Policy Reporter not showing any result stats for some policies.

[Shreyash-Talwekar]

I am seeing an issue on Policy Reporter UI, for some of the validatingpolicies we implemented, we aren't getting any result stats as in ValidatingPolicy shows 0 pass and 0 fail results.

This behaviour is not observed for all policies but only a subset of validatingpolicies deployed.

Policy Reporter Version: 3.7.2
Policy Reporter Kyverno Plugin Version: 0.6.0
Kyverno Version: 1.17.1

[fjogeleit]

If the Policies do no produce any results it sounds like an kyverno issue rather then an UI issue.
It can only Show data when results for a guten policy exist.

Can you Share one of this policies?

[Shreyash-Talwekar]

This is one of the policies

apiVersion: policies.kyverno.io/v1alpha1
kind: ValidatingPolicy
metadata:
  name: secrets-not-from-env-vars
  annotations:
    policies.kyverno.io/title: Disallow Secrets from Env Vars in ValidatingPolicy
    policies.kyverno.io/category: Sample, EKS Best Practices in vpol
    policies.kyverno.io/severity: medium
    policies.kyverno.io/subject: Pod, Secret
    kyverno.io/kyverno-version: 1.14.0
    kyverno.io/kubernetes-version: "1.30"
    policies.kyverno.io/description: Secrets used as environment variables containing sensitive information may, if not carefully controlled,  be printed in log output which could be visible to unauthorized people and captured in forwarding applications. This policy disallows using Secrets as environment variables.
spec:
  validationActions:
    - Audit
  evaluation:
    background:
      enabled: true
  matchConstraints:
    resourceRules:
      - apiGroups:
          - ""
        apiVersions:
          - v1
        operations:
          - CREATE
          - UPDATE
        resources:
          - pods
  validations:
    - expression: |-
        object.spec.containers.all(container,  container.?env.orValue([]).all(env, 
          !has(env.valueFrom) || !has(env.valueFrom.secretKeyRef)))
      message: Secrets must be mounted as volumes, not as environment variables.
    - expression: object.spec.containers.all(container,  container.?envFrom.orValue([]).all(envFrom, !has(envFrom.secretRef)))
      message: Secrets must not come from envFrom

statements.

policy reports are getting generating by kyverno but for some of the policies the results on UI are showing 0 pass and 0 fail even though reports are gettign generated.

[fjogeleit]

Which kyverno Version do you running

[Shreyash-Talwekar]

I am using Kyverno 1.17.1

[fjogeleit]

Sorry for the late response, do you use autogen (which is enabled by default)? And does it create reports for the pod controllers?

https://kyverno.github.io/policy-reporter-docs/policy-reporter/report-processing.html#source-filter

will filter pod level reports for managed pods by default