share

package
v1.0.14 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 8, 2023 License: Apache-2.0 Imports: 11 Imported by: 0

Documentation

Overview

Package share is a generated protocol buffer package.

It is generated from these files:

common.proto
controller_service.proto
enforcer_service.proto
scan.proto
scanner_service.proto

It has these top-level messages:

RPCVoid
CLUSProfilingRequest
CLUSBoolean
CLUSMetry
CLUSStats
ScannerRegisterData
ScannerDeregisterData
CLUSFilePacket
CLUSAdmissionRequest
CLUSAdmissionResponse
CLUSProcProfileReq
CLUSProcProfileArray
CLUSFileAccessRuleReq
CLUSFileAccessRuleArray
CLUSConnection
CLUSConnectionArray
CLUSReportResponse
CLUSSyncRequest
CLUSSyncReply
CLUSControllerCounter
CLUSGraphOps
CLUSPolicyRuleCheck
CLUSPolicyRuleMismatch
CLUSPolicySyncStatus
CLUSStoreWatcherInfo
CLUSKickLoginSessionsRequest
CLUSLoginTokenInfo
CLUSKick
CLUSFilter
CLUSSession
CLUSSessionArray
CLUSSessionCounter
CLUSDatapathCounter
CLUSDerivedPolicyApp
CLUSDerivedPolicyRule
CLUSDerivedPolicyRuleArray
CLUSDerivedPolicyRuleMap
CLUSProbeSummary
CLUSProbeProcess
CLUSProbeProcessArray
CLUSProbeContainer
CLUSProbeContainerArray
CLUSFileMonitorFile
CLUSFileMonitorFileArray
CLUSSnifferRequest
CLUSSnifferResponse
CLUSSnifferFilter
CLUSSniffer
CLUSSnifferArray
CLUSSnifferDownload
CLUSSnifferPcap
CLUSContainerLogReq
CLUSContainerLogRes
CLUSProcess
CLUSProcessArray
CLUSDerivedDlpRule
CLUSDerivedDlpRuleArray
CLUSDerivedDlpRuleMap
CLUSDerivedDlpRuleEntry
CLUSDerivedDlpRuleEntryArray
CLUSDerivedDlpRuleMac
CLUSDerivedDlpRuleMacArray
CLUSDerivedProcessRule
CLUSDerivedProcessRuleArray
CLUSDerivedFileRule
CLUSDerivedFileRuleArray
CLUSWorkloadInterceptPort
CLUSWorkloadIntercept
CLUSMeter
CLUSMeterArray
ScanVulnerability
ScanLayerResult
ScanModule
ScanModuleVul
ScanSecretLog
ScanSecretResult
ScanSetIdPermLog
ScanResult
ScanRunningRequest
ScanData
ScanAppPackage
ScanAppRequest
ScanAwsLambdaRequest
ScanImageRequest

Index

Constants

View Source
const (
	// All PERM_xyz_BASIC permissions can be enabled/disabled indirectly by enabling/disabling some composite permission(s)
	PERM_IBMSA                 = 0x00000001 // hidden(non-configurable by user), only for IBM SA to set up with NV
	PERM_FED                   = 0x00000002 // hidden(non-configurable by user), only for fedAdmin role
	PERM_NV_RESOURCE           = 0x00000004 // hidden(non-configurable by user), for accessing controller/enforcer/scanner. No custom role can have this permission.
	PERM_RUNTIME_SCAN_BASIC    = 0x00000008 // platform/host/container scan. namespaced
	PERM_REG_SCAN              = 0x00000010 // namespaced
	PERM_CICD_SCAN             = 0x00000020 // (modify only) for scanning serverless & container image
	PERM_INFRA_BASIC           = 0x00000040 // for accessing host/platform/domain.
	PERM_NETWORK_POLICY_BASIC  = 0x00000080 // network policy. namespaced
	PERM_SYSTEM_POLICY_BASIC   = 0x00000100 // file/process profiles, response rules, dlp. namespaced
	PERM_GROUP_BASIC           = 0x00000200 // group. namespaced
	PERM_ADM_CONTROL           = 0x00000400
	PERM_COMPLIANCE_BASIC      = 0x00000800 // namespaced
	PERM_AUDIT_EVENTS          = 0x00001000 // (view only) namespaced
	PERM_SECURITY_EVENTS_BASIC = 0x00002000 // (view only) namespaced
	PERM_EVENTS                = 0x00004000 // (view only) namespaced
	PERM_AUTHENTICATION        = 0x00008000 // for ldap/SAML/OpenID configuration
	PERM_AUTHORIZATION         = 0x00010000 // for users/roles configuration. namespaced(None user who is admin of domain A can create/config/delete another None user who has role in dmain A). namespaced
	PERM_SYSTEM_CONFIG         = 0x00020000 // include license
	PERM_CLOUD                 = 0x00040000 // for cloud services like aws lambda
	PERM_WORKLOAD_BASIC        = 0x00080000 // workload(pod). namespaced
	PERM_VULNERABILITY         = 0x00100000 // for vulnerability profile

	// composite permissions (~= permanent boost)
	PERMS_RUNTIME_SCAN     = PERM_RUNTIME_SCAN_BASIC | PERM_WORKLOAD_BASIC | PERM_INFRA_BASIC
	PERMS_RUNTIME_POLICIES = PERM_GROUP_BASIC | PERM_NETWORK_POLICY_BASIC | PERM_SYSTEM_POLICY_BASIC | PERM_WORKLOAD_BASIC
	PERMS_COMPLIANCE       = PERM_COMPLIANCE_BASIC | PERM_WORKLOAD_BASIC | PERM_INFRA_BASIC
	PERMS_SECURITY_EVENTS  = PERM_SECURITY_EVENTS_BASIC | PERM_WORKLOAD_BASIC
	PERMS_PWD_PROFILE      = PERM_AUTHORIZATION | PERM_SYSTEM_CONFIG

	// Effective permissions for domain admin/reader roles. Even for the reserved admin/reader roles assigned to domain, they cannot access controller/enforcer objects(PERM_NV_RESOURCE)
	PERMS_DOMAIN_READ = PERM_RUNTIME_SCAN_BASIC | PERM_REG_SCAN | PERM_NETWORK_POLICY_BASIC | PERM_SYSTEM_POLICY_BASIC | PERM_GROUP_BASIC | PERM_WORKLOAD_BASIC |
		PERM_COMPLIANCE_BASIC | PERM_AUTHORIZATION | PERM_SYSTEM_CONFIG | PERM_AUDIT_EVENTS | PERM_SECURITY_EVENTS_BASIC | PERM_EVENTS // all read permissions a domain admin could have eventually
	PERMS_DOMAIN_WRITE = PERM_RUNTIME_SCAN_BASIC | PERM_REG_SCAN | PERM_NETWORK_POLICY_BASIC | PERM_SYSTEM_POLICY_BASIC | PERM_GROUP_BASIC | PERM_WORKLOAD_BASIC |
		PERM_COMPLIANCE_BASIC | PERM_AUTHORIZATION // all write permissions a domain admin could have eventually
	PERMS_DOMAIN = PERMS_DOMAIN_READ | PERMS_DOMAIN_WRITE // sum of all permissions that are supporedt in domain

	// customer-configurable permissions: (PERM_NV_RESOURCE is non-customer-configurable permission)
	PERMS_GLOBAL_CONFIGURABLE_READ  = PERM_ADM_CONTROL | PERM_AUTHENTICATION | PERM_CLOUD | PERM_INFRA_BASIC | PERM_VULNERABILITY | PERMS_DOMAIN_READ                                        // sum of all configurable(non-hidden) read permissions
	PERMS_GLOBAL_CONFIGURABLE_WRITE = PERM_ADM_CONTROL | PERM_AUTHENTICATION | PERM_CLOUD | PERM_INFRA_BASIC | PERM_VULNERABILITY | PERMS_DOMAIN_WRITE | PERM_SYSTEM_CONFIG | PERM_CICD_SCAN // sum of all configurable(non-hidden) write permissions

	// Effective permissions for reserved fedAdmin/fedReader/admin/reader roles on global domain, only they have PERM_NV_RESOURCE permission
	PERMS_CLUSTER_READ  = PERM_NV_RESOURCE | PERMS_GLOBAL_CONFIGURABLE_READ
	PERMS_CLUSTER_WRITE = PERM_NV_RESOURCE | PERMS_GLOBAL_CONFIGURABLE_WRITE
	PERMS_CLUSTER       = PERMS_CLUSTER_READ | PERMS_CLUSTER_WRITE // sum of all permissions that are supported in cluster
	PERMS_FED_READ      = PERM_FED | PERMS_CLUSTER_READ
	PERMS_FED_WRITE     = PERM_FED | PERMS_CLUSTER_WRITE
	PERMS_FED           = PERMS_FED_READ | PERMS_FED_WRITE // sum of all permissions that are supported in fed
)
View Source
const (
	PERM_IBMSA_ID                 = "ibmsa"       // hidden to user in 4.0
	PERM_FED_ID                   = "fed"         // hidden to user when it's not master cluster
	PERM_NV_RESOURCE_ID           = "nv_resource" // hidden to user in 4.0
	PERM_REG_SCAN_ID              = "reg_scan"
	PERM_CICD_SCAN_ID             = "ci_scan"
	PERM_ADM_CONTROL_ID           = "admctrl"
	PERM_AUDIT_EVENTS_ID          = "audit_events"
	PERM_EVENTS_ID                = "events"
	PERM_AUTHENTICATION_ID        = "authentication"
	PERM_AUTHORIZATION_ID         = "authorization"
	PERM_SYSTEM_CONFIG_ID         = "config"
	PERM_CLOUD_ID                 = "cloud"
	PERM_INFRA_BASIC_ID           = "infra_basic"
	PERM_RUNTIME_SCAN_BASIC_ID    = "rt_scan_basic"
	PERM_NETWORK_POLICY_BASIC_ID  = "nw_policy_basic"
	PERM_SYSTEM_POLICY_BASIC_ID   = "sys_policy_basic"
	PERM_GROUP_BASIC_ID           = "group_basic"
	PERM_COMPLIANCE_BASIC_ID      = "compliance_basic"
	PERM_SECURITY_EVENTS_BASIC_ID = "security_events_basic"
	PERM_WORKLOAD_BASIC_ID        = "workload_basic"
	PERM_VULNERABILITY_ID         = "vulnerability"

	// complex permissions, can be seen by customers
	PERMS_RUNTIME_SCAN_ID     = "rt_scan"         // == PERM_RUNTIME_SCAN_BASIC | PERM_WORKLOAD_BASIC | PERM_INFRA_BASIC
	PERMS_RUNTIME_POLICIES_ID = "rt_policy"       // == PERM_GROUP_BASIC + PERM_NETWORK_POLICY_BASIC | PERM_SYSTEM_POLICY_BASIC | PERM_WORKLOAD_BASIC
	PERMS_COMPLIANCE_ID       = "compliance"      // == PERM_COMPLIANCE_BASIC | PERM_WORKLOAD_BASIC | PERM_INFRA_BASIC
	PERMS_SECURITY_EVENTS_ID  = "security_events" // == PERM_SECURITY_EVENTS_BASIC | PERM_WORKLOAD_BASIC
)
View Source
const (
	CFGEndpointSystem           = "system"
	CFGEndpointEULA             = "eula"
	CFGEndpointScan             = "scan"
	CFGEndpointUser             = "user"
	CFGEndpointServer           = "server"
	CFGEndpointGroup            = "group"
	CFGEndpointPolicy           = "policy"
	CFGEndpointLicense          = "license"
	CFGEndpointResponseRule     = "response_rule"
	CFGEndpointProcessProfile   = "process_profile"
	CFGEndpointRegistry         = "registry"
	CFGEndpointDomain           = "domain"
	CFGEndpointFileMonitor      = "file_monitor"
	CFGEndpointFileAccessRule   = "file_rule"
	CFGEndpointAdmissionControl = "admission_control"
	CFGEndpointCrd              = "crd"
	CFGEndpointFederation       = "federation"
	CFGEndpointDlpRule          = "dlp_rule"
	CFGEndpointDlpGroup         = "dlp_group"
	CFGEndpointWafRule          = "waf_rule"
	CFGEndpointWafGroup         = "waf_group"
	CFGEndpointScript           = "script"
	CFGEndpointCloud            = "cloud"
	CFGEndpointCompliance       = "compliance"
	CFGEndpointVulnerability    = "vulnerability"
	CFGEndpointUserRole         = "user_role"
	CFGEndpointPwdProfile       = "pwd_profile"
)
View Source
const (
	GroupKindContainer string = "container"
	GroupKindAddress   string = "address"
	GroupKindIPService string = "ip_service"
	GroupKindExternal  string = "external"
	GroupKindNode      string = "node"
)
View Source
const (
	CLUSResCfgRule     = "rule"
	CLUSResCfgRuleList = "rules"
)
View Source
const (
	// host: address is meaningful only on local host. Native container IP has this scope.
	CLUSIPAddrScopeLocalhost = "host"
	// global: address is global
	CLUSIPAddrScopeGlobal = "global"
	// nat: address for NAT access. Typically, this the address of the host.
	CLUSIPAddrScopeNAT = "nat"
)
View Source
const (
	Learned = iota + 1
	UserCreated
	GroundCfg
	FederalCfg
	SystemDefined
)
View Source
const (
	WireInline  string = "inline"
	WireDefault string = "default"
)
View Source
const (
	SpecInternalTunnelIP = "tunnelip"
	SpecInternalSvcIP    = "svcip"
	SpecInternalHostIP   = "hostip"
	SpecInternalDevIP    = "devip"
	SpecInternalUwlIP    = "uwlip"
	SpecInternalExtIP    = "extip"
)

Special internal subnet IP

View Source
const (
	BenchLevelPass  = "PASS"
	BenchLevelInfo  = "INFO"
	BenchLevelWarn  = "WARN"
	BenchLevelHigh  = "HIGH"
	BenchLevelNote  = "NOTE"
	BenchLevelError = "ERROR"
	BenchProfileL1  = "Level 1"
	BenchProfileL2  = "Level 2"
)
View Source
const (
	ScanFlagCVE    = 0x01
	ScanFlagLayers = 0x02
	ScanFlagFiles  = 0x04
)

This flag can be used to force rescan with the new controller

View Source
const (
	AdmCtrlModeMonitor = "monitor"
	AdmCtrlModeProtect = "protect"

	AdmClientModeSvc = "service"
	AdmClientModeUrl = "url"

	AdmCtrlActionAllow = PolicyActionAllow
	AdmCtrlActionDeny  = PolicyActionDeny
)

Admission control

View Source
const (
	CLUSAdmissionCfgCert     = "cert"
	CLUSAdmissionCfgState    = "state"
	CLUSAdmissionCfgRule     = "rule"
	CLUSAdmissionCfgRuleList = "rules"
	CLUSAdmissionStatistics  = "statistics"
)
View Source
const (
	FedAdmCtrlExceptRulesType  = "fed_admctrl_exception"
	FedAdmCtrlDenyRulesType    = "fed_admctrl_deny"
	FedNetworkRulesType        = "fed_netwwork_rule"
	FedResponseRulesType       = "fed_response_rule"
	FedGroupType               = "fed_group"
	FedFileMonitorProfilesType = "fed_file_profile"
	FedProcessProfilesType     = "fed_process_profile"
	FedSystemConfigType        = "fed_system_config"
)

Multi-Clusters (Federation)

View Source
const (
	CriticalAdmCtrlExceptRulesType = "critical_allow"
	CrdAdmCtrlExceptRulesType      = "crd_allow"
	CrdAdmCtrlDenyRulesType        = "crd_deny"
)
View Source
const (
	DefaultComplianceProfileName    = "default"
	DefaultVulnerabilityProfileName = "default"
	DefaultPolicyName               = "default" // mapping of ScopeLocal
	FedPolicyName                   = "fed"     // mapping of ScopeFed
)
View Source
const (
	ScopeLocal = "local"
	ScopeFed   = "fed"
	ScopeAll   = ""
	ScopeError = "error"
)
View Source
const (
	StartPingFedJoints = iota + 1
	StopPingFedJoints
	StartPollFedMaster
	StopPollFedMaster
	InstantPollFedMaster
	InstantPingFedJoints
	JointLoadOwnKeys
	MasterLoadJointKeys
	PurgeJointKeys
	MasterUnloadJointKeys
	StartPostToIBMSA
	StopPostToIBMSA
	PostToIBMSA
	RestartWebhookServer
)
View Source
const (
	CLUSFedMembershipSubKey     = "membership"
	CLUSFedClustersListSubKey   = "clusters_list"
	CLUSFedClustersStatusSubKey = "clusters_status"
	CLUSFedClustersSubKey       = "clusters"
	CLUSFedRulesRevisionSubKey  = "rules_revision"
	CLUSFedToPingPollSubKey     = "ping_poll"
)
View Source
const (
	CLUSFedMembershipKey     = CLUSConfigFederationStore + CLUSFedMembershipSubKey     // stores CLUSFedMembership
	CLUSFedClustersListKey   = CLUSConfigFederationStore + CLUSFedClustersListSubKey   // stores CLUSFedJoinedClusterList
	CLUSFedClustersStatusKey = CLUSConfigFederationStore + CLUSFedClustersStatusSubKey // each subkey stores CLUSFedClusterStatus
	CLUSFedClustersKey       = CLUSConfigFederationStore + CLUSFedClustersSubKey       // each subkey stores CLUSFedJointClusterInfo
	CLUSFedRulesRevisionKey  = CLUSConfigFederationStore + CLUSFedRulesRevisionSubKey  // stores CLUSFedRulesRevision
	CLUSFedToPingPollKey     = CLUSConfigFederationStore + CLUSFedToPingPollSubKey     // stores CLUSFedDoPingPoll
	CLUSFedSystemKey         = CLUSConfigFederationStore + CFGEndpointSystem           // stores CLUSFedSystemConfig
)
View Source
const (
	DlpPatternContextURI     string = "url"
	DlpPatternContextHEAD    string = "header"
	DlpPatternContextBODY    string = "body"
	DlpPatternContextPACKET  string = "packet"
	DlpPatternContextDefault string = "body"
)
View Source
const (
	CLUSDlpDefaultSensor = "sensor.dlpdfltnv"
	CLUSDlpSsnSensor     = "sensor.ssn"
	CLUSDlpCcSensor      = "sensor.creditcard"
	CLUSWafDefaultSensor = "sensor.wafdfltnv"
)
View Source
const (
	DlpRuleNameCreditCard string = "rule.creditcard"
	DlpRuleNameCcAxp      string = "rule.americanexpress"
	DlpRuleNameCcDiscover string = "rule.discover"
	DlpRuleNameCcMaster   string = "rule.master"
	DlpRuleNameCcVisa     string = "rule.visa"
	DlpRuleNameCcDinerV1  string = "rule.diner1"
	DlpRuleNameCcDinerV2  string = "rule.diner2"
	DlpRuleNameCcJcb      string = "rule.jcb"
	DlpRuleNameSsn        string = "rule.ssn"
)
View Source
const (
	DlpWlRuleIn  = "inside"
	DlpWlRuleOut = "outside"
	WafWlRuleIn  = "wafinside"
	WafWlRuleOut = "wafoutside"
)
View Source
const (
	SecretPrivateKey string = "privatekey" // Private Key
	SecretX509       string = "x.509"      // X.509 certificates (ignored)
	SecretProgram    string = "program"    // in specific program files
	SecretRegular    string = "regular"    // in other regular files
)

///// Secret Types

View Source
const (
	IMPORT_PREPARE     = "preparing"
	IMPORT_RUNNING     = "importing"
	IMPORT_DONE        = "done"
	IMPORT_NO_RESPONSE = "no_response"
)

Import task

View Source
const (
	PREFIX_IMPORT_CONFIG       = "import_"
	PREFIX_IMPORT_GROUP_POLICY = "group_import_"
	PREFIX_IMPORT_ADMCTRL      = "admctrl_import_"
	PREFIX_IMPORT_WAF          = "waf_import_"
)
View Source
const (
	IMPORT_TYPE_CONFIG       = ""
	IMPORT_TYPE_GROUP_POLICY = "group"
	IMPORT_TYPE_ADMCTRL      = "admctrl"
	IMPORT_TYPE_WAF          = "waf"
)
View Source
const (
	ReviewTypeCRD           = iota + 1
	ReviewTypeImportGroup   // interactive import
	ReviewTypeImportAdmCtrl // interactive import
	ReviewTypeImportWAF     // interactive import
)
View Source
const (
	ReviewTypeDisplayCRD       = "CRD"
	ReviewTypeDisplayGroup     = "Group Policy"                     // interactive import
	ReviewTypeDisplayAdmission = "Admission Control Configurations" // interactive import
	ReviewTypeDisplayWAF       = "WAF Configurations"               // interactive import
)
View Source
const (
	CriteriaKeyImage     string = "image"
	CriteriaKeyHost      string = "node"
	CriteriaKeyWorkload  string = "container"
	CriteriaKeyService   string = "service"
	CriteriaKeyAddress   string = "address"
	CriteriaKeyLabel     string = "label"
	CriteriaKeyDomain    string = "domain"
	CriteriaKeyNamespace string = "namespace"
	// CriteriaKeyApp      string = "application"
	// CriteriaKeyWorkloadID string = "container_id"
	// CriteriaKeyGroup      string = "nv.group"
	// CriteriaKeyCIDR       string = "cidr"
	CriteriaKeyUser                string = "user"
	CriteriaKeyK8sGroups           string = "userGroups"
	CriteriaKeyImageRegistry       string = "imageRegistry"
	CriteriaKeyLabels              string = "labels"
	CriteriaKeyMountVolumes        string = "mountVolumes"
	CriteriaKeyEnvVars             string = "envVars"
	CriteriaKeyBaseImage           string = "baseImage"
	CriteriaKeyCVENames            string = "cveNames"
	CriteriaKeyCVEHighCount        string = "cveHighCount"
	CriteriaKeyCVEMediumCount      string = "cveMediumCount"
	CriteriaKeyCVEHighWithFixCount string = "cveHighWithFixCount"
	CriteriaKeyCVEScore            string = "cveScore"
	CriteriaKeyCVEScoreCount       string = "cveScoreCount"
	CriteriaKeyImageScanned        string = "imageScanned"
	CriteriaKeyImageSigned         string = "imageSigned"
	CriteriaKeyRunAsRoot           string = "runAsRoot"
	CriteriaKeyRunAsPrivileged     string = "runAsPrivileged"
	CriteriaKeyImageCompliance     string = "imageCompliance" // secrets, setIdPerm from scanning image results
	CriteriaKeyEnvVarSecrets       string = "envVarSecrets"   // secrets from yaml resources
	CriteriaKeyImageNoOS           string = "imageNoOS"
	CriteriaKeySharePidWithHost    string = "sharePidWithHost"
	CriteriaKeyShareIpcWithHost    string = "shareIpcWithHost"
	CriteriaKeyShareNetWithHost    string = "shareNetWithHost"
	CriteriaKeyAllowPrivEscalation string = "allowPrivEscalation"
	CriteriaKeyPspCompliance       string = "pspCompliance" // psp compliance violation
	CriteriaKeyRequestLimit        string = "resourceLimit"
)
View Source
const (
	SubCriteriaPublishDays   string = "publishDays"
	SubCriteriaCount         string = "count"
	SubCriteriaCpuRequest    string = "cpuRequest"
	SubCriteriaCpuLimit      string = "cpuLimit"
	SubCriteriaMemoryRequest string = "memoryRequest"
	SubCriteriaMemoryLimit   string = "memoryLimit"
)
View Source
const (
	CriteriaOpEqual             string = "="
	CriteriaOpNotEqual          string = "!="
	CriteriaOpContains          string = "contains"
	CriteriaOpPrefix            string = "prefix"
	CriteriaOpRegex             string = "regex"
	CriteriaOpNotRegex          string = "!regex"
	CriteriaOpBiggerEqualThan   string = ">="
	CriteriaOpBiggerThan        string = ">"
	CriteriaOpLessEqualThan     string = "<="
	CriteriaOpContainsAll       string = "containsAll"
	CriteriaOpContainsAny       string = "containsAny"
	CriteriaOpNotContainsAny    string = "notContainsAny"
	CriteriaOpContainsOtherThan string = "containsOtherThan"
)
View Source
const (
	CriteriaValueTrue  string = "true"
	CriteriaValueFalse string = "false"
)
View Source
const (
	NeuVectorLabelImage string = "neuvector.image"
	NeuVectorLabelRole  string = "neuvector.role"

	NeuVectorRoleController string = "controller"
	NeuVectorRoleEnforcer   string = "enforcer"
	NeuVectorRoleManager    string = "manager"
)
View Source
const (
	PolicyModeLearn       string = "Discover"
	PolicyModeEvaluate    string = "Monitor"
	PolicyModeEnforce     string = "Protect"
	PolicyModeUnavailable string = "N/A"
)
View Source
const (
	ProfileBasic  string = "Default"
	ProfileShield string = "Shield"

	ProfileCrdBasic  string = "default"
	ProfileCrdShield string = "shield"
)
View Source
const (
	PolicyActionOpen     string = "open" // Policy is not enforced
	PolicyActionLearn    string = "learn"
	PolicyActionAllow    string = "allow"
	PolicyActionDeny     string = "deny"
	PolicyActionViolate  string = "violate"
	PolicyActionCheckApp string = "check_app"
)
View Source
const (
	VulnSeverityCritical string = "Critical"
	VulnSeverityHigh     string = "High"
	VulnSeverityMedium   string = "Medium"
	VulnSeverityLow      string = "Low"
)
View Source
const (
	DlpRuleActionAllow   string = "allow"
	DlpRuleActionDrop    string = "deny"
	DlpRuleStatusEnable  string = "enable"
	DlpRuleStatusDisable string = "disable"
	DlpRuleSeverityInfo  string = "info"
	DlpRuleSeverityLow   string = "low"
	DlpRuleSeverityMed   string = "medium"
	DlpRuleSeverityHigh  string = "high"
	DlpRuleSeverityCrit  string = "critical"
)
View Source
const (
	PlatformDocker     = "Docker"
	PlatformAmazonECS  = "Amazon-ECS"
	PlatformKubernetes = "Kubernetes"
	PlatformRancher    = "Rancher"
	PlatformAliyun     = "Aliyun"

	FlavorSwarm     = "Swarm"
	FlavorUCP       = "UCP"
	FlavorOpenShift = "OpenShift"
	FlavorRancher   = "Rancher"
	FlavorIKE       = "IKE"
	FlavorGKE       = "GKE"

