You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
karmor summary is showing serviceaccount token access from knoxAutoPolicy binary, but when used with --agg flag the data is getting skipped
karmor summary -n explorer
Pod Name knoxautopolicy-8587dfd464-mrz6b
Namespace Name explorer
Cluster Name default
Container Name knoxautopolicy
Labels container=knoxautopolicy
File Data
+-----------------+---------------------------------------------------------------------------------+-------+------------------------------+--------+
| SRC PROCESS | DESTINATION FILE PATH | COUNT | LAST UPDATED TIME | STATUS |
+-----------------+---------------------------------------------------------------------------------+-------+------------------------------+--------+
| /knoxAutoPolicy | /accuknox-obs.db | 34 | Thu Oct 6 06:24:01 UTC 2022 | Allow |
| /knoxAutoPolicy | /run/secrets/kubernetes.io/serviceaccount/..2022_10_06_06_05_10.034039894/token | 10 | Thu Oct 6 06:23:41 UTC 2022 | Allow |
| /knoxAutoPolicy | /accuknox.db | 17 | Thu Oct 6 06:24:01 UTC 2022 | Allow |
+-----------------+---------------------------------------------------------------------------------+-------+------------------------------+--------+
Ingress connections
+----------+-----------------+------------+------+-----------+--------+
| PROTOCOL | COMMAND | POD/SVC/IP | PORT | NAMESPACE | LABELS |
+----------+-----------------+------------+------+-----------+--------+
| TCPv6 | /knoxAutoPolicy | 127.0.0.1 | 9089 | | |
+----------+-----------------+------------+------+-----------+--------+
Egress connections
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
| PROTOCOL | COMMAND | POD/SVC/IP | PORT | NAMESPACE | LABELS |
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
| TCP | /knoxAutoPolicy | svc/kubernetes | 443 | default | component=apiserver,provider=kubernetes |
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
karmor summary -n explorer --agg
Pod Name knoxautopolicy-8587dfd464-mrz6b
Namespace Name explorer
Cluster Name default
Container Name knoxautopolicy
Labels container=knoxautopolicy
File Data
+-----------------+-----------------------+-------+------------------------------+--------+
| SRC PROCESS | DESTINATION FILE PATH | COUNT | LAST UPDATED TIME | STATUS |
+-----------------+-----------------------+-------+------------------------------+--------+
| /knoxAutoPolicy | | 61 | Thu Oct 6 06:24:01 UTC 2022 | Allow |
+-----------------+-----------------------+-------+------------------------------+--------+
Ingress connections
+----------+-----------------+------------+------+-----------+--------+
| PROTOCOL | COMMAND | POD/SVC/IP | PORT | NAMESPACE | LABELS |
+----------+-----------------+------------+------+-----------+--------+
| TCPv6 | /knoxAutoPolicy | 127.0.0.1 | 9089 | | |
+----------+-----------------+------------+------+-----------+--------+
Egress connections
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
| PROTOCOL | COMMAND | POD/SVC/IP | PORT | NAMESPACE | LABELS |
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
| TCP | /knoxAutoPolicy | svc/kubernetes | 443 | default | component=apiserver,provider=kubernetes |
+----------+-----------------+----------------+------+-----------+-----------------------------------------+
According to the help it should aggregate based on the destination files/folder
karmor summary -h
Discovery engine keeps the telemetry information from the policy enforcement engines and the karmor connects to it to provide this as observability data
Usage:
karmor summary [flags]
Flags:
--agg Aggregate destination files/folder path
karmor version
karmor version 0.9.9 linux/amd64 BuildDate=2022-09-29T06:37:07Z
current version is the latest
kubearmor image (running) version kubearmor/kubearmor:stable
The text was updated successfully, but these errors were encountered:
vishnusomank
changed the title
karmor summary showing imcomplete data when used with --agg flag
karmor summary showing incomplete data when used with --agg flag
Oct 6, 2022
karmor summary
is showing serviceaccount token access fromknoxAutoPolicy
binary, but when used with--agg
flag the data is getting skippedAccording to the help it should aggregate based on the destination files/folder
The text was updated successfully, but these errors were encountered: