoring.grafana.dashboards.labelFilter[]
monitoring.grafana.dashboards.multicluster.enabled
monitoring.grafana.dashboards.multicluster.labelcluster
monitoring.grafana.dashboards.value1
monitoring.grafana.datasource.labelPrometheus
monitoring.grafana.datasource.pluginIdprometheus
monitoring.grafana.datasource.pluginNamePrometheus
monitoring.grafana.folder.annotationgrafana_folder
monitoring.grafana.folder.namePolicy Reporter
monitoring.grafana.grafanaDashboard.allowCrossNamespaceImporttrue
monitoring.grafana.grafanaDashboard.enabled
monitoring.grafana.grafanaDashboard.folderkyverno
monitoring.grafana.grafanaDashboard.matchLabels.dashboardsgrafana
monitoring.grafana.namespace
monitoring.policyReportDetails.errorTable.enabledtrue
monitoring.policyReportDetails.errorTable.height4
monitoring.policyReportDetails.failTable.enabledtrue
monitoring.policyReportDetails.failTable.height8
monitoring.policyReportDetails.firstStatusRow.height8
monitoring.policyReportDetails.passTable.enabledtrue
monitoring.policyReportDetails.passTable.height8
monitoring.policyReportDetails.secondStatusRow.enabledtrue
monitoring.policyReportDetails.secondStatusRow.height2
monitoring.policyReportDetails.statusTimeline.enabledtrue
monitoring.policyReportDetails.statusTimeline.height8
monitoring.policyReportDetails.warningTable.enabledtrue
monitoring.policyReportDetails.warningTable.height4
monitoring.policyReportOverview.failingClusterPolicyRuleTable.height10
monitoring.policyReportOverview.failingPolicyRuleTable.height10
monitoring.policyReportOverview.failingSummaryRow.height8
monitoring.policyReportOverview.failingTimeline.height10
monitoring.serviceMonitor.honorLabels
monitoring.serviceMonitor.interval
monitoring.serviceMonitor.metricRelabelings[]
monitoring.serviceMonitor.namespace
monitoring.serviceMonitor.relabelings[]
monitoring.serviceMonitor.scrapeTimeout
monitoring.serviceMonitor.secure
nameOverride
namespaceOverride
networkPolicy.egress[{"ports":[{"port":6443,"protocol":"TCP"}],"to":null}]
networkPolicy.enabled
networkPolicy.ingress[]
periodicSync.enabled
periodicSync.interval30
plugin.kyverno.blockReports.enabled
plugin.kyverno.blockReports.eventNamespacedefault
plugin.kyverno.blockReports.policyReport.annotations[]
plugin.kyverno.blockReports.policyReport.labels[]
plugin.kyverno.blockReports.results.keepOnlyLatest
plugin.kyverno.blockReports.results.maxPerReport200
plugin.kyverno.blockReports.sourceKyverno Event
plugin.kyverno.enabled
plugin.kyverno.envVars[]
plugin.kyverno.extraVolumes.volumeMounts[]
plugin.kyverno.extraVolumes.volumes[]
plugin.kyverno.httproute.enabled
plugin.kyverno.httproute.hostnames[]
plugin.kyverno.httproute.parentRefs[]
plugin.kyverno.httproute.rules[{"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}]
plugin.kyverno.image.pullPolicyIfNotPresent
plugin.kyverno.image.registryghcr.io
plugin.kyverno.image.repositorykyverno/policy-reporter/kyverno-plugin
plugin.kyverno.image.tag0.6.0
plugin.kyverno.imagePullSecrets[]
plugin.kyverno.ingress.className
plugin.kyverno.ingress.enabled
plugin.kyverno.ingress.hosts[]
plugin.kyverno.ingress.tls[]
plugin.kyverno.leaderElection.leaseDuration15
plugin.kyverno.leaderElection.lockNamekyverno-plugin
plugin.kyverno.leaderElection.releaseOnCanceltrue
plugin.kyverno.leaderElection.renewDeadline10
plugin.kyverno.leaderElection.retryPeriod2
plugin.kyverno.logging.api
plugin.kyverno.logging.encodingconsole
plugin.kyverno.logging.logLevel
plugin.kyverno.logging.server
plugin.kyverno.networkPolicy.egress[{"ports":[{"port":6443,"protocol":"TCP"}]}]
plugin.kyverno.networkPolicy.enabled
plugin.kyverno.networkPolicy.ingress[]
