Monitoring

The primary way to access/view data collected by Cluster Auditor is through its metrics.

Prometheus

Cluster Auditor is automatically shipped with a ServiceMonitor with allows Prometheus to scrape its metrics port. These metrics can be viewed in Prometheus if desired via the following metrics names: - opa_scorecard_up: Basic metrics that validate the monitor is functioning - opa_scorecard_constraint_information: Provides details of all Constraints currently deployed in the cluster (name, kind, violations, and enforcement type) - opa_scorecard_constraint_violations: Provides granular detail on all violations (the offending pod/ns, the constraint, enforcement type, and message)

Grafana

The easiest way to view Cluster Auditor data is through the pre-configured Grafana Dashboard OPA Violations.

This dashboard displays (per namespace) all violations, with filtered graphs and charts based on violation type, time, and enforcement action. The image below provides a preview of what this dashboard looks like in an example cluster.