actions

Documentation

Index

• func ConvertActionableEntityToViolatableEntity(entity ActionableEntity) (libs.ViolatableEntity, error)
• func DoAction(action Action, entity ActionableEntity, violatableEntity libs.ViolatableEntity, ...) map[string][]time.Time
• func NotifyOfViolation(actionMessage actionMessage)
• type Action
• type ActionCronJob
  • func (a ActionCronJob) DoAction()
• type ActionDaemonSet
  • func (a ActionDaemonSet) DoAction()
• type ActionDeployment
  • func (a ActionDeployment) DoAction()
• type ActionIngress
  • func (a ActionIngress) DoAction()
• type ActionJob
  • func (a ActionJob) DoAction()
• type ActionNamespace
  • func (a ActionNamespace) DoAction()
• type ActionPod
  • func (a ActionPod) DoAction()
• type ActionableEntity
• type CapabilitiesAction
  • func (a CapabilitiesAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type HostVolumesAction
  • func (a HostVolumesAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type ImageRepoAction
  • func (a ImageRepoAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type ImageSizeAction
  • func (a ImageSizeAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type IngressAction
  • func (a IngressAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type NoOwnerAction
  • func (a NoOwnerAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type PrivilegedAction
  • func (a PrivilegedAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDaemonSetAction
  • func (a RequiredDaemonSetAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDaemonSetAnnotationAction
  • func (a RequiredDaemonSetAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDaemonSetLabelAction
  • func (a RequiredDaemonSetLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDeploymentAction
  • func (a RequiredDeploymentAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDeploymentAnnotationAction
  • func (a RequiredDeploymentAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredDeploymentLabelAction
  • func (a RequiredDeploymentLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredNamespaceAction
  • func (a RequiredNamespaceAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredNamespaceAnnotationAction
  • func (a RequiredNamespaceAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredNamespaceLabelAction
  • func (a RequiredNamespaceLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredPodAction
  • func (a RequiredPodAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredPodAnnotationAction
  • func (a RequiredPodAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredPodLabelAction
  • func (a RequiredPodLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type RequiredResourceQuotaAction
  • func (a RequiredResourceQuotaAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string
• type SingleReplicaAction
  • func (a SingleReplicaAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, ...) []string

Functions

func ConvertActionableEntityToViolatableEntity

func ConvertActionableEntityToViolatableEntity(entity ActionableEntity) (libs.ViolatableEntity, error)

func DoAction

func DoAction(action Action, entity ActionableEntity, violatableEntity libs.ViolatableEntity, lastActions map[string][]time.Time, dryRun bool) map[string][]time.Time

actionable is interface, violatable is struct

func NotifyOfViolation

func NotifyOfViolation(actionMessage actionMessage)

Types

type Action

type Action interface {
	DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string
}

type ActionCronJob

type ActionCronJob libs.CronJob

func (ActionCronJob) DoAction

func (a ActionCronJob) DoAction()

type ActionDaemonSet

type ActionDaemonSet libs.DaemonSet

func (ActionDaemonSet) DoAction

func (a ActionDaemonSet) DoAction()

type ActionDeployment

type ActionDeployment libs.Deployment

func (ActionDeployment) DoAction

func (a ActionDeployment) DoAction()

type ActionIngress

type ActionIngress libs.Ingress

func (ActionIngress) DoAction

func (a ActionIngress) DoAction()

type ActionJob

type ActionJob libs.Job

func (ActionJob) DoAction

func (a ActionJob) DoAction()

type ActionNamespace

type ActionNamespace libs.Namespace

func (ActionNamespace) DoAction

func (a ActionNamespace) DoAction()

type ActionPod

type ActionPod libs.Pod

See http://stackoverflow.com/questions/28800672/how-to-add-new-methods-to-an-existing-type-in-go

func (ActionPod) DoAction

func (a ActionPod) DoAction()

type ActionableEntity

type ActionableEntity interface {
	DoAction()
}

type CapabilitiesAction

type CapabilitiesAction struct {
	violations.Violation
}

func (CapabilitiesAction) DoAction

func (a CapabilitiesAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for containers with extra capablities.

type HostVolumesAction

type HostVolumesAction struct {
	violations.Violation
}

func (HostVolumesAction) DoAction

func (a HostVolumesAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

Action for any pod with a hostVolume

type ImageRepoAction

type ImageRepoAction struct {
	violations.Violation
}

func (ImageRepoAction) DoAction

func (a ImageRepoAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for invalid repo for an image

type ImageSizeAction

type ImageSizeAction struct {
	violations.Violation
}

func (ImageSizeAction) DoAction

func (a ImageSizeAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for a container with a big image size

type IngressAction

type IngressAction struct {
	violations.Violation
}

func (IngressAction) DoAction

func (a IngressAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for ingress, a special kind that we don't warn.

type NoOwnerAction

type NoOwnerAction struct {
	violations.Violation
}

func (NoOwnerAction) DoAction

func (a NoOwnerAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing owner

type PrivilegedAction

type PrivilegedAction struct {
	violations.Violation
}

func (PrivilegedAction) DoAction

func (a PrivilegedAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

Action for privileged mode containers

type RequiredDaemonSetAction

type RequiredDaemonSetAction struct {
	violations.Violation
}

func (RequiredDaemonSetAction) DoAction

func (a RequiredDaemonSetAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing mandatory daemonset

type RequiredDaemonSetAnnotationAction

type RequiredDaemonSetAnnotationAction struct {
	violations.Violation
}

func (RequiredDaemonSetAnnotationAction) DoAction

func (a RequiredDaemonSetAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing daemonset annotation

type RequiredDaemonSetLabelAction

type RequiredDaemonSetLabelAction struct {
	violations.Violation
}

func (RequiredDaemonSetLabelAction) DoAction

func (a RequiredDaemonSetLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing daemonset label

type RequiredDeploymentAction

type RequiredDeploymentAction struct {
	violations.Violation
}

func (RequiredDeploymentAction) DoAction

func (a RequiredDeploymentAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing mandatory deployment

type RequiredDeploymentAnnotationAction

type RequiredDeploymentAnnotationAction struct {
	violations.Violation
}

func (RequiredDeploymentAnnotationAction) DoAction

func (a RequiredDeploymentAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing namespace annotation

type RequiredDeploymentLabelAction

type RequiredDeploymentLabelAction struct {
	violations.Violation
}

func (RequiredDeploymentLabelAction) DoAction

func (a RequiredDeploymentLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing namespace label

type RequiredNamespaceAction

type RequiredNamespaceAction struct {
	violations.Violation
}

func (RequiredNamespaceAction) DoAction

func (a RequiredNamespaceAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing mandatory namespace

type RequiredNamespaceAnnotationAction

type RequiredNamespaceAnnotationAction struct {
	violations.Violation
}

func (RequiredNamespaceAnnotationAction) DoAction

func (a RequiredNamespaceAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing namespace annotation

type RequiredNamespaceLabelAction

type RequiredNamespaceLabelAction struct {
	violations.Violation
}

func (RequiredNamespaceLabelAction) DoAction

func (a RequiredNamespaceLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing namespace label

type RequiredPodAction

type RequiredPodAction struct {
	violations.Violation
}

func (RequiredPodAction) DoAction

func (a RequiredPodAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing mandatory pod

type RequiredPodAnnotationAction

type RequiredPodAnnotationAction struct {
	violations.Violation
}

func (RequiredPodAnnotationAction) DoAction

func (a RequiredPodAnnotationAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing pod annotation

type RequiredPodLabelAction

type RequiredPodLabelAction struct {
	violations.Violation
}

func (RequiredPodLabelAction) DoAction

func (a RequiredPodLabelAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing pod label

type RequiredResourceQuotaAction

type RequiredResourceQuotaAction struct {
	violations.Violation
}

func (RequiredResourceQuotaAction) DoAction

func (a RequiredResourceQuotaAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for missing mandatory resourcequota

type SingleReplicaAction

type SingleReplicaAction struct {
	violations.Violation
}

func (SingleReplicaAction) DoAction

func (a SingleReplicaAction) DoAction(entity ActionableEntity, vEntity libs.ViolatableEntity, lastActions map[string][]time.Time) []string

action for pods with single replica , currently action is supressed.