Add `Cluster` filter to the group/security center `Operational vulnerabilities` vulnerability report
Why are we doing this work
- users want to see operational vulnerabilities and filter by the cluster they come from at the group/security center level
Relevant links
Non-functional requirements
-
Documentation -
Testing:
Implementation plan
-
frontend extend the cluster_filter-
group-level -
update the Group.clusterAgents(hasVulnerabilities: Boolean)vulnerability request to filter byclusterAgentId: [ClustersAgentID!] -
modify Group.vulnerabilitySeveritiesCountto be used withclusterAgentId
-
-
security center -
update the InstanceSecurityDashboard.clusterAgents(hasVulnerabilities: Boolean)vulnerability request to filter byclusterAgentId: [ClustersAgentID!] -
modify InstanceSecurityDashboard.vulnerabilitySeveritiesCountto be used withclusterAgentId
-
-
-
-
group -
modify Group.vulnerabilitySeveritiesCountto be used withclusterAgentId
-
-
security center -
modify InstanceSecurityDashboard.vulnerabilitySeveritiesCountto be used withclusterAgentId
-
-
Verification steps
- Ensure your GDK has a GitLab Ultimate license
- Ensure your GDK is connected to the GitLab Runner
- Follow these docs to set up the kubernetes agent
- Clone test-cis-with-agentid and run the pipeline
- Link the agent to a project
- Run the pipeline to generate vulnerabilities
- Navigate to the agent/group/security center vulnerability report
- View the vulnerabilities
Edited by Alexander Turinske
