Rules
kubescape.io / v1
apiVersion: kubescape.io/v1
kind: Rules
metadata:
name: example
apiVersion
string
kind
string
metadata
object
spec object
rules []object required
agentVersionRequirement
string
Agent version requirement to evaluate this rule (supports semver ranges like ~1.0, >=1.2.0, etc.)
description
string required
Description of the rule
enabled
boolean required
Whether the rule is enabled
expressions object required
message
string required
Message expression
ruleExpression []object required
eventType
string required
Type of event this expression handles
expression
string required
The rule expression string
uniqueId
string required
Unique identifier expression
id
string required
Unique identifier for the rule
isTriggerAlert
boolean required
Whether the rule is a trigger alert
mitreTactic
string required
MITRE tactic associated with the rule
mitreTechnique
string required
MITRE technique associated with the rule
name
string required
Name of the rule
profileDataRequired
object
Per-rule profile fields required for rule-aware projection.
profileDependency
integer required
Profile dependency level (0=Required, 1=Optional, 2=NotRequired)
enum:
0, 1, 2
severity
integer required
Severity level of the rule
state
object
State information for the rule
supportPolicy
boolean required
Whether the rule supports rule policy enforcement
tags
[]string
Tags associated with the rule
No matches. Try .spec.rules for an exact path