Documentation ¶
Index ¶
Constants ¶
View Source
const AnnotationKeyDomain = "integrityshield.io"
View Source
const ImageRefAnnotationKeyShield = "integrityshield.io/signature"
View Source
const SignatureResourceLabel = "integrityshield.io/signatureResource"
View Source
const VerifyResourceIgnoredLabel = "integrityshield.io/verifyResourceIgnored"
View Source
const VerifyResourceViolationLabel = "integrityshield.io/verifyResourceViolation"
Variables ¶
View Source
var IgnoredKinds = []string{"Event", "Lease", "Endpoints", "TokenReview", "SubjectAccessReview", "SelfSubjectAccessReview", "LocalSubjectAccessReview"}
Functions ¶
func ObserveImage ¶
func ObserveImage(resource unstructured.Unstructured, profile config.ImageProfile) (bool, string)
Types ¶
type ConstraintResult ¶
type ConstraintResult struct { ConstraintName string `json:"constraintName"` Violation bool `json:"violation"` TotalViolations int `json:"totalViolations"` Results []VerifyResultDetail `json:"results"` Constraint ConstraintSpec `json:"constraint"` }
type ConstraintSpec ¶
type ConstraintSpec struct { Match gkmatch.Match `json:"match,omitempty"` Parameters config.ParameterObject `json:"parameters,omitempty"` }
type ObservationDetailResults ¶
type ObservationDetailResults struct { Time string `json:"time"` ConstraintResults []ConstraintResult `json:"constraintResults"` }
type Observer ¶
type Observer struct { APIResources []groupResource Namespaces []string DynamicClient dynamic.Interface MidClient *midclient.ApisV1Client MisClient *misclient.ApisV1Client Clientset *kubeclient.Clientset IShiledNamespace string }
func NewObserver ¶
func NewObserver() *Observer
type VerifyResultDetail ¶
type VerifyResultDetail struct { Time string `json:"time"` Namespace string `json:"namespace"` Name string `json:"name"` Kind string `json:"kind"` ApiGroup string `json:"apiGroup"` ApiVersion string `json:"apiVersion"` Error bool `json:"error"` Message string `json:"message"` Violation bool `json:"violation"` VerifyResourceResult *k8smanifest.VerifyResourceResult `json:"verifyResourceResult"` }
Observer Result Detail
func ObserveResource ¶
func ObserveResource(resource unstructured.Unstructured, paramObj config.ParameterObject, ignoreFields k8smanifest.ObjectFieldBindingList, skipObjects k8smanifest.ObjectReferenceList, secrets []config.KeyConfig) VerifyResultDetail
Click to show internal directories.
Click to hide internal directories.