Expose Prometheus Metrics

[daemon1024]

• Number of Policies Applied
• Number of Alerts
• List of Policies
• Policy active or not

[Ayush9026]

/assign i will solve this issue.

[navaneeth-dev]

@daemon1024 I would like to work on this.

This should be added in the KubeArmorController pkg. But when running make deploy in k3s or vagrant dev setup I get the same error but KubeArmor built successfully:

vagrant@kubearmor-dev:~/KubeArmor/pkg/KubeArmorController$ make deploy                                                                                                                             
go mod tidy; /home/vagrant/go/bin/controller-gen "crd:trivialVersions=true,preserveUnknownFields=false" rbac:roleName=manager-role webhook paths="./..." output:crd:artifacts:config=config/crd/bas
es                                                                                                                                                                                                 
Error: unable to parse option "crd:trivialVersions=true,preserveUnknownFields=false": [unknown argument "trivialVersions" (at <input>:1:16) extra arguments provided: "true,preserveUnknownFields=f
alse" (at <input>:1:17)]
run `controller-gen crd:trivialVersions=true,preserveUnknownFields=false rbac:roleName=manager-role webhook paths=./... output:crd:artifacts:config=config/crd/bases -w` to see all available markers, or `controller-gen crd:trivialVersions=true,preserveUnknownFields=false rbac:roleName=manager-role webhook paths=./... output:crd:artifacts:config=config/crd/bases -h` for usage
make: *** [Makefile:52: manifests] Error 1

Any idea what to do?
Thanks in advance.

[akshat-crypto]

Hey @daemon1024

I’m interested in contributing to the KubeArmor issue related to tracking applied policies, their active status, and alerts. I have hands-on experience with Kubernetes security, policy enforcement, and observability tools like Falco and Prometheus.

Relevant Experience:

• Worked on Kubernetes security policies, runtime enforcement, and monitoring.
• Implemented policy-based alerting and tracking mechanisms in past projects.
• Familiar with logging, metrics, and CNCF security tools.

Contribution Proposal:

• Implement tracking for the number of applied policies.
• Add an indicator for active/inactive policies.
• Enhance alert visibility for policy violations.

[yp969803]

@daemon1024 interested in working in this project. I was busy with my universites chores hence not able to contribute regularly since 4 months, but I'm excited to start up again. I will soon draft a proposal, with required implementations and requirements.

[WoodHolz]

Hi, I'm new here, willing to help and contribute! lol

[siddiksawani]

Hi @daemon1024 and @Prateeknandle,

I'm interested in contributing to the Prometheus metrics feature for KubeArmor.

I see some work has already been discussed regarding tracking the number of applied policies, active/inactive status, and alerts.

• Is this issue still open for contribution?
• Are there any specific design decisions or approaches recommended before implementing this?
• Should I start by breaking it down into smaller tasks?

Looking forward to your guidance! Thanks.