audit

Documentation

Index

• func AddToManager(m manager.Manager, opa *constraintclient.Client, ...) error
• type CacheLister
  • func NewAuditCacheLister(auditCache client.Reader, watched *watch.Set) *CacheLister
  • func (l *CacheLister) ListObjects(ctx context.Context) ([]unstructured.Unstructured, error)
• type Manager
  • func New(mgr manager.Manager, opa *constraintclient.Client, ...) (*Manager, error)
  • func (am *Manager) Start(ctx context.Context) error
• type Result
  • func ToResults(obj *unstructured.Unstructured, resp *types.Responses) []Result
• type StatusViolation

Functions

func AddToManager

func AddToManager(m manager.Manager, opa *constraintclient.Client, processExcluder *process.Excluder, cacheLister *CacheLister) error

AddToManager adds audit manager to the Manager.

Types

type CacheLister

type CacheLister struct {
	// contains filtered or unexported fields
}

CacheLister lists objects from the audit controller's cache.

func NewAuditCacheLister

func NewAuditCacheLister(auditCache client.Reader, watched *watch.Set) *CacheLister

NewAuditCacheLister instantiates a new AuditCache which will read objects in watched from auditCache.

func (*CacheLister) ListObjects

func (l *CacheLister) ListObjects(ctx context.Context) ([]unstructured.Unstructured, error)

ListObjects lists all objects from the audit cache.

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager allows us to audit resources periodically.

func New

func New(mgr manager.Manager, opa *constraintclient.Client, processExcluder *process.Excluder, cacheLister *CacheLister) (*Manager, error)

New creates a new manager for audit.

func (*Manager) Start

func (am *Manager) Start(ctx context.Context) error

Start implements controller.Controller.

type Result

type Result struct {
	*types.Result
	// contains filtered or unexported fields
}

func ToResults

func ToResults(obj *unstructured.Unstructured, resp *types.Responses) []Result

type StatusViolation

type StatusViolation struct {
	Kind              string `json:"kind"`
	Name              string `json:"name"`
	Namespace         string `json:"namespace,omitempty"`
	Message           string `json:"message"`
	EnforcementAction string `json:"enforcementAction"`
}

StatusViolation represents each violation under status.