Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[IBCDPE-1007] Monitoring and security scanning #14

Merged
merged 164 commits into from
Aug 15, 2024

Conversation

BryanFauble
Copy link
Contributor

Problem:

  1. When running workloads on the K8s cluster we only had a small windows to view what was going on inside of the cluster.

Solution:

  1. Implementing Victoria Metrics (Similar to Prometheus) that allows us to scrape metrics on the K8s cluster.
  2. Implementing trivy to handle security and vulnerability scanning/best practices. This operator also creates new scans as resources are added to the cluster giving updates to the results. It also produces new scans every 6 hours.
  3. Adding policy-reporter to give a nice UI on top of the scan reports

Testing:

  1. I was able to deploy all of this out into the dev cluster and verify that as changes are made to the cluster new scans are produced.
  2. I also verified that I could add new scrape configs and view the data in grafana dashboards.

@spacelift-int-sagebionetworks spacelift-int-sagebionetworks bot temporarily deployed to spacelift/root-spacelift-administrative-stack July 31, 2024 19:22 Inactive
@spacelift-int-sagebionetworks spacelift-int-sagebionetworks bot temporarily deployed to spacelift/root-spacelift-administrative-stack July 31, 2024 21:02 Inactive
@spacelift-int-sagebionetworks spacelift-int-sagebionetworks bot temporarily deployed to spacelift/root-spacelift-administrative-stack July 31, 2024 21:35 Inactive
@spacelift-int-sagebionetworks spacelift-int-sagebionetworks bot temporarily deployed to spacelift/root-spacelift-administrative-stack July 31, 2024 21:39 Inactive
dev/spacelift/dpe-sandbox/main.tf Outdated Show resolved Hide resolved
dev/spacelift/dpe-sandbox/main.tf Show resolved Hide resolved
modules/main.tf Show resolved Hide resolved
@BryanFauble BryanFauble requested a review from BWMac August 12, 2024 17:11
Base automatically changed from ibcdpe-935-vpc-updates to main August 15, 2024 23:02
@BryanFauble BryanFauble merged commit 847e68f into main Aug 15, 2024
3 of 9 checks passed
@BryanFauble BryanFauble deleted the ibcdpe-1007-monitoring branch August 15, 2024 23:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants