robusta-cli 0.12.1a0__tar.gz → 0.13.0__tar.gz

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: robusta-cli
-Version: 0.12.1a0
+Version: 0.13.0
 Summary: 
 Author: Natan Yellin
 Author-email: aantn@users.noreply.github.com
@@ -17,6 +17,8 @@ Requires-Dist: apprise (>=1.5.0,<2.0.0)
 Requires-Dist: attrs (>=23.1.0,<24.0.0)
 Requires-Dist: better-exceptions (>=0.3.3,<0.4.0) ; extra == "all"
 Requires-Dist: bitmath (>=1.3.3.1,<2.0.0.0)
+Requires-Dist: boto3 (==1.28.72)
+Requires-Dist: botocore (==1.31.72)
 Requires-Dist: click-spinner (>=0.1.10,<0.2.0)
 Requires-Dist: colorlog (>=5.0.1,<6.0.0)
 Requires-Dist: croniter (>=1.3.15,<2.0.0)
@@ -28,7 +30,9 @@ Requires-Dist: dulwich (==0.20.28) ; extra == "all"
 Requires-Dist: fpdf2 (>=2.7.1,<3.0.0)
 Requires-Dist: grafana-api (>=1.0.3,<2.0.0) ; extra == "all"
 Requires-Dist: hikaru-model-26 (>=1.1.1,<2.0.0)
-Requires-Dist: jinja2 (==3.1.3)
+Requires-Dist: humanize (>=3.13.1,<4.0.0)
+Requires-Dist: idna (>=3.7)
+Requires-Dist: jinja2 (>=3.1.4)
 Requires-Dist: kafka-python (>=2.0.2,<3.0.0) ; extra == "all"
 Requires-Dist: kubernetes (>=26.1.0,<27.0.0)
 Requires-Dist: markdown2 (>=2.4.2,<3.0.0)
@@ -45,7 +49,7 @@ Requires-Dist: rocketchat-api (>=1.30.0,<2.0.0)
 Requires-Dist: sentry-sdk (>=1.5.2,<2.0.0) ; extra == "all"
 Requires-Dist: setuptools (>=68.2.2,<69.0.0)
 Requires-Dist: slack-sdk (>=3.23.0,<4.0.0)
-Requires-Dist: supabase (>=1.0.3,<2.0.0) ; extra == "all"
+Requires-Dist: supabase (>=2.4,<3.0) ; extra == "all"
 Requires-Dist: tabulate (>=0.8.10,<0.9.0) ; extra == "all"
 Requires-Dist: toml (>=0.10.2,<0.11.0)
 Requires-Dist: typer (>=0.4.1,<0.5.0)
@@ -53,3 +57,4 @@ Requires-Dist: watchdog (>=2.1.0,<3.0.0) ; extra == "all"
 Requires-Dist: watchgod (>=0.7,<0.8)
 Requires-Dist: webexteamssdk (>=1.6.1,<2.0.0)
 Requires-Dist: websocket-client (==1.3.3)
+Requires-Dist: werkzeug (>=3.0.3)

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "robusta-cli"
-version = "0.12.1-alpha"
+version = "0.13.0"
 description = ""
 authors = ["Natan Yellin <aantn@users.noreply.github.com>"]
 packages = [
@@ -32,11 +32,13 @@ pydantic = "^1.8.1"
 kubernetes = "^26.1.0"
 click-spinner = "^0.1.10"
 pymsteams = "^0.1.16"
-supabase = { version = "^1.0.3", optional = true }
+idna= { version = ">=3.7", optional = true }
+supabase = "^2.4"
 tabulate = { version = "^0.8.10" }
 slack-sdk = { version = "^3.23.0" }
 Flask = { version = "^3.0.0", optional = true }
-jinja2 = { version ="3.1.3", optional = true }  # indirect dependency
+werkzeug = { version = ">=3.0.3", optional = true }
+jinja2 = { version = ">=3.1.4", optional = true }
 grafana-api = { version = "^1.0.3", optional = true }
 watchdog =  { version = "^2.1.0", optional = true }
 better-exceptions = { version =  "^0.3.3", optional = true }
@@ -58,7 +60,7 @@ watchgod = "^0.7"
 webexteamssdk = "^1.6.1"
 bitmath = "^1.3.3.1"
 croniter = "^1.3.15"
-
+humanize = "^3.13.1"
 # we're freezing a specific version here because the latest version doesn't have prebuilt wheels on pypi
 # and therefore requires gcc to install which we'd like to avoid
 # this is similar to the issue at https://github.com/dulwich/dulwich/issues/839
@@ -72,6 +74,9 @@ hikaru-model-26 = "^1.1.1"
 apprise = "^1.5.0"
 rocketchat-api = "^1.30.0"
 pydash = "8.0.0"
+# The following are added to speed up poetry dependency resolution
+botocore = "1.31.72"
+boto3 = "1.28.72"
 
 [tool.poetry.dev-dependencies]
 pre-commit = "^2.13.0"
@@ -88,7 +93,6 @@ sphinxcontrib-images = "^0.9.4"
 jsonref = "^0.2"
 Pillow = "^10.3.0"
 sphinxcontrib-mermaid = "^0.7.1"
-humanize = "^3.13.1"
 cssselect = "^1.1.0"
 pygal = "^3.0.0"
 tinycss = "^0.4"

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/_version.py

@@ -1,2 +1,2 @@
 # this is updated by .github/workflows/release.yaml
-__version__ = "0.12.1-alpha"
+__version__ = "0.13.0"

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/api/__init__.py

@@ -70,12 +70,12 @@ from robusta.core.model.env_vars import (
     ROBUSTA_LOGO_URL,
     ROBUSTA_TELEMETRY_ENDPOINT,
     ROBUSTA_UI_DOMAIN,
+    RUNNER_SERVICE_ACCOUNT,
     RUNNER_VERSION,
     SEND_ADDITIONAL_TELEMETRY,
     SERVICE_CACHE_MAX_SIZE,
     SERVICE_CACHE_TTL_SEC,
     SLACK_TABLE_COLUMNS_LIMIT,
-    SUPABASE_LOGIN_RATE_LIMIT_SEC,
     TEAMS_IMAGE_WIDTH,
     TELEMETRY_PERIODIC_SEC,
     TRACE_INCOMING_REQUESTS,

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/cli/self_host.py

@@ -74,6 +74,10 @@ class RobustaRelay(BaseModel):
     apiEndpointPrefix: str
     apiNodePort: int = 30313  # api.domain
     wsNodePort: int = 30314  # relay.domain
+    relayPrefix: str = "relay"
+    platformPrefix: str = "platform"
+    apiPrefix: str = "api"
+    isOnPrem: bool = True
 
     def __init__(
         self,
@@ -184,6 +188,13 @@ def gen_config(
     )
     values.KONG_HTTP_NODE_PORT = db_nport
 
+    backendProfile = BackendProfile.fromDomainProvider(
+        domain=domain,
+        api_endpoint_prefix=api_endpoint_prefix,
+        platform_endpoint_prefix=platform_endpoint_prefix,
+        relay_endpoint_prefix=relay_ws_endpoint_prefix,
+    )
+
     relayValues = RobustaRelay(
         domain=domain,
         anon_key=values.ANON_KEY,
@@ -193,8 +204,13 @@ def gen_config(
         platform_endpoint_prefix=platform_endpoint_prefix,
         api_endpoint_prefix=api_endpoint_prefix,
     )
+
     relayValues.apiNodePort = api_nport
     relayValues.wsNodePort = ws_nport
+    relayValues.relayPrefix = relay_ws_endpoint_prefix
+    relayValues.platformPrefix = platform_endpoint_prefix
+    relayValues.apiPrefix = api_endpoint_prefix
+
 
     uiValues = RobustaUI(
         domain=domain,
@@ -215,12 +231,8 @@ def gen_config(
         "RELAY": relay_ws_endpoint_prefix,
     }
 
-    backendProfile = BackendProfile.fromDomainProvider(
-        domain=domain,
-        api_endpoint_prefix=api_endpoint_prefix,
-        platform_endpoint_prefix=platform_endpoint_prefix,
-        relay_endpoint_prefix=relay_ws_endpoint_prefix,
-    )
+
+
     self_host_approval_url = "https://api.robusta.dev/terms-of-service.html"
     typer.echo(f"By using this software you agree to the terms of service ({self_host_approval_url})\n")
     write_values_files("self_host_values.yaml", "robusta_cli_config.json", values_dict, backendProfile)

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/model/env_vars.py

@@ -27,7 +27,6 @@ CLUSTER_STATUS_PERIOD_SEC = int(os.environ.get("CLUSTER_STATUS_PERIOD_SEC", 60 *
 DISCOVERY_CHECK_THRESHOLD_SEC = int(os.environ.get("DISCOVERY_CHECK_THRESHOLD_SEC", 60 * 50))  # 50 min
 DISCOVERY_PROCESS_TIMEOUT_SEC = int(os.environ.get("DISCOVERY_PROCESS_TIMEOUT_SEC", 60 * 120))  # 120 min
 DISCOVERY_WATCHDOG_CHECK_SEC = int(os.environ.get("DISCOVERY_WATCHDOG_CHECK_SEC", 15 * 120))  # 15 min
-SUPABASE_LOGIN_RATE_LIMIT_SEC = int(os.environ.get("SUPABASE_LOGIN_RATE_LIMIT_SEC", 900))
 SUPABASE_TIMEOUT_SECONDS = int(os.environ.get("SUPABASE_TIMEOUT_SECONDS", 60))
 GRAFANA_RENDERER_URL = os.environ.get("GRAFANA_RENDERER_URL", "http://127.0.0.1:8281/render")
 RESOURCE_UPDATES_CACHE_TTL_SEC = os.environ.get("RESOURCE_UPDATES_CACHE_TTL_SEC", 120)
@@ -66,6 +65,8 @@ ENABLE_TELEMETRY = os.environ.get("ENABLE_TELEMETRY", "true").lower() == "true"
 SEND_ADDITIONAL_TELEMETRY = os.environ.get("SEND_ADDITIONAL_TELEMETRY", "false").lower() == "true"
 RELEASE_NAME = os.environ.get("RELEASE_NAME", "robusta")
 
+RUNNER_SERVICE_ACCOUNT = os.environ.get("RUNNER_SERVICE_ACCOUNT", f"{RELEASE_NAME}-runner-service-account")
+
 TELEMETRY_PERIODIC_SEC = int(os.environ.get("TELEMETRY_PERIODIC_SEC", 60 * 60 * 24))  # 24H
 
 SLACK_TABLE_COLUMNS_LIMIT = int(os.environ.get("SLACK_TABLE_COLUMNS_LIMIT", 3))
@@ -100,7 +101,7 @@ RRM_PERIOD_SEC = int(os.environ.get("RRM_PERIOD_SEC", 90))
 
 MAX_ALLOWED_RULES_PER_CRD_ALERT = int(os.environ.get("MAX_ALLOWED_RULES_PER_CRD_ALERT", 600))
 
-IMAGE_REGISTRY = os.environ.get("IMAGE_REGISTRY", "robustadev")
+IMAGE_REGISTRY = os.environ.get("IMAGE_REGISTRY", "us-central1-docker.pkg.dev/genuine-flight-317411/devel")
 
 CLUSTER_DOMAIN = os.environ.get("CLUSTER_DOMAIN", "cluster.local")
 
@@ -113,3 +114,8 @@ RUN_AS_SUBPROCESS = load_bool("RUN_AS_SUBPROCESS", True)
 ARGO_ROLLOUTS = load_bool("ARGO_ROLLOUTS", False)
 # lowered case k8s kinds in a json array string. "[\"configmap\", \"secret\"]"
 RESOURCE_YAML_BLOCK_LIST = json.loads(os.environ.get("RESOURCE_YAML_BLOCK_LIST", "[]"))
+
+NAMESPACE_DATA_TTL = int(os.environ.get("NAMESPACE_DATA_TTL", 30*60))  # in seconds
+
+PROCESSED_ALERTS_CACHE_TTL = int(os.environ.get("PROCESSED_ALERT_CACHE_TTL", 2*3600))
+PROCESSED_ALERTS_CACHE_MAX_SIZE = int(os.environ.get("PROCESSED_ALERTS_CACHE_MAX_SIZE", 100_000))

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/reporting/base.py

@@ -14,6 +14,7 @@ from pydantic.main import BaseModel
 from robusta.core.discovery.top_service_resolver import TopServiceResolver
 from robusta.core.model.env_vars import ROBUSTA_UI_DOMAIN
 from robusta.core.reporting.consts import FindingSource, FindingSubjectType, FindingType
+from robusta.integrations.kubernetes.api_client_utils import get_namespace_labels
 from robusta.utils.scope import BaseScopeMatcher
 
 
@@ -106,7 +107,7 @@ class EnrichmentType(Enum):
 
 
 class Enrichment:
-    # These is the actual enrichment data
+    # This is the actual enrichment data
     blocks: List[BaseBlock] = []
     # General purpose rendering flags, that can be used by specific sinks
     annotations: Dict[str, str] = {}
@@ -138,6 +139,9 @@ class FilterableScopeMatcher(BaseScopeMatcher):
     def get_data(self) -> Dict:
         return self.data
 
