Feature request: Map k8s pod labels as project tags

[ckotzbauer]

Feature request: Map k8s pod labels as project tags

[ckotzbauer]

I got it, you want to control which pod-labels should be mapped to Dependency Track.

[ckotzbauer]

Hi @muellerst-hg,
thanks for your request. Sure, the Dependency Track integration can be extended with the pod-labels as you specified.
What do you mean with "custom mapping"? Can you give a few more details about this?

[muellerst-hg]

Maybe "custom mapping" isn't the right term.

Given I have the following labels:
  spec:
    template:
        metadata:
          labels:
            app=dependencytrack
            stage=live
            department=sales
            service=inventory
            pod-template-hash=12c5401afc
And I have selected "app" and "stage" as labels to be added as tags
Then the following project tags should be added to dtrack
    app=dependencytrack
    stage=live

[muellerst-hg]

With two labels "app=dependencytrack" and "app=nginx", some magic would be required to identify both by matching "app" left of the equals sign.

[muellerst-hg]

A user could provide a regex for matching labels like SBOM_DTRACK_LABEL_TAG_MATCHER="^(?:app|stage)="