Directories
¶
| Path | Synopsis |
|---|---|
|
audit
|
|
|
outcome
Package outcome defines the single, bounded vocabulary for what the audit ingestion pipeline did with one event — its "outcome" — and records it on the gitopsreverser_audit_events_total counter.
|
Package outcome defines the single, bounded vocabulary for what the audit ingestion pipeline did with one event — its "outcome" — and records it on the gitopsreverser_audit_events_total counter. |
|
Package auditutil contains shared Kubernetes audit-event parsing helpers.
|
Package auditutil contains shared Kubernetes audit-event parsing helpers. |
|
Package authz holds the ClusterProvider namespace-admission decision.
|
Package authz holds the ClusterProvider namespace-admission decision. |
|
Package controller contains shared constants for all controllers.
|
Package controller contains shared constants for all controllers. |
|
Package git provides Git repository operations and abstractions for the GitOps Reverser controller.
|
Package git provides Git repository operations and abstractions for the GitOps Reverser controller. |
|
manifestedit
Package manifestedit is an isolated proof of concept for the manifest-inventory "file-agnostic placement" feature.
|
Package manifestedit is an isolated proof of concept for the manifest-inventory "file-agnostic placement" feature. |
|
Package giteaclient is a small, focused Gitea REST client used by e2e tests and debug tools.
|
Package giteaclient is a small, focused Gitea REST client used by e2e tests and debug tools. |
|
Package kubeconfig resolves and safety-checks a source-cluster kubeconfig held in a Secret, shared by the watch data plane's SourceClusterResolver and the GitTarget controller's Validated gate so both apply exactly one contract: Flux's value→value.yaml key order, and a REJECT — not Flux's silent strip — of exec auth providers and insecure-skip-tls-verify.
|
Package kubeconfig resolves and safety-checks a source-cluster kubeconfig held in a Secret, shared by the watch data plane's SourceClusterResolver and the GitTarget controller's Validated gate so both apply exactly one contract: Flux's value→value.yaml key order, and a REJECT — not Flux's silent strip — of exec auth providers and insecure-skip-tls-verify. |
|
Package manifestanalyzer is a runtime-independent analyzer for a folder of Kubernetes manifests.
|
Package manifestanalyzer is a runtime-independent analyzer for a folder of Kubernetes manifests. |
|
Package manifestreport is the integration layer that drives the cluster-free manifestedit library against a real repository and cluster state.
|
Package manifestreport is the integration layer that drives the cluster-free manifestedit library against a real repository and cluster state. |
|
Package mutationlab holds the mutation-capture lab: a small, separate application that records the exact structures Kubernetes exposes through native watches, audit webhooks, and validating admission webhooks, and commits those structures as a versioned corpus.
|
Package mutationlab holds the mutation-capture lab: a small, separate application that records the exact structures Kubernetes exposes through native watches, audit webhooks, and validating admission webhooks, and commits those structures as a versioned corpus. |
|
corpus
Package corpus turns captured records into the browsable golden tree: one directory per scenario, one file per emitted moment, named so an ordered fan-out is self-describing (watch.deleted.cm-a.yaml, ...).
|
Package corpus turns captured records into the browsable golden tree: one directory per scenario, one file per emitted moment, named so an ordered fan-out is self-describing (watch.deleted.cm-a.yaml, ...). |
|
labserver
Package labserver assembles the lab's HTTP surface: the read/clear records API and the health endpoint.
|
Package labserver assembles the lab's HTTP surface: the read/clear records API and the health endpoint. |
|
normalize
Package normalize rewrites the volatile fields of captured Kubernetes payloads to stable, relational placeholders so the lab corpus changes only when behavior changes — never when a run merely produces fresh UIDs, resource versions, or timestamps.
|
Package normalize rewrites the volatile fields of captured Kubernetes payloads to stable, relational placeholders so the lab corpus changes only when behavior changes — never when a run merely produces fresh UIDs, resource versions, or timestamps. |
|
recorder
Package recorder turns live Kubernetes observations — audit webhook posts, admission reviews, and native watch events — into mutationlab.Record values in the store.
|
Package recorder turns live Kubernetes observations — audit webhook posts, admission reviews, and native watch events — into mutationlab.Record values in the store. |
|
store
Package store is the lab's in-memory record store.
|
Package store is the lab's in-memory record store. |
|
Package rulestore manages the in-memory cache of compiled WatchRule configurations.
|
Package rulestore manages the in-memory cache of compiled WatchRule configurations. |
|
Package sanitize removes server-generated fields from Kubernetes objects.
|
Package sanitize removes server-generated fields from Kubernetes objects. |
|
Package ssh provides SSH authentication utilities for Git operations.
|
Package ssh provides SSH authentication utilities for Git operations. |
|
Package telemetry provides the OpenTelemetry-based metrics exporter for GitOps Reverser.
|
Package telemetry provides the OpenTelemetry-based metrics exporter for GitOps Reverser. |
|
Package types provides common type definitions used across the GitOps Reverser.
|
Package types provides common type definitions used across the GitOps Reverser. |
|
Package typeset is GitOps Reverser's single decision surface for "is this resource type followable, and if not, what is the one reason it is not?".
|
Package typeset is GitOps Reverser's single decision surface for "is this resource type followable, and if not, what is the one reason it is not?". |
|
Package watch drives the api-source-of-truth reconcile: it keeps the followability registry and the demand-driven materialization axis fresh, fills per-type checkpoints, and reconciles each watched type into Git by SPLICING the per-type Redis materialization (checkpoint + audit log) into a desired set — no long-lived object watch is held (R3).
|
Package watch drives the api-source-of-truth reconcile: it keeps the followability registry and the demand-driven materialization axis fresh, fills per-type checkpoints, and reconciles each watched type into Git by SPLICING the per-type Redis materialization (checkpoint + audit log) into a desired set — no long-lived object watch is held (R3). |
|
Package yamlstyle owns the one YAML serialization style this product writes to Git.
|
Package yamlstyle owns the one YAML serialization style this product writes to Git. |
Click to show internal directories.
Click to hide internal directories.