policies

Documentation

Index

• type Client
  • func NewClient(client client.Client, kubewardenNamespace string, policyServerURL string) (*Client, error)
  • func (f *Client) GetClusterWidePolicies(ctx context.Context) (*Policies, error)
  • func (f *Client) GetPoliciesForANamespace(ctx context.Context, namespace string) (*Policies, error)
• type Policies
• type Policy

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

A client to get Kubewarden policies from the Kubernetes cluster

func NewClient

func NewClient(client client.Client, kubewardenNamespace string, policyServerURL string) (*Client, error)

NewClient returns a policy Client

func (*Client) GetClusterWidePolicies

func (f *Client) GetClusterWidePolicies(ctx context.Context) (*Policies, error)

GetClusterWidePolicies returns all the auditable cluster-wide policies

func (*Client) GetPoliciesForANamespace

func (f *Client) GetPoliciesForANamespace(ctx context.Context, namespace string) (*Policies, error)

GetPoliciesForANamespace gets all the auditable policies for a given namespace

type Policies

type Policies struct {
	// PoliciesByGVR a map of policies grouped by GVR
	PoliciesByGVR map[schema.GroupVersionResource][]*Policy
	// PolicyNum represents the number of policies
	PolicyNum int
	// SkippedNum represents the number of skipped policies that don't match audit constraints
	SkippedNum int
	// ErroredNum represents the number of errored policies. These policies may be misconfigured
	ErroredNum int
}

Policies represents a collection of auditable policies

type Policy

type Policy struct {
	policiesv1.Policy
	PolicyServer *url.URL
}

Policy represents a policy and the URL of the policy server where it is running