exporters

type AlertManagerExporter struct {
	Host     string
	NodeName string
	// contains filtered or unexported fields
}

type CsvExporter struct {
	CsvRulePath    string
	CsvMalwarePath string
}

type Exporter interface {
	// SendRuleAlert sends an alert on failed rule to the exporter
	SendRuleAlert(failedRule rule.RuleFailure)
	// SendMalwareAlert sends an alert on malware detection to the exporter.
	SendMalwareAlert(scan.MalwareDescription)
}

type ExporterBus struct {
	// contains filtered or unexported fields
}

type ExportersConfig struct {
	StdoutExporter           *bool               `yaml:"stdoutExporter"`
	AlertManagerExporterUrls string              `yaml:"alertManagerExporterUrls"`
	SyslogExporter           string              `yaml:"syslogExporterURL"`
	CsvRuleExporterPath      string              `yaml:"CsvRuleExporterPath"`
	CsvMalwareExporterPath   string              `yaml:"CsvMalwareExporterPath"`
	HTTPExporterConfig       *HTTPExporterConfig `yaml:"httpExporterConfig"`
}

type HTTPAlert struct {
	RuleAlert     `json:",inline"`
	MalwareAlert  `json:",inline"`
	RuleName      string `json:"ruleName"`
	Message       string `json:"message"`
	ContainerID   string `json:"containerID,omitempty"`
	ContainerName string `json:"containerName,omitempty"`
	PodNamespace  string `json:"podNamespace,omitempty"`
	PodName       string `json:"podName,omitempty"`
	HostName      string `json:"hostName"`
	NodeName      string `json:"nodeName"`
}

type HTTPAlertsList struct {
	Kind       string             `json:"kind"`
	ApiVersion string             `json:"apiVersion"`
	Spec       HTTPAlertsListSpec `json:"spec"`
}

type HTTPAlertsListSpec struct {
	Alerts []HTTPAlert `json:"alerts"`
}

type HTTPExporter struct {
	Host     string
	NodeName string
	// contains filtered or unexported fields
}

type HTTPExporterConfig struct {
	// URL is the URL to send the HTTP request to
	URL string `json:"url"`
	// Headers is a map of headers to send in the HTTP request
	Headers map[string]string `json:"headers"`
	// Timeout is the timeout for the HTTP request
	TimeoutSeconds int `json:"timeoutSeconds"`
	// Method is the HTTP method to use for the HTTP request
	Method             string `json:"method"`
	MaxAlertsPerMinute int    `json:"maxAlertsPerMinute"`
}

type MalwareAlert struct {
	MalwareName        string `json:"malwareName,omitempty"`
	MalwareDescription string `json:"malwareDescription,omitempty"`
	// Path to the file that was infected
	Path string `json:"path,omitempty"`
	// Hash of the file that was infected
	Hash string `json:"hash,omitempty"`
	// Size of the file that was infected
	Size string `json:"size,omitempty"`
	// Is part of the image
	IsPartOfImage bool `json:"isPartOfImage,omitempty"`
	// K8s resource that was infected
	Resource schema.GroupVersionResource `json:"resource,omitempty"`
	// K8s container image that was infected
	ContainerImage string `json:"containerImage,omitempty"`
}

type RuleAlert struct {
	Severity       int    `json:"severity,omitempty"`    // PriorityToStatus(failedRule.Priority()),
	ProcessName    string `json:"processName,omitempty"` // failedRule.Event().Comm,
	FixSuggestions string `json:"fixSuggestions,omitempty"`
	PID            uint32 `json:"pid,omitempty"`
	PPID           uint32 `json:"ppid,omitempty"` //  Parent Process ID
	UID            uint32 `json:"uid,omitempty"`  // User ID of the process
	GID            uint32 `json:"gid,omitempty"`  // Group ID of the process
}

type StdoutExporter struct {
	// contains filtered or unexported fields
}

type SyslogExporter struct {
	// contains filtered or unexported fields
}