Kubernetes Benchmarks
Sysdig follows the Prometheus-compatible naming convention for both metrics and labels as opposed to the previous statsd-compatible, legacy Sysdig naming convention. This page shows metrics in the legacy Sysdig naming convention. See Metrics and Label Mapping for the mapping between Sysdig legacy and Prometheus naming conventions.
Compliance metrics are generated from scheduled CIS Benchmark scans that occur in Sysdig Secure. These metrics cover aggregate results of the various CIS Benchmark sections, as well as granular details about how many running containers are failing specific run-time compliance checks.
compliance.k8s-bench.api-server.pass_pct
The percentage of Kubernetes benchmark tests run on the API server that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.api-server.tests_fail
The number of Kubernetes benchmark tests run on the API server that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.api-server.tests_pass
The number of Kubernetes benchmark tests run on the API server that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.api-server.tests_total
The total number of Kubernetes benchmark tests run on the API server.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.api-server.tests_warn
The number of Kubernetes benchmark tests run on the API server that
returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configuration-files.pass_pct
The percentage of Kubernetes benchmark tests run on the configuration files of non-master nodes that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configuration-files.tests_fail
The number of Kubernetes benchmark tests run on the configuration files of non-master nodes that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configuration-files.tests_pass
The number of Kubernetes benchmark tests run on the configuration files that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configuration-files.tests_total
The total number of Kubernetes benchmark tests run on the configuration files of non-master nodes.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configuration-files.tests_warn
The number of Kubernetes benchmark tests run on the configuration files
of non-master nodes that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configure-files.pass_pct
The percentage of Kubernetes benchmark tests run on the master node configuration files that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configure-files.tests_fail
The number of Kubernetes benchmark tests run on the master node configuration files that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configure-files.tests_pass
The number of Kubernetes benchmark tests run on the master node configuration files that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configure-files.tests_total
The total number of Kubernetes benchmark tests run on the master node configuration files.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.configure-files.tests_warn
The number of Kubernetes benchmark tests run on the master node
configuration files that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.controller-manager.pass_pct
The percentage of Kubernetes benchmark tests run on the controller manager that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.controller-manager.tests_fail
The number of Kubernetes benchmark tests run on the controller manager that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.controller-manager.tests_pass
The number of Kubernetes benchmark tests run on the controller manager that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.controller-manager.tests_total
The total number of Kubernetes benchmark tests run on the controller manager.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.controller-manager.tests_warn
The number of Kubernetes benchmark tests run on the controller manager
that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.etcd.pass_pct
The percentage of Kubernetes benchmark tests run on the etcd key value store that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.etcd.tests_fail
The number of Kubernetes benchmark tests run on the etcd key value store that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.etcd.tests_pass
The number of Kubernetes benchmark tests run on the etcd key value store that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.etcd.tests_total
The total number of Kubernetes benchmark tests run on the etcd key value store.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.etcd.tests_warn
The number of Kubernetes benchmark tests run on the etcd key value store
that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.general-security-primitives.pass_pct
The percentage of Kubernetes benchmark tests run on the security primitives that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.general-security-primitives.tests_fail
The number of Kubernetes benchmark tests run on the security primitives that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.general-security-primitives.tests_pass
The number of Kubernetes benchmark tests run on the security primitives that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.general-security-primitives.tests_total
The total number of Kubernetes benchmark tests run on the security primitives.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.general-security-primitives.tests_warn
The number of Kubernetes benchmark tests run on the security primitives
that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.kubelet.pass_pct
The percentage of Kubernetes benchmark tests run on the non-master node Kubernetes agent that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.kubelet.tests_fail
The number of Kubernetes benchmark tests run on the non-master node Kubernetes agent that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.kubelet.tests_pass
The number of Kubernetes benchmark tests run on the non-master node Kubernetes agent that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.kubelet.tests_total
The total number of Kubernetes benchmark tests run on the non-master node Kubernetes agent.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.kubelet.tests_warn
The number of Kubernetes benchmark tests run on the non-master node
Kubernetes agent that returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.pass_pct
The percentage of Kubernetes benchmark tests that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.scheduler.pass_pct
The percentage of Kubernetes benchmark tests run on the scheduler that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | % |
Segment By | Container |
Default Time Aggregation | Average |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Average |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.scheduler.tests_fail
The number of Kubernetes benchmark tests run on the scheduler that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.scheduler.tests_pass
The number of Kubernetes benchmark tests run on the scheduler that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.scheduler.tests_total
The total number of Kubernetes benchmark tests run on the scheduler.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.scheduler.tests_warn
The number of Kubernetes benchmark tests run on the scheduler that
returned a result of WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.tests_fail
The number of Kubernetes benchmark tests that failed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.tests_pass
The number of Kubernetes benchmark tests that passed.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.tests_total
The total number of Kubernetes benchmark tests run.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
compliance.k8s-bench.tests_warn
The number of Kubernetes benchmark tests that returned a result of
WARN
.
Metadata | Description |
---|---|
Metric Type | Gauge |
Value Type | Integer |
Segment By | Container |
Default Time Aggregation | Rate |
Available Time Aggregation Formats | Avg, Rate, Sum, Min, Max |
Default Group Aggregation | Sum |
Available Group Aggregation Formats | Avg, Sum, Min, Max |
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.