robusta-cli 0.10.26a1__tar.gz → 0.10.27__tar.gz

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: robusta-cli
-Version: 0.10.26a1
+Version: 0.10.27
 Summary: 
 Author: Natan Yellin
 Author-email: aantn@users.noreply.github.com
@@ -34,7 +34,7 @@ Requires-Dist: markdown2 (>=2.4.2,<3.0.0)
 Requires-Dist: opsgenie-sdk (>=2.1.5,<3.0.0)
 Requires-Dist: poetry-core (==1.1.0a7) ; extra == "all"
 Requires-Dist: prometheus-client (>=0.12.0,<0.13.0)
-Requires-Dist: prometrix (==0.1.10)
+Requires-Dist: prometrix (==0.1.15)
 Requires-Dist: pydantic (>=1.8.1,<2.0.0)
 Requires-Dist: pymsteams (>=0.1.16,<0.2.0)
 Requires-Dist: pytz (>=2021.3,<2022.0)

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "robusta-cli"
-version = "0.10.26-alpha1"
+version = "0.10.27"
 description = ""
 authors = ["Natan Yellin <aantn@users.noreply.github.com>"]
 packages = [
@@ -65,7 +65,7 @@ cryptography = "^36.0.0"
 PyJWT = "2.4.0"
 fpdf2 = "^2.7.1"
 attrs = "^23.1.0"
-prometrix = "0.1.10"
+prometrix = "0.1.15"
 hikaru-model-26 = "^1.1.1"
 apprise = "^1.5.0"
 rocketchat-api = "^1.30.0"
@@ -115,6 +115,7 @@ all = ["Flask", "grafana-api", "watchdog", "dulwich", "better-exceptions", "Cair
 [tool.poetry.group.dev.dependencies]
 sphinx-jinja = { git = "https://github.com/robusta-dev/sphinx-jinja.git" }
 sphinx-reredirects = "^0.1.1"
+freezegun = "^1.4.0"
 
 [build-system]
 requires = ["poetry-core>=1.0.0"]

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/_version.py

@@ -1,2 +1,2 @@
 # this is updated by .github/workflows/release.yaml
-__version__ = "0.10.26-alpha1"
+__version__ = "0.10.27"

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/api/__init__.py

@@ -37,7 +37,7 @@ from robusta.core.model.base_params import (
     VideoEnricherParams,
 )
 from robusta.core.model.env_vars import (
-    ALERT_BUILDER_WORKERS,
+    CLUSTER_DOMAIN,
     CLUSTER_STATUS_PERIOD_SEC,
     CUSTOM_PLAYBOOKS_ROOT,
     DEFAULT_PLAYBOOKS_PIP_INSTALL,

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/cli/main.py

@@ -11,7 +11,7 @@ from typing import Dict, List, Optional, Union
 import certifi
 import typer
 import yaml
-from hikaru.model.rel_1_26 import Container, Job, JobSpec, ObjectMeta, PodSpec, PodTemplateSpec
+from hikaru.model.rel_1_26 import Container, Job, JobSpec, ObjectMeta, PodSpec, PodTemplateSpec, SecurityContext
 from kubernetes import client, config
 from pydantic import BaseModel, Extra
 
@@ -217,9 +217,10 @@ def gen_config(
         token = json.loads(base64.b64decode(robusta_api_key))
         account_id = token.get("account_id", account_id)
 
-        sinks_config.append(
+        # Make sure the UI sink (if enabled) is the first one. See MAIN-1088.
+        sinks_config = [
             RobustaSinkConfigWrapper(robusta_sink=RobustaSinkParams(name="robusta_ui_sink", token=robusta_api_key))
-        )
+        ] + sinks_config
         enable_platform_playbooks = True
         disable_cloud_routing = False
 
@@ -288,6 +289,13 @@ def gen_config(
             },
         ]
 
+    if is_small_cluster:
+        setattr(values, "kube-prometheus-stack", {})
+        kube_stack = getattr(values, "kube-prometheus-stack")
+        kube_stack["prometheus"] = {
+            "prometheusSpec": {"resources": {"requests": {"memory": "300Mi"}, "limits": {"memory": "300Mi"}}},
+        }
+
     write_values_file(output_path, values)
 
     if robusta_api_key:
@@ -426,7 +434,7 @@ def demo_alert(
         alertmanager_url = AlertManagerDiscovery.find_alert_manager_url()
         if not alertmanager_url:
             typer.secho(
-                "Alertmanager service could not be auto-discovered. " "Please use the --alertmanager_url parameter",
+                "Alertmanager service could not be auto-discovered. " "Please use the --alertmanager-url parameter",
                 fg="red",
             )
             return
@@ -493,6 +501,7 @@ def demo_alert(
                             name="alert-curl",
                             image=image,
                             command=command,
+                            securityContext=SecurityContext(runAsUser=2000),
                         )
                     ],
                     restartPolicy="Never",

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/discovery/discovery.py

@@ -41,6 +41,7 @@ from robusta.core.model.helm_release import HelmRelease
 from robusta.core.model.jobs import JobInfo
 from robusta.core.model.namespaces import NamespaceInfo
 from robusta.core.model.services import ContainerInfo, ServiceConfig, ServiceInfo, VolumeInfo
+from robusta.patch.patch import create_monkey_patches
 from robusta.utils.cluster_provider_discovery import cluster_provider
 from robusta.utils.stack_tracer import StackTracer
 
@@ -135,6 +136,7 @@ class Discovery:
 
     @staticmethod
     def discovery_process() -> DiscoveryResults:
+        create_monkey_patches()
         Discovery.stacktrace_thread_active = True
         threading.Thread(target=Discovery.stack_dump_on_signal).start()
         pods_metadata: List[V1ObjectMeta] = []
@@ -347,7 +349,7 @@ class Discovery:
                 continue_ref: Optional[str] = None
                 for _ in range(DISCOVERY_MAX_BATCHES):
                     secrets = client.CoreV1Api().list_secret_for_all_namespaces(
-                        label_selector=f"owner=helm", _continue=continue_ref
+                        label_selector="owner=helm", _continue=continue_ref
                     )
                     if not secrets.items:
                         break

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/exceptions.py

@@ -14,7 +14,3 @@ class NoAlertManagerUrlFound(Exception):
     """Exception, when AlertManager url is incorrect"""
 
     pass
-
-
-class PrometheusFlagsConnectionError(Exception):
-    """Exception, when Prometheus flag or AlertManager flag api cannot be reached"""

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/model/base_params.py

@@ -194,7 +194,9 @@ class TimedPrometheusParams(PrometheusParams):
 class CustomGraphEnricherParams(PrometheusParams):
     """
     :var promql_query: Promql query. You can use $pod, $node and $node_internal_ip to template (see example). For more information, see https://prometheus.io/docs/prometheus/latest/querying/basics/
-    :var graph_title: A nicer name for the Prometheus query.
+    :var graph_title: A nicer name for the Prometheus query. The graph_title may include template variables like $name, $namespace, $node, $container etc...
+
+
     :var graph_duration_minutes: Graph duration is minutes.
     :var chart_values_format: Customize the y-axis labels with one of: Plain, Bytes, Percentage (see ChartValuesFormat)
 
@@ -306,3 +308,7 @@ class LogEnricherParams(ActionParams):
     regex_replacement_style: Optional[str] = None
     previous: bool = False
     filter_regex: Optional[str] = None
+
+
+class OomKillParams(ActionParams):
+    attach_logs: Optional[bool] = False

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/model/cluster_status.py

@@ -32,11 +32,3 @@ class ClusterStatus(BaseModel):
     ttl_hours: int
     stats: ClusterStats
     activity_stats: ActivityStats
-
-
-class Account(BaseModel):
-    id: str
-    account_type: int
-    is_test_account: bool
-    name: Optional[str]
-    creation_date: datetime

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/model/env_vars.py

@@ -34,14 +34,12 @@ INTERNAL_PLAYBOOKS_ROOT = os.environ.get("INTERNAL_PLAYBOOKS_ROOT", "/app/src/ro
 DEFAULT_TIMEZONE = pytz.timezone(os.environ.get("DEFAULT_TIMEZONE", "UTC"))
 NUM_EVENT_THREADS = int(os.environ.get("NUM_EVENT_THREADS", 20))
 INCOMING_EVENTS_QUEUE_MAX_SIZE = int(os.environ.get("INCOMING_EVENTS_QUEUE_MAX_SIZE", 500))
-ALERT_BUILDER_WORKERS = int(os.environ.get("ALERT_BUILDER_WORKERS", 5))
-ALERTS_WORKERS_POOL = load_bool("ALERTS_WORKERS_POOL", False)
 
 FLOAT_PRECISION_LIMIT = int(os.environ.get("FLOAT_PRECISION_LIMIT", 11))
 
 PROMETHEUS_REQUEST_TIMEOUT_SECONDS = float(os.environ.get("PROMETHEUS_REQUEST_TIMEOUT_SECONDS", 90.0))
 PROMETHEUS_ENABLED = os.environ.get("PROMETHEUS_ENABLED", "false").lower() == "true"
-MANAGED_PROMETHEUS_ALERTS_ENABLED = os.environ.get("MANAGED_PROMETHEUS_ALERTS_ENABLED", "false").lower() == "true"
+MANAGED_CONFIGURATION_ENABLED = os.environ.get("MANAGED_CONFIGURATION_ENABLED", "false").lower() == "true"
 PROMETHEUS_SSL_ENABLED = os.environ.get("PROMETHEUS_SSL_ENABLED", "false").lower() == "true"
 
 INCOMING_REQUEST_TIME_WINDOW_SECONDS = int(os.environ.get("INCOMING_REQUEST_TIME_WINDOW_SECONDS", 3600))
@@ -101,3 +99,5 @@ RRM_PERIOD_SEC = int(os.environ.get("RRM_PERIOD_SEC", 90))
 MAX_ALLOWED_RULES_PER_CRD_ALERT = int(os.environ.get("MAX_ALLOWED_RULES_PER_CRD_ALERT", 600))
 
 IMAGE_REGISTRY = os.environ.get("IMAGE_REGISTRY", "us-central1-docker.pkg.dev/genuine-flight-317411/devel")
+
+CLUSTER_DOMAIN = os.environ.get("CLUSTER_DOMAIN", "cluster.local")

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/model/events.py

@@ -129,6 +129,14 @@ class ExecutionBaseEvent:
                 if aggregation_key:
                     finding.aggregation_key = aggregation_key
 
+    def extend_description(self, text: str):
+        for sink in self.named_sinks:
+            for finding in self.sink_findings[sink]:
+                if not finding.description:
+                    finding.description = text
+                else:
+                    finding.description += f"\n\n{text}"
+
     @staticmethod
     def from_params(params: ExecutionEventBaseParams) -> Optional["ExecutionBaseEvent"]:
         return ExecutionBaseEvent(named_sinks=params.named_sinks)

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/playbooks/base_trigger.py

@@ -1,5 +1,5 @@
 import abc
-from typing import Dict, List, Optional, Type
+from typing import Any, Dict, List, Optional, Type
 
 from pydantic import BaseModel
 
@@ -23,11 +23,11 @@ class BaseTrigger(DocumentedModel):
     def get_trigger_event(self) -> str:
         pass
 
-    def should_fire(self, event: TriggerEvent, playbook_id: str):
+    def should_fire(self, event: TriggerEvent, playbook_id: str, build_context: Dict[str, Any]):
         return True
 
     def build_execution_event(
-        self, event: TriggerEvent, sink_findings: Dict[str, List[Finding]]
+        self, event: TriggerEvent, sink_findings: Dict[str, List[Finding]], build_context: Dict[str, Any]
     ) -> Optional[ExecutionBaseEvent]:
         pass
 

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/playbooks/internal/discovery_events.py

