Create a Kubernetes Configuration Rule

You can create a Kubernetes configuration rule in the App Infrastructure Protection (AIP) Cloud Security PlatformⓇ (CSP).

  1. Navigate to the Rules tab and select a ruleset from the list.
  2. Click the + New Rule button.


    Add_new_rule.png

    Note

    You can create a rule in any ruleset to suit your organization's needs. In this example, the new rule is added to the Base Rule Set.

  3. The Add Host Rule dialog displays.


    Add_host_rule_dialog.png

  4. Select Kubernetes Config Rule from the list and click Next: Details to proceed.


    Kubs_config_rule_selected.png

  5. The Add Kubernetes Configuration Rule dialog displays. You will be able to specify the rule details.
    1. Severity of alerts: There are three levels of behaviors to indicate the severity of an alert.
      • Severity 1 alerts are the highest elevation of behaviors.
      • Severity 2 alerts are the second highest elevation of behaviors.
      • Severity 3 alerts are the third highest elevation of behaviors.
    2. Rule Name (Required): Indicates the name of the ruleset.
    3. Alert Title (Required): Indicates the name and substitutions (dynamic content) which add context to the alert.
    4. Alert Description: Indicates a brief summary of the alert.
    5. Aggregate Fields: Helps define the uniqueness of an alert. See Rule Aggregation for additional information about aggregate options.
    6. Trigger an alert if an event matching this rule occurs at least: Indicates the frequency for generating an alert. You can specify how often to display an alert within a certain time frame.For additional information, see Life Cycle of an Alert.


    Add_kubs_config_rule_dialog.png

  6. After making your selection, click Next: Filter.


    Kubs_config_rule_details.png

  7. The Kubernetes Configuration Rule Filter pane displays.


    Kubs_config_rule_filter.png

  8. After specifying a rule filter, click Create Rule.


    Kubs_config_rule_filter_added.png

  9. The rule is created and is displayed on the Rules page.


    Test_kubs_config_rule_created.png

Was this article helpful?
0 out of 0 found this helpful