resources

Documentation

Index

• func BuildClusterResourceProtectionProfileCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildClusterRoleBindingForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRoleBinding
• func BuildClusterRoleBindingForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRoleBinding
• func BuildClusterRoleForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRole
• func BuildClusterRoleForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRole
• func BuildDefaultClusterResourceProtectionProfileForIE(cr *researchv1alpha1.IntegrityEnforcer) *crpp.ClusterResourceProtectionProfile
• func BuildDefaultResourceProtectionProfileForIE(cr *researchv1alpha1.IntegrityEnforcer) *rpp.ResourceProtectionProfile
• func BuildDeploymentForCR(cr *researchv1alpha1.IntegrityEnforcer) *appsv1.Deployment
• func BuildEnforcerConfigCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildEnforcerConfigForIE(cr *researchv1alpha1.IntegrityEnforcer) *ec.EnforcerConfig
• func BuildHelmReleaseMetadataCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildKeyringSecretForIEFromValue(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret
• func BuildMutatingWebhookConfigurationForIE(cr *researchv1alpha1.IntegrityEnforcer) *admv1.MutatingWebhookConfiguration
• func BuildPodSecurityPolicy(cr *researchv1alpha1.IntegrityEnforcer) *policyv1.PodSecurityPolicy
• func BuildRegKeySecretForCR(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret
• func BuildResourceProtectionProfileCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildResourceSignatureCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildRoleBindingForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.RoleBinding
• func BuildRoleBindingForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.RoleBinding
• func BuildRoleForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.Role
• func BuildRoleForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.Role
• func BuildSecurityContextConstraints(cr *researchv1alpha1.IntegrityEnforcer) *scc.SecurityContextConstraints
• func BuildServiceAccountForIE(cr *researchv1alpha1.IntegrityEnforcer) *corev1.ServiceAccount
• func BuildServiceForCR(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Service
• func BuildSignEnforcePolicyForIE(cr *researchv1alpha1.IntegrityEnforcer) *iespol.SignPolicy
• func BuildSignPolicyCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition
• func BuildTlsSecretForIE(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret
• func EmptyDirVolume(name string) v1.Volume
• func EqualAnnotations(found map[string]string, expected map[string]string) bool
• func EqualContainers(expected v1.Container, found v1.Container) bool
• func EqualDeployments(expected *appsv1.Deployment, found *appsv1.Deployment) bool
• func EqualLabels(found map[string]string, expected map[string]string) bool
• func EqualPods(expected v1.PodTemplateSpec, found v1.PodTemplateSpec) bool
• func SecretVolume(name, secretName string) v1.Volume

Functions

func BuildClusterResourceProtectionProfileCRD

func BuildClusterResourceProtectionProfileCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

clusterresourceprotectionprofile crd

func BuildClusterRoleBindingForIE

func BuildClusterRoleBindingForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRoleBinding

cluster role-binding

func BuildClusterRoleBindingForIEAdmin

func BuildClusterRoleBindingForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRoleBinding

role-binding

func BuildClusterRoleForIE

func BuildClusterRoleForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRole

cluster role

func BuildClusterRoleForIEAdmin

func BuildClusterRoleForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.ClusterRole

role

func BuildDefaultClusterResourceProtectionProfileForIE

func BuildDefaultClusterResourceProtectionProfileForIE(cr *researchv1alpha1.IntegrityEnforcer) *crpp.ClusterResourceProtectionProfile

default crpp

func BuildDefaultResourceProtectionProfileForIE

func BuildDefaultResourceProtectionProfileForIE(cr *researchv1alpha1.IntegrityEnforcer) *rpp.ResourceProtectionProfile

default rpp

func BuildDeploymentForCR

func BuildDeploymentForCR(cr *researchv1alpha1.IntegrityEnforcer) *appsv1.Deployment

deployment

func BuildEnforcerConfigCRD

func BuildEnforcerConfigCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

enforcer config crd

func BuildEnforcerConfigForIE

func BuildEnforcerConfigForIE(cr *researchv1alpha1.IntegrityEnforcer) *ec.EnforcerConfig

enforcer config cr

func BuildHelmReleaseMetadataCRD

func BuildHelmReleaseMetadataCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

helm release metadata crd

func BuildKeyringSecretForIEFromValue

func BuildKeyringSecretForIEFromValue(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret

//server-secret.yaml

func BuildMutatingWebhookConfigurationForIE

func BuildMutatingWebhookConfigurationForIE(cr *researchv1alpha1.IntegrityEnforcer) *admv1.MutatingWebhookConfiguration

webhook configuration

func BuildPodSecurityPolicy

func BuildPodSecurityPolicy(cr *researchv1alpha1.IntegrityEnforcer) *policyv1.PodSecurityPolicy

pod security policy

func BuildRegKeySecretForCR

func BuildRegKeySecretForCR(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret

regkey.yaml

func BuildResourceProtectionProfileCRD

func BuildResourceProtectionProfileCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

resourceprotectionprofile crd

func BuildResourceSignatureCRD

func BuildResourceSignatureCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

resource signature crd

func BuildRoleBindingForIE

func BuildRoleBindingForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.RoleBinding

role-binding

func BuildRoleBindingForIEAdmin

func BuildRoleBindingForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.RoleBinding

role-binding

func BuildRoleForIE

func BuildRoleForIE(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.Role

role

func BuildRoleForIEAdmin

func BuildRoleForIEAdmin(cr *researchv1alpha1.IntegrityEnforcer) *rbacv1.Role

role

func BuildSecurityContextConstraints

func BuildSecurityContextConstraints(cr *researchv1alpha1.IntegrityEnforcer) *scc.SecurityContextConstraints

scc

func BuildServiceAccountForIE

func BuildServiceAccountForIE(cr *researchv1alpha1.IntegrityEnforcer) *corev1.ServiceAccount

sa

func BuildServiceForCR

func BuildServiceForCR(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Service

service

func BuildSignEnforcePolicyForIE

func BuildSignEnforcePolicyForIE(cr *researchv1alpha1.IntegrityEnforcer) *iespol.SignPolicy

sign enforce policy cr

func BuildSignPolicyCRD

func BuildSignPolicyCRD(cr *researchv1alpha1.IntegrityEnforcer) *extv1.CustomResourceDefinition

sign policy crd

func BuildTlsSecretForIE

func BuildTlsSecretForIE(cr *researchv1alpha1.IntegrityEnforcer) *corev1.Secret

ie-server-tls

func EmptyDirVolume

func EmptyDirVolume(name string) v1.Volume

func EqualAnnotations

func EqualAnnotations(found map[string]string, expected map[string]string) bool

func EqualContainers

func EqualContainers(expected v1.Container, found v1.Container) bool

EqualContainers returns a Boolean

func EqualDeployments

func EqualDeployments(expected *appsv1.Deployment, found *appsv1.Deployment) bool

EqualDeployments returns a Boolean

func EqualLabels

func EqualLabels(found map[string]string, expected map[string]string) bool

func EqualPods

func EqualPods(expected v1.PodTemplateSpec, found v1.PodTemplateSpec) bool

EqualPods returns a Boolean

func SecretVolume

func SecretVolume(name, secretName string) v1.Volume