@@ -63,7 +63,7 @@ def create_debug_event_finding(event: Event):
     Create finding based on the kubernetes event
     """
     k8s_obj = event.regarding
-
+    subject_type = FindingSubjectType.from_kind(k8s_obj.kind.lower()) if k8s_obj.kind else FindingSubjectType.TYPE_NONE
     finding = Finding(
         title=f"{event.reason} {event.type} for {k8s_obj.kind} {k8s_obj.namespace}/{k8s_obj.name}",
         description=event.note,
@@ -73,7 +73,7 @@ def create_debug_event_finding(event: Event):
         aggregation_key=f"Kubernetes {event.type} Event",
         subject=FindingSubject(
             k8s_obj.name,
-            FindingSubjectType.from_kind(k8s_obj.kind.lower()),
+            subject_type,
             k8s_obj.namespace,
         ),
         creation_date=get_event_timestamp(event),

robusta_cli-0.10.27/src/robusta/core/playbooks/oom_killer_utils.py

@@ -0,0 +1,78 @@
+import logging
+import time
+
+from robusta.api import (
+    ExecutionBaseEvent,
+    FileBlock,
+    LogEnricherParams,
+    MarkdownBlock,
+    PodEvent,
+    RegexReplacementStyle,
+    RobustaPod,
+)
+
+
+def start_log_enrichment(
+    event: ExecutionBaseEvent,
+    params: LogEnricherParams,
+    pod: RobustaPod,
+):
+    if pod is None:
+        if params.warn_on_missing_label:
+            event.add_enrichment(
+                [MarkdownBlock("Cannot fetch logs because the pod is unknown. The alert has no `pod` label")],
+            )
+        return
+
+    all_statuses = pod.status.containerStatuses + pod.status.initContainerStatuses
+    if params.container_name:
+        container = params.container_name
+    elif any(status.name == event.get_subject().container for status in all_statuses):
+        # support alerts with a container label, make sure it's related to this pod.
+        container = event.get_subject().container
+    else:
+        container = ""
+
+    tries: int = 2
+    backoff_seconds: int = 2
+    regex_replacement_style = (
+        RegexReplacementStyle[params.regex_replacement_style] if params.regex_replacement_style else None
+    )
+
+    if not container and pod.spec.containers:
+        # TODO do we want to keep this part of code? It used to sometimes report logs for a wrong
+        #  container when a container inside a pod was oomkilled. I can imagine it could cause
+        #  similar problems in other cases.
+        container = pod.spec.containers[0].name
+    for _ in range(tries - 1):
+        log_data = pod.get_logs(
+            container=container,
+            regex_replacer_patterns=params.regex_replacer_patterns,
+            regex_replacement_style=regex_replacement_style,
+            filter_regex=params.filter_regex,
+            previous=params.previous,
+        )
+        if not log_data:
+            logging.info("log data is empty, retrying...")
+            time.sleep(backoff_seconds)
+            continue
+
+        log_name = pod.metadata.name
+        log_name += f"/{container}"
+        event.add_enrichment(
+            [FileBlock(filename=f"{pod.metadata.name}.log", contents=log_data.encode())],
+        )
+        break
+
+
+def logs_enricher(event: PodEvent, params: LogEnricherParams):
+    """
+    Fetch and attach Pod logs.
+    The pod to fetch logs for is determined by the alert’s pod label from Prometheus.
+
+    By default, if the alert has no pod this enricher will silently do nothing.
+    """
+    pod = event.get_pod()
+
+    logging.debug(f"received a logs_enricher action: {params}")
+    start_log_enrichment(event=event, params=params, pod=pod)

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/playbooks/playbook_utils.py

@@ -29,6 +29,10 @@ def replace_env_vars_values(values: Dict) -> Dict:
             env_var_value = get_env_replacement(value.get_secret_value())
             if env_var_value:
                 values[key] = SecretStr(env_var_value)
+        elif isinstance(value, dict):
+            env_var_value = replace_env_vars_values(value)
+            if env_var_value:
+                values[key] = env_var_value
 
     return values
 

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/playbooks/playbooks_event_handler_impl.py

@@ -17,7 +17,6 @@ from robusta.core.playbooks.trigger import Trigger
 from robusta.core.reporting import MarkdownBlock
 from robusta.core.reporting.base import Finding
 from robusta.core.reporting.consts import SYNC_RESPONSE_SINK
-from robusta.core.sinks.robusta import RobustaSink
 from robusta.core.sinks.robusta.dal.model_conversion import ModelConversion
 from robusta.model.alert_relabel_config import AlertRelabel
 from robusta.model.config import Registry
@@ -46,12 +45,13 @@ class PlaybooksEventHandlerImpl(PlaybooksEventHandler):
         execution_response = None
         execution_event: Optional[ExecutionBaseEvent] = None
         sink_findings: Dict[str, List[Finding]] = defaultdict(list)
+        build_context: Dict[str, Any] = {}
         for playbook in playbooks:
-            fired_trigger = self.__get_fired_trigger(trigger_event, playbook.triggers, playbook.get_id())
+            fired_trigger = self.__get_fired_trigger(trigger_event, playbook.triggers, playbook.get_id(), build_context)
             if fired_trigger:
                 execution_event = None
                 try:
-                    execution_event = fired_trigger.build_execution_event(trigger_event, sink_findings)
+                    execution_event = fired_trigger.build_execution_event(trigger_event, sink_findings, build_context)
                     # sink_findings needs to be shared between playbooks.
                     # build_execution_event returns a different instance because it's running in a child process
                     execution_event.sink_findings = sink_findings
@@ -281,9 +281,10 @@ class PlaybooksEventHandlerImpl(PlaybooksEventHandler):
         trigger_event: TriggerEvent,
         playbook_triggers: List[Trigger],
         playbook_id: str,
+        build_context: Dict[str, Any],
     ) -> Optional[BaseTrigger]:
         for trigger in playbook_triggers:
-            if trigger.get().should_fire(trigger_event, playbook_id):
+            if trigger.get().should_fire(trigger_event, playbook_id, build_context):
                 return trigger.get()
         return None
 
@@ -312,6 +313,9 @@ class PlaybooksEventHandlerImpl(PlaybooksEventHandler):
                         sink_info.type = sink.__class__.__name__
                         sink_info.findings_count += 1
 
+                        if sink.params.stop:
+                            return
+
                 except Exception:  # Failure to send to one sink shouldn't fail all
                     logging.error(f"Failed to publish finding to sink {sink_name}", exc_info=True)
 

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/playbooks/pod_utils/imagepull_utils.py

@@ -3,7 +3,7 @@ import json
 import logging
 import re
 from enum import Flag
-from typing import List, Optional
+from typing import List, Optional, Tuple
 
 from hikaru.model.rel_1_26 import ContainerStatus, Event, EventList, Pod, PodStatus
 
@@ -27,6 +27,21 @@ def get_image_pull_backoff_container_statuses(status: PodStatus) -> List[Contain
     ]
 
 
+def get_pod_issue_message_and_reason(pod: Pod) -> Tuple[Optional[str], Optional[str]]:
+    # Works/should work only or KubeContainerWaiting and KubePodNotReady
+    # Note: in line with the old code in pod_issue_investigator, we only get the message for
+    # the first of possibly many misbehaving containers.
+    if pod.status.containerStatuses:
+        if pod.status.containerStatuses[0].state.waiting:
+            reason = pod.status.containerStatuses[0].state.waiting.reason
+            if reason is None:
+                reason = "unknown"
+            return (
+                pod.status.containerStatuses[0].state.waiting.message,
+                reason,
+            )
+
+
 def decompose_flag(flag: Flag) -> List[Flag]:
     members, _ = enum._decompose(flag.__class__, flag._value_)
     return members

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/reporting/base.py

@@ -24,6 +24,7 @@ class Emojis(Enum):
     Explain = "📘"
     Recommend = "🛠"
     Alert = "🚨"
+    K8Notification = "👀"
 
 
 class FindingSeverity(Enum):

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/reporting/blocks.py

@@ -165,7 +165,6 @@ class KubernetesDiffBlock(BaseBlock):
     """
     A diff between two versions of a Kubernetes object
     """
-
     diffs: List[DiffDetail]
     old: Optional[str]
     new: Optional[str]
@@ -175,6 +174,7 @@ class KubernetesDiffBlock(BaseBlock):
     num_additions: Optional[int]
     num_deletions: Optional[int]
     num_modifications: Optional[int]
+    kind: str
 
     # note that interesting_diffs might be a subset of the full diff between old and new
     def __init__(
@@ -183,6 +183,7 @@ class KubernetesDiffBlock(BaseBlock):
         old: Optional[HikaruDocumentBase],
         new: Optional[HikaruDocumentBase],
         name: str,
+        kind: str,
         namespace: str = None,
     ):
         """
@@ -206,18 +207,39 @@ class KubernetesDiffBlock(BaseBlock):
             num_additions=num_additions,
             num_deletions=num_deletions,
             num_modifications=num_modifications,
+            kind=kind,
         )
 
     def get_description(self):
-        if self.old is None:
-            return "Resource created"
-        elif self.new is None:
-            return "Resource deleted"
+        if not self.old:
+            return f"{self.kind} created"
+        elif not self.new:
+            return f"{self.kind} deleted"
         else:
-            return (
-                f"Updates to significant fields: {self.num_additions} additions, {self.num_deletions} deletions, "
-                f"{self.num_modifications} changes."
-            )
+            return self.__updated_description()
+
+    def __updated_description(self):
+        length = 5
+        updated_fields = []
+        for diff in self.diffs:
+            if diff.path:
+                # Stripping any integer values like '0', '1', '2', etc. from the path array which denotes array
+                # indices. eg: ['spec', 'template', 'spec', 'containers', '0', 'image']
+                stripped_path = [path for path in diff.path if not path.isdigit()]
+                if stripped_path:
+                    updated_fields.append(stripped_path[-1])
+
+        updated_fields_str = ""
+        if updated_fields:
+            updated_fields_str = f"\n ● Attributes: "
+
+            updated_fields_len = len(updated_fields)
+            if updated_fields_len < length:
+                updated_fields_str += f"{', '.join(updated_fields)}"
+            else:
+                updated_fields_str += f"{', '.join(updated_fields[:length])} ... (and {updated_fields_len - length} more)"
+
+        return f"{self.kind} updated{updated_fields_str}"
 
     @staticmethod
     def _obj_to_content(obj: Optional[HikaruDocumentBase]):

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/schedule/scheduler.py

@@ -14,7 +14,7 @@ from robusta.core.schedule.model import DynamicDelayRepeat, JobStatus, Scheduled
 # for a short time there are two runners running (old+new version) and they both
 # see the new scheduled playbook. we add a delay so that only the new runner ends up
 # running the scheduled playbook
-INITIAL_SCHEDULE_DELAY_SEC = os.environ.get("INITIAL_SCHEDULE_DELAY_SEC", 120)
+INITIAL_SCHEDULE_DELAY_SEC = int(os.environ.get("INITIAL_SCHEDULE_DELAY_SEC", 120))
 
 
 class Scheduler:

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/sinks/jira/jira_sink_params.py

@@ -13,6 +13,11 @@ class JiraSinkParams(SinkBaseParams):
     project_name: str
     project_type_id_override: Optional[int]
     issue_type_id_override: Optional[int]
+    sendResolved: Optional[bool]
+    reopenIssues: Optional[bool]
+    doneStatusName: Optional[str] = "Done"
+    reopenStatusName: Optional[str] = "To Do"
+    noReopenResolution: Optional[str] = ""
 
 
 class JiraSinkConfigWrapper(SinkConfigBase):

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/sinks/kafka/kafka_sink.py

@@ -18,7 +18,11 @@ from robusta.core.sinks.sink_base import SinkBase
 class KafkaSink(SinkBase):
     def __init__(self, sink_config: KafkaSinkConfigWrapper, registry):
         super().__init__(sink_config.kafka_sink, registry)
-        self.producer = KafkaProducer(bootstrap_servers=sink_config.kafka_sink.kafka_url)
+
+        self.producer = KafkaProducer(
+            bootstrap_servers=sink_config.kafka_sink.kafka_url,
+            **sink_config.kafka_sink.auth,
+        )
         self.topic = sink_config.kafka_sink.topic
 
     def write_finding(self, finding: Finding, platform_enabled: bool):

{robusta_cli-0.10.26a1 → robusta_cli-0.10.27}/src/robusta/core/sinks/kafka/kafka_sink_params.py

@@ -5,6 +5,7 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class KafkaSinkParams(SinkBaseParams):
     kafka_url: str
     topic: str
+    auth: dict = {}
 
 
 class KafkaSinkConfigWrapper(SinkConfigBase):