sync

Documentation

Index

• type Client
  • func NewClient(ctx context.Context, log logr.Logger, kubeconfig string, dryRun bool, ...) (*Client, error)
  • func (c *Client) Close() error
  • func (c *Client) Sync(ctx context.Context) error
• type Constraint
• type Resource

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client to sync audit violations to Security Command Center

func NewClient

func NewClient(ctx context.Context, log logr.Logger, kubeconfig string, dryRun bool, source, clusterName, googleServiceAccount string) (*Client, error)

NewClient creates a Client that reads audit violations and creates findings. Use defer Client.Close() to clean up.

func (*Client) Close

func (c *Client) Close() error

Close cleans up resources, use with defer

func (*Client) Sync

func (c *Client) Sync(ctx context.Context) error

Sync retrieves Gatekeeper audit constraint violations and creates a finding in Security Command Center for each violation.

type Constraint

type Constraint struct {
	Name             string
	SelfLink         string
	UID              types.UID
	Kind             string
	AuditTime        time.Time
	SpecJSON         string
	TemplateUID      types.UID
	TemplateSelfLink string
	TemplateSpecJSON string
}

Constraint holds the constraint-related values used to create a finding request

type Resource

type Resource struct {
	Name           string
	Namespace      string
	GVK            schema.GroupVersionKind
	SelfLink       string
	UID            types.UID
	ProjectID      string
	StatusSelfLink string
	Message        string
	SpecJSON       string
}

Resource holds the resource-related values used to create a finding request