Uploaded image for project: 'Cloud Infrastructure Security & Compliance'
  1. Cloud Infrastructure Security & Compliance
  2. CMP-2615

Add a check aggregate to the compliance scan metadata

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Critical Critical
    • compliance-operator-1.6.0
    • None
    • None
    • None
    • 1
    • False
    • None
    • False
    • CMP Sprint 86

      When integrating the Compliance Operator with ACS, it's impossible for the ACS central component to guarantee it received all the ComplianceCheckResults for a DONE scan.

      The problem is that each update to the ComplianceCheckResult and ComplianceScan objects are sent to the central cluster by sensor. ACS doesn't know how long it should continue waiting for ComplianceCheckResults after it receives an update that the ComplianceScan is complete.

      One way to fix this would be to implement a total check count as an attribute of the ComplianceScan. When ACS receives the update that a scan is done, it also receives the number of expected ComplianceCheckResults that should be coming in as part of that update.

      This makes it so that ACS can definitively say a scan is complete.

            wenshen@redhat.com Vincent Shen
            lbragsta@redhat.com Lance Bragstad
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: