Creating your own controls

When creating your own controls, GPT-3 creates the control based on the information you provide. You can then download the control and use it manually with Kubescape on the CLI. You can create a limited number of controls.

Currently custom controls are an experimental feature in ARMO Platform. You can add controls to the community by contributing to RegoLibrary.

If a control is not generated as expected, you can create another custom control using a more granular prompt, or you can manually edit the downloaded control in a text editor.
Control names are case sensitive.

  1. Click Settings in the sidebar, and then click Controls.
  2. Click Create custom control.
  3. Enter the control name and severity.
  4. In Your wish, add a detailed description of what you want the rule to test, using pseudocode if possible. Because you can’t edit this, be as precise as possible.
    For example, you can enter "Fail if a replicaset has more than 4 replicas,” or "Fail if a pod resource has no memory limits” in Your wish.
  5. Optionally add an example object that is validated against the control. Use YAML syntax.
  6. Optionally add a description to the control. The description is used in the UI.
  7. Enter remediation information.
  8. When complete click Generate control.

The control is generated and a one-time download link is provided. You can download the control and use it with Kubescape in a terminal. If you navigate away from the page, you must regenerate the control.

See the Kubescape documentation for more information about scanning with a specific control.

Creating a custom control is part of ARMO Lab Innovation. Controls are generated by an AI using the information you provide. As such, we recommend testing the generated controls thoroughly before using them. ARMO Platform makes no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the output. Any reliance you place on such information is therefore strictly at your own risk.