Viewing Kubernetes control rules
Note
This feature is at the Preview stage.
To view Kubernetes control rules, you need the security-deck.viewer role or higher for the folder containing the KSPM module resources.
To view active Kubernetes control rules:
-
Go to Yandex Security Deck.
-
In the left-hand panel, select Control rules.
-
At the top of the window, click More and select the workspace for which you want to view the rule info. Use search, if required.
-
On the Security control rules page that opens, go to the Kubernetes{trademark} tab. The section that opens lists the control rules that form a part of the security standards specified for the current workspace.
For each rule, the table displays the following information:
Tip
If you need to, you can change the info columns displayed in the table. Do it by clicking in the row with the table column headers, selecting the info columns you need, and clicking Apply.
-
: Rule criticality level; this icon indicates how security-critical the rule is:
- : Remark
- : Low severity
- : Medium severity
- : High severity
-
Control rule: Rule name and brief summary.
-
Rule sets: Icon(s) for the security standards that are using this rule. If the icon is colored, it means the rule is checked for the corresponding standard. If the icon is gray, it means it is not.
-
Verification method: How the infrastructure controlled in the workspace is checked for compliance with this rule:
automaticmanual
-
ID: Rule ID in Yandex Cloud.
-
Violations: Number of rule violations detected.
-
-
To view detailed information about a specific rule, click the table row with its name. The detailed info window that opens includes the following tabs:
OverviewViolationsRecommendationsIn addition to the data shown in the general rule info table, the Overview tab contains:
- Date and time of the most recent security check.
- Details on the monitored features, their configurations, or actions performed with them.
The Violations tab lists security violations detected during checks. Detected violations will not appear in this list if they satisfy the exception criteria specified for the rule.
The Recommendations tab provides guides and solutions to assist you with rule compliance.