-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathannotations.ts
126 lines (85 loc) · 5.64 KB
/
annotations.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
/* Sysdig Annotations for Components */
/********************************* Inventory *********************************/
/*
* Inventory
*/
// The external DNS that will be included in the results. Example: "ec2-102-34-15-23.compute-1.amazonaws.com"
export const SYSDIG_EXTERNALDNS_ANNOTATION = "sysdigcloud.com/externaldns";
// The kubernetes distribution that will be included in the results. Example: "gke"
export const SYSDIG_DISTRIBUTION_ANNOTATION = "sysdigcloud.com/kubernetes-distribution";
// The resource labels that will be included in the results. Example: "app.kubernetes.io/managed-by:Helm"
export const SYSDIG_LABELS_ANNOTATION = "sysdigcloud.com/kubernetes-labels";
// The names that will be included in the results. Example: "aws-bucket1"
export const SYSDIG_RESOURCE_NAME_ANNOTATION = "sysdigcloud.com/resource-name";
// Origin of the resource. Supported values: "Code", "Deployed".
export const SYSDIG_RESOURCE_ORIGIN_ANNOTATION = "sysdigcloud.com/resource-origin";
// The resource types that will be included in the results. Example: "Account"
export const SYSDIG_RESOURCE_TYPE_ANNOTATION = "sysdigcloud.com/resource-type";
// The nodeType that will be included in the results. Example: "Worker"
export const SYSDIG_NODE_TYPE_ANNOTATION = "sysdigcloud.com/kubernetes-node-type";
// The operating system that will be included in the results. Example: "linux"
export const SYSDIG_OS_NAME_ANNOTATION = "sysdigcloud.com/os-name";
// The operating system image that will be included in the results. Example: "Ubuntu 18.04.6 LTS"
export const SYSDIG_OS_IMAGE_ANNOTATION = "sysdigcloud.com/os-image";
// The platform that will be included in the results. Example: "AWS"
export const SYSDIG_PLATFORM_ANNOTATION = "sysdigcloud.com/platform";
// The account that will be included in the results. Example: "285211435247"
export const SYSDIG_ACCOUNT_ANNOTATION = "sysdigcloud.com/account";
// The organization that will be included in the results. Example: "s-xqe92dwe61"
export const SYSDIG_ORGANIZATION_ANNOTATION = "sysdigcloud.com/organization";
// The project that will be included in the results. Example: "project1"
export const SYSDIG_PROJECT_ANNOTATION = "sysdigcloud.com/project";
// The regions that will be included in the results. Example: "europe-west1"
export const SYSDIG_REGION_ANNOTATION = "sysdigcloud.com/region";
// The Azure subscriptions that will be included in the results. Example: "Azure subscription 1"
export const SYSDIG_AZURE_SUBSCRIPTION_ANNOTATION = "sysdigcloud.com/azure-subscription";
// The version that will be included in the results. Example: "1.1"
export const SYSDIG_VERSION_ANNOTATION = "sysdigcloud.com/version";
// The zone that will be included in the results.. Example: "zone1"
export const SYSDIG_ZONE_ANNOTATION = "sysdigcloud.com/zone";
// The category that will be included in the results. Example: "IAM"
export const SYSDIG_CATEGORY_ANNOTATION = "sysdigcloud.com/category";
/*
* IaC
*/
// The name of the integration an IaC resource belongs to. Example: "github-integration"
export const SYSDIG_INTEGRATION_NAME_ANNOTATION = "sysdigcloud.com/iac-integration-name";
// The web address of an IaC Manifest. Example: "https://bitbucket.org/organizations-workspace/teams-repository/src"
export const SYSDIG_LOCATION_ANNOTATION = "sysdigcloud.com/iac-manifest-location";
// The Repository an IaC resource belongs to. Example: "e2e-repo"
export const SYSDIG_REPOSITORY_ANNOTATION = "sysdigcloud.com/iac-repository";
// The source type of an IaC resource. Supported values: YAML, Kustomize, Terraform, Helm.
export const SYSDIG_SOURCE_TYPE_ANNOTATION = "sysdigcloud.com/source-type";
/********************************* Vuln Management *********************************/
/*
* Runtime
*/
// Runtime annotation values also support comma separated values. Example "prod-gke,prod-eks"
// The cluster that will be included in the results. Example: "prod-gke"
export const SYSDIG_CLUSTER_NAME_ANNOTATION = "sysdigcloud.com/kubernetes-cluster-name";
// The namespace that will be included in the results. Example: "sock-shop"
export const SYSDIG_NAMESPACE_ANNOTATION = "sysdigcloud.com/kubernetes-namespace-name";
// The workload name that will be included in the results. Example: "sock-shop-carts"
export const SYSDIG_WORKLOAD_ANNOTATION = "sysdigcloud.com/kubernetes-workload-name";
// The workload type that will be included in the results. Example: "deployment"
export const SYSDIG_WORKLOAD_TYPE_ANNOTATION = "sysdigcloud.com/kubernetes-workload-type";
// The container name that will be included in the results. Example: "carts"
export const SYSDIG_CONTAINER_ANNOTATION = "sysdigcloud.com/kubernetes-container-name";
/*
* Registry
*/
// The registry name that will be included in the results. Example: "registry-harbor-registry.registry.svc.cluster.local:5443"
export const SYSDIG_REGISTRY_NAME_ANNOTATION = "sysdigcloud.com/registry-name";
// The registry vendor that will be included in the results. Example: "harbor"
export const SYSDIG_REGISTRY_VENDOR_ANNOTATION = "sysdigcloud.com/registry-vendor";
// The registry repository that will be included in the results. Example: "library/nginx"
export const SYSDIG_REGISTRY_REPOSITORY_ANNOTATION = "sysdigcloud.com/registry-repository";
/*
* Pipeline
*/
// Free text search to match an image or set of images.
// Examples: "sysdig-cli-scanner:1.6.1", "ghcr.io/sysdiglabs/sysdig-cli-scanner", "ghcr.io/sysdiglabs"
export const SYSDIG_IMAGE_FREETEXT_ANNOTATION = "sysdigcloud.com/image-freetext";
/********************************* Custom *********************************/
// Free Sysdig filtering syntax. Overrides any other Sysdig annotation value!
export const SYSDIG_CUSTOM_FILTER_ANNOTATION = "sysdigcloud.com/custom-filter";