plugin.kyverno.podDisruptionBudget.maxUnavailable
plugin.kyverno.podDisruptionBudget.minAvailable1
plugin.kyverno.podSecurityContext.runAsGroup1234
plugin.kyverno.podSecurityContext.runAsUser1234
plugin.kyverno.priorityClassName
plugin.kyverno.rbac.enabledtrue
plugin.kyverno.replicaCount1
plugin.kyverno.revisionHistoryLimit10
plugin.kyverno.securityContext.allowPrivilegeEscalation
plugin.kyverno.securityContext.capabilities.drop["ALL"]
plugin.kyverno.securityContext.privileged
plugin.kyverno.securityContext.readOnlyRootFilesystemtrue
plugin.kyverno.securityContext.runAsNonRoottrue
plugin.kyverno.securityContext.runAsUser1234
plugin.kyverno.securityContext.seccompProfile.typeRuntimeDefault
plugin.kyverno.server.port8080
plugin.kyverno.service.port8080
plugin.kyverno.service.typeClusterIP
plugin.kyverno.serviceAccount.automounttrue
plugin.kyverno.serviceAccount.createtrue
plugin.kyverno.serviceAccount.name
plugin.kyverno.tolerations[]
plugin.trivy.cli.image.pullPolicyIfNotPresent
plugin.trivy.cli.image.registryghcr.io
plugin.trivy.cli.image.repositoryaquasecurity/trivy
plugin.trivy.cli.image.tag0.69.3
plugin.trivy.cveawg.disable
plugin.trivy.enabled
plugin.trivy.envVars[]
plugin.trivy.extraVolumes.volumeMounts[]
plugin.trivy.extraVolumes.volumes[]
plugin.trivy.github.disable
plugin.trivy.github.token
plugin.trivy.image.pullPolicyIfNotPresent
plugin.trivy.image.registryghcr.io
plugin.trivy.image.repositorykyverno/policy-reporter/trivy-plugin
plugin.trivy.image.tag0.4.12
plugin.trivy.imagePullSecrets[]
plugin.trivy.ingress.className
plugin.trivy.ingress.enabled
plugin.trivy.ingress.hosts[]
plugin.trivy.ingress.tls[]
plugin.trivy.livenessProbe.httpGet.path/vulnr/v1/policies
plugin.trivy.livenessProbe.httpGet.porthttp
plugin.trivy.livenessProbe.timeoutSeconds3
plugin.trivy.logging.api
plugin.trivy.logging.encodingconsole
plugin.trivy.logging.logLevel
plugin.trivy.logging.server
plugin.trivy.networkPolicy.egress[{"ports":[{"port":6443,"protocol":"TCP"}]}]
plugin.trivy.networkPolicy.enabled
plugin.trivy.networkPolicy.ingress[]
plugin.trivy.podDisruptionBudget.maxUnavailable
plugin.trivy.podDisruptionBudget.minAvailable1
plugin.trivy.podSecurityContext.runAsGroup1234
plugin.trivy.podSecurityContext.runAsUser1234
plugin.trivy.policyReporter.certificate
plugin.trivy.policyReporter.secretRef
plugin.trivy.policyReporter.skipTLS
plugin.trivy.priorityClassName
plugin.trivy.rbac.enabledtrue
plugin.trivy.readinessProbe.httpGet.path/vulnr/v1/policies
plugin.trivy.readinessProbe.httpGet.porthttp
plugin.trivy.readinessProbe.timeoutSeconds3
plugin.trivy.replicaCount1
plugin.trivy.revisionHistoryLimit10
plugin.trivy.securityContext.allowPrivilegeEscalation
plugin.trivy.securityContext.capabilities.drop["ALL"]
plugin.trivy.securityContext.privileged
plugin.trivy.securityContext.readOnlyRootFilesystemtrue
plugin.trivy.securityContext.runAsNonRoottrue
plugin.trivy.securityContext.runAsUser1234
plugin.trivy.securityContext.seccompProfile.typeRuntimeDefault
plugin.trivy.server.port8080
plugin.trivy.service.port8080
plugin.trivy.service.typeClusterIP
plugin.trivy.serviceAccount.automounttrue
plugin.trivy.serviceAccount.createtrue
plugin.trivy.serviceAccount.name
plugin.trivy.tolerations[]
podDisruptionBudget.maxUnavailable
podDisruptionBudget.minAvailable1
podSecurityContext.fsGroup1234
port.namehttp
port.number8080
priorityClassName
profiling.enabled
rbac.enabledtrue
readinessProbe.httpGet.path/healthz
readinessProbe.httpGet.porthttp
redis.address
redis.certificate
redis.clientCert
redis.clientKey
redis.database
redis.enabled
redis.password
redis.prefixpolicy-reporter
redis.secretRef
redis.skipTLS
redis.username
replicaCount1
rest.enabled
revisionHistoryLimit10
securityContext.allowPrivilegeEscalation
securityContext.capabilities.drop["ALL"]
securityContext.privileged
securityContext.readOnlyRootFilesystemtrue
securityContext.runAsNonRoottrue
securityContext.runAsUser1234
securityContext.seccompProfile.typeRuntimeDefault
service.enabledtrue
service.port8080
service.typeClusterIP
serviceAccount.automounttrue
serviceAccount.createtrue
serviceAccount.name
sourceConfig[]
sourceFilters[{"disableClusterReports":false,"kinds":{"exclude":["ReplicaSet"]},"selector":{"sources":["kyverno","KyvernoValidatingPolicy","KyvernoImageValidatingPolicy"]},"uncontrolledOnly":true}]
target.alertManager.certificate
target.alertManager.channels[]
target.alertManager.host
target.alertManager.minimumSeverity
target.alertManager.mountedSecret
target.alertManager.secretRef
target.alertManager.skipExistingOnStartuptrue
target.alertManager.skipTLS
target.alertManager.sources[]
target.crd
target.discord.certificate
target.discord.channels[]
target.discord.minimumSeverity
target.discord.mountedSecret
target.discord.secretRef
target.discord.skipExistingOnStartuptrue
target.discord.skipTLS
target.discord.sources[]
target.discord.webhook
target.elasticsearch.apiKey
target.elasticsearch.certificate
target.elasticsearch.channels[]
target.elasticsearch.host
target.elasticsearch.indexpolicy-reporter
target.elasticsearch.minimumSeverity
target.elasticsearch.mountedSecret
target.elasticsearch.password
target.elasticsearch.rotationdaily
target.elasticsearch.secretRef
target.elasticsearch.skipExistingOnStartuptrue
target.elasticsearch.skipTLS
target.elasticsearch.sources[]
target.elasticsearch.typelessApi
target.elasticsearch.username
target.gcs.bucket
target.gcs.channels[]
target.gcs.credentials
target.gcs.minimumSeverity
target.gcs.mountedSecret
target.gcs.secretRef
target.gcs.skipExistingOnStartuptrue
target.gcs.sources[]
target.googleChat.certificate
target.googleChat.channels[]
target.googleChat.minimumSeverity
target.googleChat.mountedSecret
target.googleChat.secretRef
target.googleChat.skipExistingOnStartuptrue
target.googleChat.skipTLS
target.googleChat.sources[]
target.googleChat.webhook
target.jira.apiToken
target.jira.apiVersionv3
target.jira.certificate
target.jira.channels[]
target.jira.components[]
target.jira.host
target.jira.issueType
target.jira.labels[]
target.jira.minimumSeverity
target.jira.mountedSecret
target.jira.password
target.jira.projectKey
target.jira.secretRef
target.jira.skipExistingOnStartuptrue
target.jira.skipTLS
target.jira.sources[]
target.jira.summaryTemplate
target.jira.username
target.kinesis.accessKeyId
target.kinesis.channels[]
target.kinesis.endpoint
target.kinesis.minimumSeverity
target.kinesis.mountedSecret
target.kinesis.region
target.kinesis.secretAccessKey
target.kinesis.secretRef
target.kinesis.skipExistingOnStartuptrue
target.kinesis.sources[]
target.kinesis.streamName
target.loki.certificate
target.loki.channels[]
target.loki.host
target.loki.minimumSeverity
target.loki.mountedSecret
target.loki.password
target.loki.path
target.loki.secretRef
target.loki.skipExistingOnStartuptrue
target.loki.skipTLS
target.loki.sources[]
target.loki.username
target.s3.accessKeyId
target.s3.bucket
target.s3.bucketKeyEnabled
target.s3.channels[]
target.s3.endpoint
target.s3.kmsKeyId
target.s3.minimumSeverity
target.s3.mountedSecret
target.s3.pathStyle
target.s3.prefix
target.s3.region
target.s3.secretAccessKey
target.s3.secretRef
target.s3.serverSideEncryption
target.s3.skipExistingOnStartuptrue
target.s3.sources[]
target.securityHub.accessKeyId
target.securityHub.accountId
target.securityHub.channels[]
