observer

Documentation

Index

• Constants
• func Contains(pattern []string, value string) bool
• func LoadKeySecret(keySecertNamespace, keySecertName string) (string, error)
• type ConstraintResult
• type ConstraintSpec
• type Kinds
• type MatchCondition
• type ObservationDetailResults
• type Observer
  • func NewObserver() *Observer
  • func (self *Observer) Init() error
  • func (self *Observer) Run()
• type VerifyResultDetail
  • func ObserveResources(resources []unstructured.Unstructured, signatureRef k8smnfconfig.SignatureRef, ...) []VerifyResultDetail

Constants

const VerifyResourceIgnoreLabel = "integrityshield.io/verifyResourceIgnored"

const VerifyResourceViolationLabel = "integrityshield.io/verifyResourceViolation"

Functions

func Contains

func Contains(pattern []string, value string) bool

func LoadKeySecret

func LoadKeySecret(keySecertNamespace, keySecertName string) (string, error)

Types

type ConstraintResult

type ConstraintResult struct {
	ConstraintName  string               `json:"constraintName"`
	Violation       bool                 `json:"violation"`
	TotalViolations int                  `json:"totalViolations"`
	Results         []VerifyResultDetail `json:"results"`
}

type ConstraintSpec

type ConstraintSpec struct {
	Match      MatchCondition               `json:"match,omitempty"`
	Parameters k8smnfconfig.ParameterObject `json:"parameters,omitempty"`
}

type Kinds

type Kinds struct {
	Kinds     []string `json:"kinds,omitempty"`
	ApiGroups []string `json:"apiGroups,omitempty"`
}

type MatchCondition

type MatchCondition struct {
	Kinds              []Kinds               `json:"kinds,omitempty"`
	Namespaces         []string              `json:"namespaces,omitempty"`
	ExcludedNamespaces []string              `json:"excludedNamespaces,omitempty"`
	LabelSelector      *metav1.LabelSelector `json:"labelSelector,omitempty"`
	NamespaceSelector  *metav1.LabelSelector `json:"namespaceSelector,omitempty"`
}

type ObservationDetailResults

type ObservationDetailResults struct {
	ConstraintResults []ConstraintResult `json:"constraintResults"`
}

type Observer

type Observer struct {
	APIResources []groupResource
	// contains filtered or unexported fields
}

func NewObserver

func NewObserver() *Observer

func (*Observer) Init

func (self *Observer) Init() error

func (*Observer) Run

func (self *Observer) Run()

type VerifyResultDetail

type VerifyResultDetail struct {
	Time                 string                            `json:"time"`
	Namespace            string                            `json:"namespace"`
	Name                 string                            `json:"name"`
	Kind                 string                            `json:"kind"`
	ApiGroup             string                            `json:"apiGroup"`
	ApiVersion           string                            `json:"apiVersion"`
	Error                bool                              `json:"error"`
	Message              string                            `json:"message"`
	Violation            bool                              `json:"violation"`
	VerifyResourceResult *k8smanifest.VerifyResourceResult `json:"verifyResourceResult"`
}

Observer Result Detail

func ObserveResources

func ObserveResources(resources []unstructured.Unstructured, signatureRef k8smnfconfig.SignatureRef, ignoreFields k8smanifest.ObjectFieldBindingList, secrets []k8smnfconfig.KeyConfig) []VerifyResultDetail