process

package

v0.8.20 Latest Latest Go to latest Published: Mar 14, 2023 License: Apache-2.0 Imports: 32 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/go-faster/tetragon

Links

Open Source Insights

Documentation ¶

Overview ¶

SPDX-License-Identifier: Apache-2.0 Copyright Authors of Tetragon

Index ¶

func AddCloneEvent(event *tetragonAPI.MsgCloneEvent) error
func ArgsDecoder(s string, flags uint32) (string, string)
func FreeCache()
func GetExecID(proc *tetragonAPI.MsgProcess) string
func GetExecIDFromKey(key *tetragonAPI.MsgExecveKey) string
func GetParentProcessInternal(pid uint32, ktime uint64) (*ProcessInternal, *ProcessInternal)
func GetPodInfo(cid, bin, args string, nspid uint32) (*tetragon.Pod, *hubblev1.Endpoint)
func GetProcessEndpoint(p *tetragon.Process) *hubblev1.Endpoint
func GetProcessID(pid uint32, ktime uint64) string
func InitCache(ctx context.Context, w watcher.K8sResourceWatcher, enableCilium bool, size int) error
type Cache
- func NewCache(processCacheSize int) (*Cache, error)
- func (pc *Cache) Add(process *ProcessInternal) bool
- func (pc *Cache) Purge()
type ProcessInternal

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AddCloneEvent ¶

func AddCloneEvent(event *tetragonAPI.MsgCloneEvent) error

AddCloneEvent adds a new process into the cache from a CloneEvent

func ArgsDecoder ¶

func ArgsDecoder(s string, flags uint32) (string, string)

func FreeCache ¶

func FreeCache()

func GetExecID ¶

func GetExecID(proc *tetragonAPI.MsgProcess) string

func GetExecIDFromKey ¶

func GetExecIDFromKey(key *tetragonAPI.MsgExecveKey) string

func GetParentProcessInternal ¶

func GetParentProcessInternal(pid uint32, ktime uint64) (*ProcessInternal, *ProcessInternal)

func GetPodInfo ¶

func GetPodInfo(cid, bin, args string, nspid uint32) (*tetragon.Pod, *hubblev1.Endpoint)

GetPodInfo() constructs and returns the Kubernetes Pod information associated with the Container ID and the PID inside this container.

func GetProcessEndpoint ¶

func GetProcessEndpoint(p *tetragon.Process) *hubblev1.Endpoint

func GetProcessID ¶

func GetProcessID(pid uint32, ktime uint64) string

func InitCache ¶

func InitCache(ctx context.Context, w watcher.K8sResourceWatcher, enableCilium bool, size int) error

Types ¶

type Cache ¶

type Cache struct {
	// contains filtered or unexported fields
}

func NewCache ¶

func NewCache(
	processCacheSize int,
) (*Cache, error)

func (*Cache) Add ¶

func (pc *Cache) Add(process *ProcessInternal) bool

func (*Cache) Purge ¶

func (pc *Cache) Purge()

type ProcessInternal ¶

type ProcessInternal struct {
	// contains filtered or unexported fields
}

ProcessInternal is the internal representation of a process. nolint:revive // This is an acceptable case of "stuttering" since the name "Internal" wouldn't make much sense by itself.

func AddExecEvent ¶

func AddExecEvent(event *tetragonAPI.MsgExecveEventUnix) *ProcessInternal

AddExecEvent constructs a new ProcessInternal structure from an Execve event, adds it to the cache, and also returns it

func Get ¶

func Get(execId string) (*ProcessInternal, error)

func GetProcess ¶

func GetProcess(
	process tetragonAPI.MsgProcess,
	containerID string,
	parent tetragonAPI.MsgExecveKey,
	capabilities tetragonAPI.MsgCapabilities,
	namespaces tetragonAPI.MsgNamespaces,
) (*ProcessInternal, *hubblev1.Endpoint)

func (*ProcessInternal) AddPodInfo ¶

func (pi *ProcessInternal) AddPodInfo(pod *tetragon.Pod)

func (*ProcessInternal) AnnotateProcess ¶

func (pi *ProcessInternal) AnnotateProcess(cred, ns bool) error

func (*ProcessInternal) GetProcess ¶

func (pi *ProcessInternal) GetProcess() *tetragon.Process

func (*ProcessInternal) GetProcessCopy ¶

func (pi *ProcessInternal) GetProcessCopy() *tetragon.Process

func (*ProcessInternal) GetProcessInternalCopy ¶

func (pi *ProcessInternal) GetProcessInternalCopy() *ProcessInternal

func (*ProcessInternal) PutProcess ¶

func (pi *ProcessInternal) PutProcess()

func (*ProcessInternal) RefDec ¶

func (pi *ProcessInternal) RefDec()

func (*ProcessInternal) RefGet ¶

func (pi *ProcessInternal) RefGet() uint32

func (*ProcessInternal) RefInc ¶

func (pi *ProcessInternal) RefInc()

func (*ProcessInternal) UnsafeGetProcess ¶

func (pi *ProcessInternal) UnsafeGetProcess() *tetragon.Process

func (*ProcessInternal) UnsafeGetProcessCap ¶

func (pi *ProcessInternal) UnsafeGetProcessCap() *tetragon.Capabilities

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL