alexandre.pires
255ba6aec9
- Updated `generate_report.sh` to include additional scanners and output paths. - Enhanced `send_report.py` with new data classes for misconfigurations and vulnerabilities. - Improved parsing logic for Trivy output, supporting both Kubernetes and image scans. - Added Prometheus metrics generation for various scan results, including misconfigurations and vulnerabilities. - Introduced unit tests for parsing Trivy output and generating Prometheus metrics. - Modified Terraform variables for SMTP port type and added Pushgateway URL variable.
47 lines
1.6 KiB
YAML
47 lines
1.6 KiB
YAML
global:
|
|
scrape_interval: 5s
|
|
evaluation_interval: 5s
|
|
rule_files:
|
|
- /etc/prometheus/prometheus.rules
|
|
scrape_configs:
|
|
- job_name: kubernetes-nodes-cadvisor
|
|
scrape_interval: 10s
|
|
scrape_timeout: 10s
|
|
scheme: https # remove if you want to scrape metrics on insecure port
|
|
tls_config:
|
|
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
insecure_skip_verify: true
|
|
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
kubernetes_sd_configs:
|
|
- role: node
|
|
relabel_configs:
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_node_label_(.+)
|
|
# Only for Kubernetes ^1.7.3.
|
|
# See: https://github.com/prometheus/prometheus/issues/2916
|
|
- target_label: __address__
|
|
replacement: kubernetes.default.svc:443
|
|
- source_labels: [__meta_kubernetes_node_name]
|
|
regex: (.+)
|
|
target_label: __metrics_path__
|
|
replacement: /api/v1/nodes/${1}/proxy/metrics/cadvisor
|
|
metric_relabel_configs:
|
|
- action: replace
|
|
source_labels: [id]
|
|
regex: '^/machine\.slice/machine-rkt\\x2d([^\\]+)\\.+/([^/]+)\.service$'
|
|
target_label: rkt_container_name
|
|
replacement: "${2}-${1}"
|
|
- action: replace
|
|
source_labels: [id]
|
|
regex: '^/system\.slice/(.+)\.service$'
|
|
target_label: systemd_service_name
|
|
replacement: "${1}"
|
|
- job_name: pushgateway
|
|
honor_labels: true
|
|
static_configs:
|
|
- targets: ["pushgateway.prometheus.svc.cluster.local:9091"]
|
|
alerting:
|
|
alertmanagers:
|
|
- static_configs:
|
|
- targets: ["alertmanager.prometheus.svc.cluster.local:9093"]
|