Dashboards for application behavior and KubeArmor state

[DelusionalOptimist]

Feature Request

Description

Kubernetes dashboard The Kubernetes dashboard provides a mechanism for creating custom plugins - ref. This dashboard will allow the users to easily see the state and manage KubeArmor policies, default posture, protected containers and more in the user's cluster.

Kibana/Grafana dashboard For showing an application's behaviour, we'd like to have a Kibana/Grafana dashboard. We have existing integrations for visualizing alerts with Elastic/Loki and we can use them for creating these. We want to leverage the above for creating a plugin which will allow users to see an application's behavior based on visibility logs sent by KubeArmor.

Requirements

Goals

• [ ] Kubernetes dashboard
• [ ] Elastic/Grafana dashboard

Basic requirements from the dashboards

App behavior dashboard

• [ ] Process list with aggregated count
• [ ] File access with aggregated count.
• [ ] Network access with aggregated count.
• [ ] Being able to query if a process has been executed.

KubeArmor state dashboard

• [ ] Show and configure default posture/visibility for a pod/namespace.
• [ ] List KubeArmor/KubeArmorHost policies.
• [ ] List protected containers/nodes

Further reference

• We already have a TUI for app behaviour under the karmor profile command.
• We show the state of policies and protected objects under the karmor probe command.
• We have some existing dashboards available at - https://github.com/kubearmor/kubearmor-dashboards. However, they are more oriented towards analyzing and showing alerts instead of an application's overall behavior.

[Vickysomtee]

@DelusionalOptimist I not sure what the mentorship tag means, so I want to verify if this issue is open for anyone to handle. If yes, I am interested in this.

[PrimalPimmy]

@Vickysomtee The mentorship tag means this issue is in consideration for LFX mentorship.

[Vickysomtee]

Oh! Alright

[harisudarsan1]

I'm interested in this issue

[7h3-3mp7y-m4n]

That sounds like a good feature, I'm interested in it :)

[hanshal101]

Hey, @DelusionalOptimist, this feature sounds good to me. Since I'm new to the LFX Mentorship ecosystem, should I start working on some parts of this feature? It will be good practice for me to understand the mentorship environment.

[Ayush9026]

Hi @DelusionalOptimist sir I want to work on this issue.

[daemon1024]

Hey Folks, Thanks for the interest in the mentorship. We have certain prerequisites which we expect to be included in your application.Please include details or reference to a document for the said prerequisite in your Cover Letter / Mail to the mentors / Submit it in the issue thread / DM Mentors in KubeArmor Slack by 20 Feb.

Following are the details.

Dashboards for application behavior and KubeArmor state - https://mentorship.lfx.linuxfoundation.org/project/a604ba9c-565d-4e8c-aed2-dcd4ebedc85d Prerequisite: Create a sample Kubernetes Dashboards Plugin Background: We want to have native integration for Kubernetes Dashboard. Creating a Kubernetes Dashboard involves understanding the Angular Plugin Framework that they use. So we would like the mentee to try setting up a sample Kubernetes Dashboard Plugin by following their documentation. This helps us gain clarity that atleast some form of Plugin would be achievable by the mentee.

[harisudarsan1]

Tasklist: https://docs.google.com/document/d/1rHzeIRuJ_jjpqHm7cZfTm8Mp3f7UxWwG4c9QjygJK4Y/edit?usp=sharing