cmd

package

v0.2.0 Latest Latest Go to latest Published: Nov 6, 2017 License: MIT Imports: 27 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/luna-duclos/kubeaudit

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func Execute()
type Capability
type Container
type DaemonSet
type DaemonSetList
type DebugHook
- func NewDebugHook() *DebugHook
- func (hook *DebugHook) Fire(entry *logrus.Entry) error
- func (hook *DebugHook) Levels() []logrus.Level
type Deployment
type DeploymentList
type Items
type ListOptions
type NamespaceList
type NetworkPolicy
type NetworkPolicyList
type Occurrence
type Pod
type PodList
type ReplicationController
type ReplicationControllerList
type Result
- func ServiceAccountIter(t interface{}) (result *Result)
- func (res Result) Print()
type StatefulSet
type StatefulSetList

Constants ¶

View Source

const (
	KubeauditInternalError
	ErrorAllowPrivilegeEscalationNIL
	ErrorAllowPrivilegeEscalationTrue
	ErrorCapabilitiesAdded
	ErrorCapabilitiesNIL
	ErrorCapabilitiesNoneDropped
	ErrorCapabilitiesSomeDropped
	ErrorImageTagIncorrect
	ErrorImageTagMissing
	ErrorPrivilegedNIL
	ErrorPrivilegedTrue
	ErrorReadOnlyRootFilesystemFalse
	ErrorReadOnlyRootFilesystemNIL
	ErrorRunAsNonRootFalse
	ErrorRunAsNonRootNIL
	ErrorSecurityContextNIL
	ErrorServiceAccountTokenDeprecated
	ErrorServiceAccountTokenNIL
	ErrorServiceAccountTokenNILAndNoName
	ErrorServiceAccountTokenNoName
	ErrorServiceAccountTokenTrueAndNoName
	InfoImageCorrect
)

View Source

const (
	Error
	Warn
	Info
	Debug
)

View Source

const Version = "0.1.0"

Variables ¶

View Source

var KubeauditLogLevel = Info

View Source

var KubeauditLogLevels = map[string]int{"ERROR": Error, "WARN": Warn, "INFO": Info, "DEBUG": Debug}

View Source

var RootCmd = &cobra.Command{
	Use:   "kubeaudit",
	Short: "A Kubernetes security auditor",
	Long: `kubeaudit is a program that will help you audit
your Kubernetes clusters. Specify -l to run kubeaudit using ~/.kube/config
otherwise it will attempt to create an in-cluster client.

#patcheswelcome`,
}

Functions ¶

func Execute ¶

func Execute()

Types ¶

type Capability ¶ added in v0.2.0

type Capability = apiv1.Capability

type Container ¶ added in v0.2.0

type Container = apiv1.Container

type DaemonSet ¶ added in v0.2.0

type DaemonSet = extensionsv1beta1.DaemonSet

type DaemonSetList ¶ added in v0.2.0

type DaemonSetList = extensionsv1beta1.DaemonSetList

type DebugHook ¶

type DebugHook struct{}

func NewDebugHook ¶

func NewDebugHook() *DebugHook

func (*DebugHook) Fire ¶

func (hook *DebugHook) Fire(entry *logrus.Entry) error

func (*DebugHook) Levels ¶

func (hook *DebugHook) Levels() []logrus.Level

type Deployment ¶ added in v0.2.0

type Deployment = v1beta1.Deployment

type DeploymentList ¶ added in v0.2.0

type DeploymentList = v1beta1.DeploymentList

type Items ¶

type Items interface {
	Iter() []interface{}
}

type ListOptions ¶ added in v0.2.0

type ListOptions = metav1.ListOptions

type NamespaceList ¶ added in v0.2.0

type NamespaceList = apiv1.NamespaceList

type NetworkPolicy ¶ added in v0.2.0

type NetworkPolicy = networking.NetworkPolicy

type NetworkPolicyList ¶ added in v0.2.0

type NetworkPolicyList = networking.NetworkPolicyList

type Occurrence ¶ added in v0.2.0

type Occurrence struct {
	// contains filtered or unexported fields
}

type Pod ¶ added in v0.2.0

type Pod = apiv1.Pod

type PodList ¶ added in v0.2.0

type PodList = apiv1.PodList

type ReplicationController ¶ added in v0.2.0

type ReplicationController = apiv1.ReplicationController

type ReplicationControllerList ¶ added in v0.2.0

type ReplicationControllerList = apiv1.ReplicationControllerList

type Result ¶

type Result struct {
	Err            int
	Occurrences    []Occurrence
	Namespace      string
	Name           string
	CapsAdded      []Capability
	ImageName      string
	CapsDropped    []Capability
	CapsNotDropped []Capability
	KubeType       string
	DSA            string
	SA             string
	Token          *bool
	ImageTag       string
}

func ServiceAccountIter ¶

func ServiceAccountIter(t interface{}) (result *Result)

func (Result) Print ¶ added in v0.2.0

func (res Result) Print()

type StatefulSet ¶ added in v0.2.0

type StatefulSet = v1beta1.StatefulSet

type StatefulSetList ¶ added in v0.2.0

type StatefulSetList = v1beta1.StatefulSetList

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Documentation ¶

Index ¶

Constants ¶

Variables ¶

Functions ¶

func Execute ¶

Types ¶

type Capability ¶ added in v0.2.0

type Container ¶ added in v0.2.0

type DaemonSet ¶ added in v0.2.0

type DaemonSetList ¶ added in v0.2.0

type DebugHook ¶

func NewDebugHook ¶

func (*DebugHook) Fire ¶

func (*DebugHook) Levels ¶

type Deployment ¶ added in v0.2.0

type DeploymentList ¶ added in v0.2.0

type Items ¶

type ListOptions ¶ added in v0.2.0

type NamespaceList ¶ added in v0.2.0

type NetworkPolicy ¶ added in v0.2.0

type NetworkPolicyList ¶ added in v0.2.0

type Occurrence ¶ added in v0.2.0

type Pod ¶ added in v0.2.0

type PodList ¶ added in v0.2.0

type ReplicationController ¶ added in v0.2.0

type ReplicationControllerList ¶ added in v0.2.0

type Result ¶

func ServiceAccountIter ¶

func (Result) Print ¶ added in v0.2.0

type StatefulSet ¶ added in v0.2.0

type StatefulSetList ¶ added in v0.2.0

Source Files ¶