+    def scope_match_namespace_labels(self, attr_matcher, attr_value):
+        return self.match_labels_annotations(attr_matcher, attr_value)
+
 
 class Filterable(ABC):
     @property
@@ -169,7 +173,12 @@ class Filterable(ABC):
         # 1. "scope" check
         accept = True
         if scope_requirements is not None:
-            matcher = FilterableScopeMatcher(self.attribute_map)
+            data = self.attribute_map
+            try:
+                data["namespace_labels"] = get_namespace_labels(data["namespace"])
+            except KeyError:
+                data["namespace_labels"] = {}
+            matcher = FilterableScopeMatcher(data)
             if scope_requirements.exclude:
                 if matcher.scope_inc_exc_matches(scope_requirements.exclude):
                     return False

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/datadog/datadog_sink_params.py

@@ -5,6 +5,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class DataDogSinkParams(SinkBaseParams):
     api_key: str
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "datadog"
+
 
 class DataDogSinkConfigWrapper(SinkConfigBase):
     datadog_sink: DataDogSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/discord/discord_sink_params.py

@@ -5,6 +5,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class DiscordSinkParams(SinkBaseParams):
     url: str
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "discord"
+
 
 class DiscordSinkConfigWrapper(SinkConfigBase):
     discord_sink: DiscordSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/file/file_sink_params.py

@@ -7,6 +7,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class FileSinkParms(SinkBaseParams):
     file_name: str = None
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "file"
+
 
 class FileSinkConfigWrapper(SinkConfigBase):
     file_sink: FileSinkParms

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/google_chat/google_chat_params.py

@@ -7,6 +7,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class GoogleChatSinkParams(SinkBaseParams):
     webhook_url: SecretStr
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "google_chat"
+
 
 class GoogleChatSinkConfigWrapper(SinkConfigBase):
     google_chat_sink: GoogleChatSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/jira/jira_sink_params.py

@@ -19,6 +19,10 @@ class JiraSinkParams(SinkBaseParams):
     reopenStatusName: Optional[str] = "To Do"
     noReopenResolution: Optional[str] = ""
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "jira"
+
 
 class JiraSinkConfigWrapper(SinkConfigBase):
     jira_sink: JiraSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/kafka/kafka_sink_params.py

@@ -7,6 +7,10 @@ class KafkaSinkParams(SinkBaseParams):
     topic: str
     auth: dict = {}
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "kafka"
+
 
 class KafkaSinkConfigWrapper(SinkConfigBase):
     kafka_sink: KafkaSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/mail/mail_sink_params.py

@@ -7,6 +7,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class MailSinkParams(SinkBaseParams):
     mailto: str
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "mail"
+
     @validator("mailto")
     def validate_mailto(cls, mailto):
         # Make sure we only handle emails and exclude other schemes provided by apprise

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/mattermost/mattermost_sink_params.py

@@ -15,6 +15,10 @@ class MattermostSinkParams(SinkBaseParams):
     team: Optional[str]
     team_id: Optional[str]
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "mattermost"
+
     @validator("url")
     def set_http_schema(cls, url):
         parsed_url = urlparse(url)

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/msteams/msteams_sink_params.py

@@ -5,6 +5,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class MsTeamsSinkParams(SinkBaseParams):
     webhook_url: str
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "msteams"
+
 
 class MsTeamsSinkConfigWrapper(SinkConfigBase):
     ms_teams_sink: MsTeamsSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/opsgenie/opsgenie_sink_params.py

@@ -10,6 +10,10 @@ class OpsGenieSinkParams(SinkBaseParams):
     tags: List[str] = []
     host: Optional[str] = None  # NOTE: If None, the default value will be used from opsgenie_sdk
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "opsgenie"
+
 
 class OpsGenieSinkConfigWrapper(SinkConfigBase):
     opsgenie_sink: OpsGenieSinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/pagerduty/pagerduty_sink_params.py

@@ -5,6 +5,10 @@ from robusta.core.sinks.sink_config import SinkConfigBase
 class PagerdutySinkParams(SinkBaseParams):
     api_key: str
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "pagerduty"
+
 
 class PagerdutyConfigWrapper(SinkConfigBase):
     pagerduty_sink: PagerdutySinkParams

{robusta_cli-0.12.1a0 → robusta_cli-0.13.0}/src/robusta/core/sinks/pushover/pushover_sink_params.py

@@ -10,6 +10,11 @@ class PushoverSinkParams(SinkBaseParams):
     device: str = None
     pushover_url: str = "https://api.pushover.net/1/messages.json"
 
+    @classmethod
+    def _get_sink_type(cls):
+        return "pushover"
+
+
 class PushoverSinkConfigWrapper(SinkConfigBase):
     pushover_sink: PushoverSinkParams