netpols

Documentation

Index

• Constants
• type DefaultDenyNetworkPolicies
  • func New() *DefaultDenyNetworkPolicies
  • func (a *DefaultDenyNetworkPolicies) Audit(resource k8stypes.Resource, resources []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// MissingDefaultDenyIngressAndEgressNetworkPolicy occurs when there is no default deny network policy for
	// ingress and egress traffic
	MissingDefaultDenyIngressAndEgressNetworkPolicy = "MissingDefaultDenyIngressAndEgressNetworkPolicy"
	// MissingDefaultDenyIngressNetworkPolicy occurs when there is no default deny network policy for
	// ingress traffic
	MissingDefaultDenyIngressNetworkPolicy = "MissingDefaultDenyIngressNetworkPolicy"
	// MissingDefaultDenyEgressNetworkPolicy occurs when there is no default deny network policy for
	// egress traffic
	MissingDefaultDenyEgressNetworkPolicy = "MissingDefaultDenyEgressNetworkPolicy"
	// AllowAllIngressNetworkPolicyExists occurs when there is a network policy which allows all ingress traffic
	AllowAllIngressNetworkPolicyExists = "AllowAllIngressNetworkPolicyExists"
	// AllowAllEgressNetworkPolicyExists occurs when there is a network policy which allows all egress traffic
	AllowAllEgressNetworkPolicyExists = "AllowAllEgressNetworkPolicyExists"
)

const (
	IngressOverrideLabel = "allow-non-default-deny-ingress-network-policy"
	EgressOverrideLabel  = "allow-non-default-deny-egress-network-policy"
	Ingress              = "Ingress"
	Egress               = "Egress"
)

const AllNamespaces = ""

const DefaultDenyNetworkPolicyName = "default-deny"

const Name = "netpols"

Types

type DefaultDenyNetworkPolicies

type DefaultDenyNetworkPolicies struct{}

DefaultDenyNetworkPolicies implements Auditable

func New

func New() *DefaultDenyNetworkPolicies

func (*DefaultDenyNetworkPolicies) Audit

func (a *DefaultDenyNetworkPolicies) Audit(resource k8stypes.Resource, resources []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that each namespace resource has a default deny NetworkPolicy for all ingress and egress traffic