Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k8s.pod asset: "--discover pods-all" flag #4884

Open
DrackThor opened this issue Nov 18, 2024 · 0 comments
Open

k8s.pod asset: "--discover pods-all" flag #4884

DrackThor opened this issue Nov 18, 2024 · 0 comments

Comments

@DrackThor
Copy link

Is your feature request related to a problem? Please describe.
Currently, when using cnspec for k8s, if I specify "--discover pods", not all pods of my cluster are detected.
If I want to access information of individual pods (eg node or status), I can only do so for the subset of pods that are being respected by "--discover pods".

Describe the solution you'd like
It would be great to have a "--discover" option, eg "pods-all", to discover each pod on the cluster.

Describe alternatives you've considered
None available, if I need to access pod-specific information of pods, created by another object (Deployment, Daemonset,..).

Additional context
We want to be able to build pod based policies, without having to specify the policy for each type of pod-creating asset type (Deployment, Daemonset,..).
Instead (or in addition) to having to write a policy for each k8s workload type, we can also have one generic policy for pods.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant