Kubernetes Benchmarks

Sysdig follows the Prometheus-compatible naming convention for both metrics and labels as opposed to the previous statsd-compatible, legacy Sysdig naming convention. This page shows metrics in the legacy Sysdig naming convention. See Metrics and Label Mapping for the mapping between Sysdig legacy and Prometheus naming conventions.

Compliance metrics are generated from scheduled CIS Benchmark scans that occur in Sysdig Secure. These metrics cover aggregate results of the various CIS Benchmark sections, as well as granular details about how many running containers are failing specific run-time compliance checks.

compliance.k8s-bench.api-server.pass_pct

The percentage of Kubernetes benchmark tests run on the API server that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.api-server.tests_fail

The number of Kubernetes benchmark tests run on the API server that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.api-server.tests_pass

The number of Kubernetes benchmark tests run on the API server that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.api-server.tests_total

The total number of Kubernetes benchmark tests run on the API server.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.api-server.tests_warn

The number of Kubernetes benchmark tests run on the API server that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configuration-files.pass_pct

The percentage of Kubernetes benchmark tests run on the configuration files of non-master nodes that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configuration-files.tests_fail

The number of Kubernetes benchmark tests run on the configuration files of non-master nodes that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configuration-files.tests_pass

The number of Kubernetes benchmark tests run on the configuration files that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configuration-files.tests_total

The total number of Kubernetes benchmark tests run on the configuration files of non-master nodes.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configuration-files.tests_warn

The number of Kubernetes benchmark tests run on the configuration files of non-master nodes that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configure-files.pass_pct

The percentage of Kubernetes benchmark tests run on the master node configuration files that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configure-files.tests_fail

The number of Kubernetes benchmark tests run on the master node configuration files that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configure-files.tests_pass

The number of Kubernetes benchmark tests run on the master node configuration files that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configure-files.tests_total

The total number of Kubernetes benchmark tests run on the master node configuration files.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.configure-files.tests_warn

The number of Kubernetes benchmark tests run on the master node configuration files that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.controller-manager.pass_pct

The percentage of Kubernetes benchmark tests run on the controller manager that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.controller-manager.tests_fail

The number of Kubernetes benchmark tests run on the controller manager that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.controller-manager.tests_pass

The number of Kubernetes benchmark tests run on the controller manager that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.controller-manager.tests_total

The total number of Kubernetes benchmark tests run on the controller manager.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.controller-manager.tests_warn

The number of Kubernetes benchmark tests run on the controller manager that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.etcd.pass_pct

The percentage of Kubernetes benchmark tests run on the etcd key value store that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.etcd.tests_fail

The number of Kubernetes benchmark tests run on the etcd key value store that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.etcd.tests_pass

The number of Kubernetes benchmark tests run on the etcd key value store that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.etcd.tests_total

The total number of Kubernetes benchmark tests run on the etcd key value store.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.etcd.tests_warn

The number of Kubernetes benchmark tests run on the etcd key value store that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.general-security-primitives.pass_pct

The percentage of Kubernetes benchmark tests run on the security primitives that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.general-security-primitives.tests_fail

The number of Kubernetes benchmark tests run on the security primitives that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.general-security-primitives.tests_pass

The number of Kubernetes benchmark tests run on the security primitives that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.general-security-primitives.tests_total

The total number of Kubernetes benchmark tests run on the security primitives.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.general-security-primitives.tests_warn

The number of Kubernetes benchmark tests run on the security primitives that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.kubelet.pass_pct

The percentage of Kubernetes benchmark tests run on the non-master node Kubernetes agent that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.kubelet.tests_fail

The number of Kubernetes benchmark tests run on the non-master node Kubernetes agent that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.kubelet.tests_pass

The number of Kubernetes benchmark tests run on the non-master node Kubernetes agent that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.kubelet.tests_total

The total number of Kubernetes benchmark tests run on the non-master node Kubernetes agent.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.kubelet.tests_warn

The number of Kubernetes benchmark tests run on the non-master node Kubernetes agent that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.pass_pct

The percentage of Kubernetes benchmark tests that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.scheduler.pass_pct

The percentage of Kubernetes benchmark tests run on the scheduler that passed.

MetadataDescription
Metric TypeGauge
Value Type%
Segment ByContainer
Default Time AggregationAverage
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationAverage
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.scheduler.tests_fail

The number of Kubernetes benchmark tests run on the scheduler that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.scheduler.tests_pass

The number of Kubernetes benchmark tests run on the scheduler that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.scheduler.tests_total

The total number of Kubernetes benchmark tests run on the scheduler.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.scheduler.tests_warn

The number of Kubernetes benchmark tests run on the scheduler that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.tests_fail

The number of Kubernetes benchmark tests that failed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.tests_pass

The number of Kubernetes benchmark tests that passed.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.tests_total

The total number of Kubernetes benchmark tests run.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max

compliance.k8s-bench.tests_warn

The number of Kubernetes benchmark tests that returned a result of WARN.

MetadataDescription
Metric TypeGauge
Value TypeInteger
Segment ByContainer
Default Time AggregationRate
Available Time Aggregation FormatsAvg, Rate, Sum, Min, Max
Default Group AggregationSum
Available Group Aggregation FormatsAvg, Sum, Min, Max