> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get one imported cluster's compliance view



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /org/clusters/imported/{cluster_id}/security/compliance
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
tags:
  - name: Clusters
    description: Create, inspect and manage clusters, and the stacks deployed on them.
  - name: Managed Clusters
    description: Provider-managed control planes, driven through one common surface.
  - name: Imported Clusters
    description: Clusters that already existed and were connected to Ankra.
  - name: Cluster Access
    description: Kubeconfigs, service-account tokens and per-cluster access grants.
  - name: Kubernetes
    description: Read and act on the Kubernetes objects inside a cluster.
  - name: DigitalOcean Clusters
    description: Provision and manage DigitalOcean Kubernetes clusters.
  - name: Hetzner Clusters
    description: Provision and manage Hetzner Kubernetes clusters.
  - name: OVH Clusters
    description: Provision and manage OVH Kubernetes clusters.
  - name: Scaleway Clusters
    description: Provision and manage Scaleway Kapsule clusters.
  - name: UpCloud Clusters
    description: Provision and manage UpCloud Kubernetes clusters.
  - name: Applications
    description: Deploy, configure and observe applications across the fleet.
  - name: Stack Profiles
    description: Reusable stack definitions, their versions and sharing.
  - name: Charts
    description: Browse the chart catalogue behind stacks and addons.
  - name: Helm
    description: Helm registries, credentials and the charts they expose.
  - name: Executions
    description: Long-running platform executions and their jobs.
  - name: Operations
    description: Cancel in-flight cluster operations and their jobs.
  - name: Chat
    description: Conversational sessions, plans and confirmable actions.
  - name: AI Agent Runs
    description: Autonomous agent runs and their outcomes.
  - name: AI Tickets
    description: The AI ticket board, its sync connections and settings.
  - name: AI Playbooks
    description: Reusable playbooks the AI lanes execute.
  - name: AI Conditions
    description: Conditions that gate AI autonomy.
  - name: AI Engineering Handoffs
    description: Work the AI lanes escalate to a human engineer.
  - name: AI Environment
    description: The environment and base stacks AI demos deploy into.
  - name: Security
    description: Findings, advisories, SBOMs, compliance and posture.
  - name: Cost
    description: Cluster and fleet cost, rate cards and cost settings.
  - name: Billing
    description: Subscription and spend caps.
  - name: Organisation
    description: Members, invitations, audit logs and organisation settings.
  - name: Account Tokens
    description: Personal access tokens for the API and CLI.
  - name: Credentials
    description: The shared credential store.
  - name: Azure Credentials
    description: Azure credentials and SSH keys.
  - name: DigitalOcean Credentials
    description: DigitalOcean credentials and SSH keys.
  - name: Hetzner Credentials
    description: Hetzner credentials and SSH keys.
  - name: OVH Credentials
    description: OVH credentials and SSH keys.
  - name: Scaleway Credentials
    description: Scaleway credentials.
  - name: UpCloud Credentials
    description: UpCloud credentials and SSH keys.
  - name: Data Source Credentials
    description: Credentials for metrics and log sources.
  - name: DNS Credentials
    description: Credentials for DNS providers.
  - name: DNS
    description: DNS zones and records, including custom organisation zones.
  - name: Cloudflare
    description: Cloudflare domains and the credentials behind them.
  - name: Variables
    description: Organisation- and cluster-scoped variables.
  - name: SOPS
    description: Encrypt and decrypt values with the organisation SOPS config.
  - name: Alerts
    description: Alert integrations and ingest credentials.
  - name: Notifications
    description: Notification routes and their delivery targets.
  - name: Support
    description: Support tickets.
paths:
  /org/clusters/imported/{cluster_id}/security/compliance:
    get:
      tags:
        - Security
      summary: Get one imported cluster's compliance view
      operationId: get_imported_cluster_security_compliance
      parameters:
        - in: path
          name: cluster_id
          required: true
          schema:
            format: uuid
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityClusterComplianceResponse'
          description: >-
            The cluster's compliance benchmark summaries with failed checks and
            the aggregated config-audit counts; not_available with a detail when
            trivy-operator (or its compliance controller) has published nothing.
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPermissionDenied'
          description: Missing the security.read permission
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Organization-scoped resource not found
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Request validation error
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Internal server error
        '503':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityAgentDegradedError'
          description: >-
            Cluster offline, no agent, or agent timeout (frozen degraded
            envelope with a Retry-After header)
components:
  schemas:
    SecurityClusterComplianceResponse:
      properties:
        benchmarks:
          items:
            $ref: '#/components/schemas/SecurityComplianceBenchmark'
          type: array
        cluster_id:
          format: uuid
          type: string
        cluster_name:
          type: string
        config_audit:
          allOf:
            - $ref: '#/components/schemas/SecurityComplianceConfigAudit'
          nullable: true
        detail:
          type: string
          nullable: true
        is_truncated:
          type: boolean
        status:
          enum:
            - available
            - not_available
          type: string
      required:
        - cluster_id
        - cluster_name
        - status
        - detail
        - benchmarks
        - config_audit
        - is_truncated
      type: object
    SecurityPermissionDenied:
      properties:
        detail:
          enum:
            - permission_denied
          type: string
        permission:
          type: string
        scope_type:
          type: string
      required:
        - detail
        - permission
        - scope_type
      type: object
    SecurityDetailError:
      properties:
        detail:
          type: string
      required:
        - detail
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    SecurityAgentDegradedError:
      properties:
        detail:
          type: string
        error_code:
          enum:
            - CLUSTER_OFFLINE
            - NO_AGENT
            - AGENT_TIMEOUT
          type: string
        retry_after:
          type: integer
      required:
        - error_code
        - detail
        - retry_after
      type: object
    SecurityComplianceBenchmark:
      properties:
        fail_count:
          type: integer
        failed_checks:
          items:
            $ref: '#/components/schemas/SecurityComplianceFailedCheck'
          type: array
        pass_count:
          type: integer
        passed_checks:
          items:
            $ref: '#/components/schemas/SecurityCompliancePassedCheck'
          type: array
        spec_id:
          type: string
        title:
          type: string
        updated_at:
          type: string
          nullable: true
      required:
        - spec_id
        - title
        - pass_count
        - fail_count
        - updated_at
        - failed_checks
        - passed_checks
      type: object
    SecurityComplianceConfigAudit:
      properties:
        namespaces:
          items:
            $ref: '#/components/schemas/SecurityComplianceConfigAuditNamespace'
          type: array
        report_count:
          type: integer
        severity:
          $ref: '#/components/schemas/SecurityComplianceConfigAuditSeverity'
        top_failed_checks:
          items:
            $ref: '#/components/schemas/SecurityComplianceConfigAuditCheck'
          type: array
      required:
        - report_count
        - severity
        - namespaces
        - top_failed_checks
      type: object
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    SecurityComplianceFailedCheck:
      properties:
        affected_count:
          type: integer
        id:
          type: string
        remediation:
          type: string
        severity:
          type: string
        title:
          type: string
      required:
        - id
        - title
        - severity
        - remediation
        - affected_count
      type: object
    SecurityCompliancePassedCheck:
      properties:
        id:
          type: string
        severity:
          type: string
        title:
          type: string
      required:
        - id
        - title
        - severity
      type: object
    SecurityComplianceConfigAuditNamespace:
      properties:
        critical:
          type: integer
        high:
          type: integer
        low:
          type: integer
        medium:
          type: integer
        namespace:
          type: string
      required:
        - namespace
        - critical
        - high
        - medium
        - low
      type: object
    SecurityComplianceConfigAuditSeverity:
      properties:
        critical:
          type: integer
        high:
          type: integer
        low:
          type: integer
        medium:
          type: integer
      required:
        - critical
        - high
        - medium
        - low
      type: object
    SecurityComplianceConfigAuditCheck:
      properties:
        count:
          type: integer
        id:
          type: string
        remediation:
          type: string
        severity:
          type: string
        title:
          type: string
      required:
        - id
        - title
        - severity
        - remediation
        - count
      type: object

````