Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: improve policy scanning logic #106

Open
deggja opened this issue Jan 18, 2024 · 2 comments
Open

Feature: improve policy scanning logic #106

deggja opened this issue Jan 18, 2024 · 2 comments
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@deggja
Copy link
Owner

deggja commented Jan 18, 2024

Description:

Currently, a pod will be marked as covered if it is targeted by a policy. We dont do much as far as analysing the ingress and egress rules inside the policy goes. We simply check if it has rules or not to determine what type of policy it is.

Goal:

We should improve the scanning logic so that once it has detected a policy, this poilicy should be scanned to determine what the policy is actually doing for the pod as far as cover go.

@deggja deggja added enhancement New feature or request help wanted Extra attention is needed labels Jan 18, 2024
@roopeshsn
Copy link
Contributor

Description:

Currently, a pod will be marked as covered if it is targeted by a policy. We dont do much as far as analysing the ingress and egress rules inside the policy goes. We simply check if it has rules or not to determine what type of policy it is.

Goal:

We should improve the scanning logic so that once it has detected a policy, this poilicy should be scanned to determine what the policy is actually doing for the pod as far as cover go.

Do you have an idea of how to actually implement this?

@deggja
Copy link
Owner Author

deggja commented Mar 27, 2024

@roopeshsn I was talking to some users and friends about this while testing the core functionality a while ago. I think this goes hand in hand with this: #108

Once the functionality for scanning a specific policy is in place, I think it would make sense to build on that to include some version of that functionality in the main scanning logic as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants