Policy Reporter consists of up to three components.
This is the core application and watches for PolicyReporter and ClusterPolicyReporter CRD resources in the cluster. Policy Reporter uses internal listeners to react to incoming events and apply its logic to them.
- MetricsListener (optional) creates metrics based on new, updated, and removed resources
- StoreListener (optional) persists new resources and every change of an existing resource in an internal representation in the included SQLite database
- ResultsListener checks each new and updated report for new results and publishes them to all registered PolicyResultListeners
- SendResultListener is a PolicyResultListener and sends all new results to the configured targets
Processed information is available over the embedded HTTP server as API endpoints. See API Reference for details.
This component watches for the Kyverno (Cluster)Policy CRDs like the Policy Reporter core application for the (Cluster)PolicyReport CRDs. The collected data is transformed into a internal format and available over the embedded HTTP server as API endpoints.
This component is independent from the Policy Reporter core application and only consumed by the Policy Reporter UI.
This component is an optional, standalone UI for information provided by the Policy Reporter core application (and Policy Reporter Kyverno Plugin). The intention was to provide a simple alternative to external monitoring solutions such as Grafana, which are not always available. The UI is a NuxtJS based single-page application and is served over a Golang-based static file server. This server also proxies all requests made by the UI to the Policy Reporter API.
The Kyverno integration is an optional plugin. If enabled, it provides additional views about Kyverno policies. This information is provided by the Policy Reporter Kyverno Plugin which will also be proxied.