Packages💣
Columns:
- Logging - fluentbit configurations for standardized logging
- Telemetry - Integration with Prometheus and dedicated Grafana dashboards as appropriate
- Tracing - Insertion of Tracing data for application traffic
- Network Policies - Network Policies for L2 connectivity,
- mTLS -mTLS for application traffic, e.g. implemented by Istio
- Behavior Detection - Twistlock Policies for applications
Core💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| Istio Operator | No | No | No | Yes | Yes | No | |
| Istio Controlplane | No | No | No | Yes | Yes | No | |
| Jaeger | No | Yes | Yes | Yes | Yes (STRICT) | No | |
| Kiali | No | Yes | Yes | Yes | Yes (STRICT) | No | |
| Monitoring | No | No | No | Yes | Yes (PERMISSIVE) | No | |
| Twistlock | No | No | No | Yes | Yes (STRICT) | No | |
| ECK Operator | No | No | No | Yes | Yes (STRICT) | No | |
| Elasticsearch Kibana | No | No | No | Yes | Yes (STRICT) | No | |
| Fluentbit | No | No | No | Yes | Yes (STRICT) | No | |
| OPA Gatekeeper | No | No | No | Yes | No | No | |
| Cluster Auditor | No | No | No | Yes | Yes (STRICT) | No | |
| Kyverno | No | No | No | Yes | No | No | |
| Kyverno Policies |
No | No | No | Yes | No | No | |
| Promtail |
No | No | No | Yes | Yes (STRICT) | No | |
| Loki |
No | No | No | Yes | Yes (STRICT) | No | |
| Tempo |
No | Yes | Yes | Yes | Yes (STRICT) | No |
Supported Add-Ons💣
Security💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| Keycloak | No | No | No | Yes | Yes (STRICT) | No | |
| Anchore Enterprise | No | No | No | Yes | Yes (STRICT) | No | |
| Authservice | No | Yes | Yes | Yes | Yes (STRICT) | No | |
| Vault |
No | No | No | Yes | Yes (STRICT) | No |
Development Tools💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| Gitlab | No | No | No | Yes | Yes (STRICT) | No | |
| Gitlab Runner | No | No | No | Yes | Yes (STRICT)* | No | |
| Nexus | No | No | No | Yes | Yes (STRICT) | No | |
| Sonarqube | No | No | No | Yes | Yes (STRICT) | No |
*Gitlab Runner inherits mTLS STRICT from Gitlab when installed in the same namespace.
Collaboration Tools💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| Mattermost | No | No | No | Yes | No | No | |
| Mattermost Operator | No | No | No | Yes | Yes (STRICT) | No |
Application Utilities💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| MinIO | No | No | No | Yes | Yes (STRICT) | No | |
| MinIO Operator | No | No | No | Yes | Yes (STRICT) | No |
Cluster Utilities💣
| Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection |
|---|---|---|---|---|---|---|---|
| Argocd | No | No | No | Yes | Yes (STRICT) | No | |
| Velero | No | No | No | Yes | Yes (STRICT) | No | |
| Metrics Server | No | No | No | Yes | Yes (PERMISSIVE) | No |