probe

package
v1.2.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 26, 2024 License: Apache-2.0 Imports: 31 Imported by: 1

Documentation

Overview

Package probe helps check compatibility of KubeArmor in a given environment

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func PrintProbeResult

func PrintProbeResult(c *k8s.Client, o Options) error

PrintProbeResult prints the result for the host and k8s probing kArmor does to check compatibility with KubeArmor

Types

type KubeArmorPodSpec added in v0.13.9

type KubeArmorPodSpec struct {
	Running       string `json:"running"`
	Image_Version string `json:"image_version"`
}

KubeArmorPodSpec structure definition

type KubeArmorProbeData added in v0.9.0

type KubeArmorProbeData struct {
	OSImage                 string
	KernelVersion           string
	KubeletVersion          string
	ContainerRuntime        string
	ActiveLSM               string
	KernelHeaderPresent     bool
	HostSecurity            bool
	ContainerSecurity       bool
	ContainerDefaultPosture tp.DefaultPosture
	HostDefaultPosture      tp.DefaultPosture
	HostVisibility          string
}

KubeArmorProbeData structure definition

func ProbeRunningKubeArmorNodes added in v0.13.4

func ProbeRunningKubeArmorNodes(c *k8s.Client, o Options) ([]KubeArmorProbeData, map[string]KubeArmorProbeData, error)

ProbeRunningKubeArmorNodes extracts data from running KubeArmor daemonset by executing into the container and reading /tmp/kubearmor.cfg

type NamespaceData added in v0.13.9

type NamespaceData struct {
	NsPostureString    string            `json:"-"`
	NsVisibilityString string            `json:"-"`
	NsDefaultPosture   tp.DefaultPosture `json:"default_posture"`
	NsVisibility       Visibility        `json:"visibility"`
	NsPodList          []PodInfo         `json:"pod_list"`
}

NamespaceData structure definition

type Options

type Options struct {
	Namespace string
	Full      bool
	Output    string
	GRPC      string
}

Options provides probe daemonset options install

type PodInfo added in v0.13.9

type PodInfo struct {
	PodName string `json:"pod_name"`
	Policy  string `json:"policy"`
}

PodInfo structure definition

type Status added in v0.13.9

type Status struct {
	Desired   string `json:"desired"`
	Ready     string `json:"ready"`
	Available string `json:"available"`
}

Status data

type Visibility added in v0.13.9

type Visibility struct {
	File         bool `json:"file"`
	Capabilities bool `json:"capabilities"`
	Process      bool `json:"process"`
	Network      bool `json:"network"`
}

Visibility data structure definition

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL