CMP-2872: Implement the cel-scanner component #692
Conversation
…eferences - Introduce scannerType to ComplianceScan and ComplianceSuite for specifying OpenSCAP or CEL. - Add custom rule CRD (compliance.openshift.io_customrules.yaml) and types. - Extend TailoredProfile references with a 'kind' field to differentiate between Rule and CustomRule.
The cel-scanner reads collected resources and evaluates them against the defined CEL rules. The scanner pod creates Compliance Check Result directly The results are saved in a specified directory on the pod as optional.
|
#686 needs to be merged before this PR, we cherry picked the commit from that PR |
|
@Vincent056: This pull request references CMP-2872 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.19.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: Vincent056 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
@Vincent056: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
close in favor of #671 |
3 participants
The cel-scanner reads collected resources and evaluates them against the defined CEL rules.
The scanner pod creates Compliance Check Results directly
The results are saved in a specified directory on the pod as optional.