gcp

Documentation

Overview

Package gcp provides the read-only Google Cloud posture connector.

Index

• type Connector
  • func New(vault ports.CredentialVault, opts Options) (*Connector, error)
  • func (c *Connector) Enumerate(ctx context.Context, scope ports.CloudScope) (cloudposture.Inventory, []cloudposture.CoverageIssue, error)
  • func (c *Connector) Evaluate(_ context.Context, inventory cloudposture.Inventory) ([]cloudposture.PostureFinding, error)
• type Options

Types

type Connector

type Connector struct {
	// contains filtered or unexported fields
}

Connector observes GCP resources using only list operations.

func New

func New(vault ports.CredentialVault, opts Options) (*Connector, error)

New creates a bounded GCP connector.

func (*Connector) Enumerate

func (c *Connector) Enumerate(ctx context.Context, scope ports.CloudScope) (cloudposture.Inventory, []cloudposture.CoverageIssue, error)

Enumerate lists visible GCP projects and their compute, storage, network, and identity resources. Per-category failures are coverage gaps, never clean results.

func (*Connector) Evaluate

func (c *Connector) Evaluate(_ context.Context, inventory cloudposture.Inventory) ([]cloudposture.PostureFinding, error)

Evaluate uses the SDK-neutral posture policy.

type Options

type Options struct {
	Endpoint       string
	HTTPClient     *http.Client
	MaxProjects    int
	MaxFolders     int
	MaxResources   int
	MinRequestWait time.Duration
}

Options bounds remote enumeration. HTTPClient and Endpoint are intended for emulator and httptest use; production uses the credential resolved from Vault.