Documentation ¶
Index ¶
- Constants
- type Plugin
- func (p *Plugin) ConvertLogEntry(logEntry *logging.LogEntry, auditLog *audit.AuditLog) (*auditv1.Event, error)
- func (p *Plugin) Info() *plugins.Info
- func (p *Plugin) Init(cfg string) error
- func (p *Plugin) InitSchema() *sdk.SchemaInfo
- func (p *Plugin) NewContainerService(ctx context.Context) (*container.Service, error)
- func (p *Plugin) Open(params string) (source.Instance, error)
- func (k *Plugin) OpenReader(r string) (source.Instance, error)
- func (p *Plugin) String(evt sdk.EventReader) (string, error)
- type PluginConfig
Constants ¶
View Source
const ( PluginID uint32 = 16 PluginName = "k8saudit-gke" PluginDescription = "Read Kubernetes Audit Events for GKE from a Pub/Sub subscription" PluginContact = "github.com/falcosecurity/plugins" PluginVersion = "0.3.0" PluginEventSource = "k8s_audit" )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Plugin ¶
type Plugin struct { k8saudit.Plugin Config PluginConfig // contains filtered or unexported fields }
func (*Plugin) ConvertLogEntry ¶ added in v0.2.0
func (p *Plugin) ConvertLogEntry(logEntry *logging.LogEntry, auditLog *audit.AuditLog) (*auditv1.Event, error)
ConvertLogEntry converts a logging.LogEntry and an audit.AuditLog into an auditv1.Event.
Parameters:
- logEntry: A pointer to a logging.LogEntry representing the log entry to convert.
- auditLog: A pointer to an audit.AuditLog representing the audit log to convert.
Returns:
- *auditv1.Event: The generated k8s audit event.
- error: An error if the conversion fails.
Note: This function is exposed for internal use and may lack formal documentation or signature guarantees. Use it with caution and at your own risk.
func (*Plugin) InitSchema ¶
func (p *Plugin) InitSchema() *sdk.SchemaInfo
func (*Plugin) NewContainerService ¶
type PluginConfig ¶
type PluginConfig struct { ProjectID string `` /* 137-byte string literal not displayed */ CredentialsFile string `` /* 279-byte string literal not displayed */ NumGoroutines int `` /* 192-byte string literal not displayed */ MaxOutstandingMessages int `` /* 166-byte string literal not displayed */ FetchClusterMetadata bool `json:"fetch_cluster_metadata" jsonschema:"title=Fetch cluster metadata labels,description=(Default: false),default=false"` CacheExpiration uint64 `` /* 134-byte string literal not displayed */ UseAsync bool `` /* 166-byte string literal not displayed */ MaxEventSize uint64 `` /* 149-byte string literal not displayed */ }
func (*PluginConfig) Reset ¶
func (p *PluginConfig) Reset()
Reset sets the configuration to its default values
Click to show internal directories.
Click to hide internal directories.