target.securityHub.companyName
target.securityHub.delayInSeconds2
target.securityHub.endpoint
target.securityHub.minimumSeverity
target.securityHub.mountedSecret
target.securityHub.productName
target.securityHub.region
target.securityHub.secretAccessKey
target.securityHub.secretRef
target.securityHub.skipExistingOnStartuptrue
target.securityHub.sources[]
target.securityHub.synchronizetrue
target.slack.channel
target.slack.channels[]
target.slack.minimumSeverity
target.slack.mountedSecret
target.slack.secretRef
target.slack.skipExistingOnStartuptrue
target.slack.sources[]
target.slack.webhook
target.teams.certificate
target.teams.channels[]
target.teams.minimumSeverity
target.teams.mountedSecret
target.teams.secretRef
target.teams.skipExistingOnStartuptrue
target.teams.skipTLS
target.teams.sources[]
target.teams.webhook
target.telegram.certificate
target.telegram.channels[]
target.telegram.chatId
target.telegram.host
target.telegram.minimumSeverity
target.telegram.mountedSecret
target.telegram.secretRef
target.telegram.skipExistingOnStartuptrue
target.telegram.skipTLS
target.telegram.sources[]
target.telegram.token
target.webhook.certificate
target.webhook.channels[]
target.webhook.keepalive.interval0
target.webhook.minimumSeverity
target.webhook.mountedSecret
target.webhook.secretRef
target.webhook.skipExistingOnStartuptrue
target.webhook.skipTLS
target.webhook.sources[]
target.webhook.webhook
tolerations[]
topologySpreadConstraints[]
ui.banner
ui.clusters[]
ui.crds.customBoard
ui.customBoards[]
ui.displayMode
ui.enabled
ui.envVars[]
ui.extraVolumes.volumeMounts[]
ui.extraVolumes.volumes[]
ui.httproute.enabled
ui.httproute.hostnames[]
ui.httproute.parentRefs[]
ui.httproute.rules[{"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}]
ui.image.pullPolicyIfNotPresent
ui.image.registryghcr.io
ui.image.repositorykyverno/policy-reporter-ui
ui.image.tag2.5.1
ui.imagePullSecrets[]
ui.ingress.className
ui.ingress.enabled
ui.ingress.hosts[]
ui.ingress.port
ui.ingress.tls[]
ui.livenessProbe.httpGet.path/healthz
ui.livenessProbe.httpGet.porthttp
ui.logging.api
ui.logging.encodingconsole
ui.logging.logLevel
ui.logging.server
ui.logo.disabled
ui.logo.path
ui.nameDefault
ui.networkPolicy.egress[{"ports":[{"port":6443,"protocol":"TCP"}]}]
ui.networkPolicy.enabled
ui.networkPolicy.ingress[]
ui.oauth.callbackUrl
ui.oauth.clientId
ui.oauth.clientSecret
ui.oauth.enabled
ui.oauth.provider
ui.oauth.scopes[]
ui.oauth.secretRef
ui.openIDConnect.callbackUrl
ui.openIDConnect.certificate
ui.openIDConnect.clientId
ui.openIDConnect.clientSecret
ui.openIDConnect.discoveryUrl
ui.openIDConnect.enabled
ui.openIDConnect.groupClaim
ui.openIDConnect.scopes[]
ui.openIDConnect.secretRef
ui.openIDConnect.skipTLS
ui.podDisruptionBudget.maxUnavailable
ui.podDisruptionBudget.minAvailable1
ui.podSecurityContext.runAsGroup1234
ui.podSecurityContext.runAsUser1234
ui.priorityClassName
ui.rbac.enabledtrue
ui.readinessProbe.httpGet.path/healthz
ui.readinessProbe.httpGet.porthttp
ui.replicaCount1
ui.revisionHistoryLimit10
ui.securityContext.allowPrivilegeEscalation
ui.securityContext.capabilities.drop["ALL"]
ui.securityContext.privileged
ui.securityContext.readOnlyRootFilesystemtrue
ui.securityContext.runAsNonRoottrue
ui.securityContext.runAsUser1234
ui.securityContext.seccompProfile.typeRuntimeDefault
ui.server.corstrue
ui.server.overwriteHosttrue
ui.server.port8080
ui.server.sessions.storagefilesystem
ui.server.sessions.tempDir/tmp
ui.service.additionalPorts[]
ui.service.port8080
ui.service.typeClusterIP
ui.serviceAccount.automounttrue
ui.serviceAccount.createtrue
ui.serviceAccount.name
ui.sources[]
ui.tolerations[]
worker5