Back to Kubescape

Prometheus Integration

httphandler/examples/prometheus/README.md

4.0.62.1 KB
Original Source

Prometheus Integration

Note: The Prometheus integration documentation has moved to the Kubescape Helm Charts repository.

Current Documentation

For the latest Prometheus integration guide, please visit:

Kubescape Prometheus Integration →

Quick Overview

The Kubescape Operator exposes Prometheus metrics for monitoring your cluster's security posture.

Features

  • Compliance score metrics per framework
  • Control pass/fail counts
  • Vulnerability counts by severity
  • Resource scan statistics

Installation with Prometheus Support

bash
helm repo add kubescape https://kubescape.github.io/helm-charts/
helm repo update

helm upgrade --install kubescape kubescape/kubescape-operator \
  --namespace kubescape \
  --create-namespace \
  --set capabilities.prometheusExporter=enable

Available Metrics

MetricDescription
kubescape_compliance_scoreCompliance score per framework (0-100)
kubescape_controls_passedNumber of passed controls
kubescape_controls_failedNumber of failed controls
kubescape_resources_scannedTotal resources scanned
kubescape_vulnerabilities_totalVulnerabilities by severity

ServiceMonitor (for Prometheus Operator)

If you're using the Prometheus Operator, the Helm chart can create a ServiceMonitor:

bash
helm upgrade --install kubescape kubescape/kubescape-operator \
  --namespace kubescape \
  --create-namespace \
  --set capabilities.prometheusExporter=enable \
  --set serviceMonitor.enabled=true

Grafana Dashboard

A pre-built Grafana dashboard is available for visualizing Kubescape metrics: