opa_auditor

Documentation

Index

• Constants
• type AuditResultsCache
  • func NewAuditResultsCache() *AuditResultsCache
  • func (c *AuditResultsCache) Get(constraintId string, resourceId string) (agent.AuditResultStatus, bool)
  • func (c *AuditResultsCache) Put(constraintId string, resourceId string, status agent.AuditResultStatus)
  • func (c *AuditResultsCache) RemoveConstraint(constraintId string)
  • func (c *AuditResultsCache) RemoveResource(resourceId string)
• type Constraint
• type OpaAuditor
  • func New(entitiesWatcher entities.EntitiesWatcherSource) *OpaAuditor
  • func (a *OpaAuditor) Audit(resource *unstructured.Unstructured, constraintIds []string, ...) ([]*agent.AuditResult, []error)
  • func (a *OpaAuditor) CheckResourceStatusWithConstraint(constraintId string, resource *unstructured.Unstructured, ...) bool
  • func (a *OpaAuditor) GetConstraintsSize() int
  • func (a *OpaAuditor) RemoveConstraint(id string)
  • func (a *OpaAuditor) RemoveResource(resource *unstructured.Unstructured)
  • func (a *OpaAuditor) UpdateCache(results []*agent.AuditResult)
  • func (a *OpaAuditor) UpdateConstraint(constraint *agent.Constraint) (bool, error)
  • func (a *OpaAuditor) UpdateConstraints(constraints []*agent.Constraint) ([]string, map[string]error)
• type Template

Constants

const (
	PolicyQuery = "violation"
)

Types

type AuditResultsCache

type AuditResultsCache struct {
	// contains filtered or unexported fields
}

func NewAuditResultsCache

func NewAuditResultsCache() *AuditResultsCache

func (*AuditResultsCache) Get

func (c *AuditResultsCache) Get(constraintId string, resourceId string) (agent.AuditResultStatus, bool)

func (*AuditResultsCache) Put

func (c *AuditResultsCache) Put(constraintId string, resourceId string, status agent.AuditResultStatus)

func (*AuditResultsCache) RemoveConstraint

func (c *AuditResultsCache) RemoveConstraint(constraintId string)

func (*AuditResultsCache) RemoveResource

func (c *AuditResultsCache) RemoveResource(resourceId string)

type Constraint

type Constraint struct {
	Id         string
	TemplateId string

	Name       string
	Parameters map[string]interface{}
	Match      agent.Match

	UpdatedAt  time.Time
	CategoryId string
	Severity   string
	Controls   []string
	Standards  []string
}

type OpaAuditor

type OpaAuditor struct {
	// contains filtered or unexported fields
}

func New

func New(entitiesWatcher entities.EntitiesWatcherSource) *OpaAuditor

func (*OpaAuditor) Audit

func (a *OpaAuditor) Audit(resource *unstructured.Unstructured, constraintIds []string, triggerType string) ([]*agent.AuditResult, []error)

evaluate constraint, construct recommendation obj

func (*OpaAuditor) CheckResourceStatusWithConstraint

func (a *OpaAuditor) CheckResourceStatusWithConstraint(constraintId string, resource *unstructured.Unstructured, currentStatus agent.AuditResultStatus) bool

func (*OpaAuditor) GetConstraintsSize

func (a *OpaAuditor) GetConstraintsSize() int

func (*OpaAuditor) RemoveConstraint

func (a *OpaAuditor) RemoveConstraint(id string)

func (*OpaAuditor) RemoveResource

func (a *OpaAuditor) RemoveResource(resource *unstructured.Unstructured)

func (*OpaAuditor) UpdateCache

func (a *OpaAuditor) UpdateCache(results []*agent.AuditResult)

func (*OpaAuditor) UpdateConstraint

func (a *OpaAuditor) UpdateConstraint(constraint *agent.Constraint) (bool, error)

func (*OpaAuditor) UpdateConstraints

func (a *OpaAuditor) UpdateConstraints(constraints []*agent.Constraint) ([]string, map[string]error)

type Template

type Template struct {
	Id          string
	Name        string
	Policy      opa.Policy
	Description string
	HowToSolve  string
	UsageCount  int
}