Get one imported cluster's NetworkPolicy over-privilege score

GET /api/v1/org/clusters/imported/{cluster_id}/security/network-policy-overprivilege

Get one imported cluster's NetworkPolicy over-privilege score

Python

import requests

url = "https://platform.ankra.app/api/v1/org/clusters/imported/{cluster_id}/security/network-policy-overprivilege"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

200

{
  "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cluster_name": "<string>",
  "egress": {
    "broad_rules": 123,
    "over_privilege_rate": 123,
    "score": 123,
    "total_admitting_rules": 123,
    "total_workloads": 123,
    "unprotected_workloads": 123
  },
  "findings": [
    {
      "affected_count": 123,
      "direction": "ingress",
      "id": "<string>",
      "namespace": "<string>",
      "policy_name": "<string>",
      "reason": "<string>",
      "remediation": "<string>",
      "severity": "<string>",
      "title": "<string>",
      "workload": "<string>"
    }
  ],
  "findings_truncated": 123,
  "ingress": {
    "broad_rules": 123,
    "over_privilege_rate": 123,
    "score": 123,
    "total_admitting_rules": 123,
    "total_workloads": 123,
    "unprotected_workloads": 123
  },
  "policy_mode": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

cluster_id · string<uuid> · required

Response

200

application/json

The cluster's two-axis NetworkPolicy over-privilege score computed from live policy and workload objects; a direction with total_workloads 0 is a no-data state (score 100 by construction) that callers must not present as tightness.

cluster_id · string<uuid> · required

cluster_name · string · required

egress · ClusterOverPrivilegeDirectionScore · object · required

Show child attributes

findings · ClusterOverPrivilegeFinding · object[] · required

Show child attributes

findings_truncated · integer · required

ingress · ClusterOverPrivilegeDirectionScore · object · required

Show child attributes

policy_mode · string | null · required