	NetworkFlannel   = "Flannel"
	NetworkCalico    = "Calico"
	NetworkDefault   = "Default"
	NetworkProxyMesh = "ProxyMeshLo"
)
View Source
const (
	ENV_PLATFORM_INFO = "NV_PLATFORM_INFO"
	ENV_SYSTEM_GROUPS = "NV_SYSTEM_GROUPS"
	ENV_DISABLE_PCAP  = "DISABLE_PACKET_CAPTURE"
)
View Source
const (
	ENV_PLT_PLATFORM    = "platform"
	ENV_PLT_INTF_PREFIX = "if-"
	ENV_PLT_INTF_HOST   = "host"
	ENV_PLT_INTF_GLOBAL = "global"
)
View Source
const (
	RegistryTypeAWSECR           = "Amazon ECR Registry"
	RegistryTypeAzureACR         = "Azure Container Registry"
	RegistryTypeDocker           = "Docker Registry"
	RegistryTypeGCR              = "Google Container Registry"
	RegistryTypeJFrog            = "JFrog Artifactory"
	RegistryTypeOpenShift        = "OpenShift Registry"
	RegistryTypeRedhat_Deprecate = "Red Hat/OpenShift Registry"
	RegistryTypeRedhat           = "Red Hat Public Registry"
	RegistryTypeSonatypeNexus    = "Sonatype Nexus"
	RegistryTypeGitlab           = "Gitlab"
	RegistryTypeHarbor           = "Harbor Registry"
	RegistryTypeSWR              = "SoftWare Repository"
	RegistryTypeIBMCloud         = "IBM Cloud Container Registry"
)
View Source
const (
	JFrogModeRepositoryPath = "Repository Path"
	JFrogModeSubdomain      = "Subdomain"
	JFrogModePort           = "Port"
)
View Source
const (
	EventRuntime          string = "security-event" // EventThreat + EventIncident + EventViolation + EventDlp +EventWaf
	EventEvent            string = "event"
	EventActivity         string = "activity"
	EventCVEReport        string = "cve-report"
	EventThreat           string = "threat"
	EventIncident         string = "incident"
	EventViolation        string = "violation"
	EventBenchmark_UNUSED string = "benchmark"
	EventCompliance       string = "compliance"
	EventAdmCtrl          string = "admission-control"
	EventDlp              string = "dlp"
	EventServerless       string = "serverless"
	EventWaf              string = "waf"
)

Response rule

View Source
const (
	RuleAttribGroup    string = "group"
	RuleAttribCriteria string = "criteria"
	RuleAttribAction   string = "action"
	RuleAttribLogLevel string = "log-level"
)
View Source
const (
	EventCondTypeName        string = "name"
	EventCondTypeCVEName     string = "cve-name"
	EventCondTypeCVEHigh     string = "cve-high"
	EventCondTypeCVEMedium   string = "cve-medium"
	EventCondTypeLevel       string = "level"
	EventCondTypeProc        string = "process"
	EventCondTypeBenchNumber string = "number"
)
View Source
const (
	EventActionQuarantine  string = "quarantine"
	EventActionSuppressLog string = "suppress-log"
	EventActionWebhook     string = "webhook"
)
View Source
const (
	FileAccessBehaviorBlock   = "block_access"
	FileAccessBehaviorMonitor = "monitor_change"
)
View Source
const (
	// show only
	CloudResDataLost = "data_lost"
	// transient state
	CloudResScheduled  = "scheduled"
	CloudResScanning   = "scanning"
	CloudResSuspending = "suspending"
	// final state
	CloudResSuspend = "suspend"
	CloudResReady   = "ready"
	CloudResError   = "error"
)
View Source
const (
	CloudAws   = "aws_cloud"
	CloudAzure = "azure_cloud"
)
View Source
const (
	AwsLambdaFunc  = "aws_lambda_func"
	AwsLambdaLayer = "aws_lambda_layer"
	AwsLambdaApp   = "aws_lambda_app"
	AwsLambdaRt    = "aws_lambda_runtime"
)
View Source
const (
	AccessAllAsReader = "*" // Namespace user can read, global user follow roles
)
View Source
const AwsNvSecKey string = "nvsecKey"
View Source
const CLUSAgentStore string = CLUSObjectStore + "agent/"
View Source
const CLUSAuditLogStore string = CLUSObjectStore + "auditlog/"
View Source
const CLUSBenchStore string = "bench/"
View Source
const CLUSCertStore string = CLUSObjectStore + "cert/"
View Source
const CLUSCloudStore string = CLUSObjectStore + "cloud/"
View Source
const CLUSConfigAdmissionControlStore string = CLUSConfigStore + CFGEndpointAdmissionControl + "/"
View Source
const CLUSConfigCloudStore string = CLUSConfigStore + CFGEndpointCloud + "/"
View Source
const CLUSConfigComplianceProfileStore string = CLUSConfigComplianceStore + "profile/"
View Source
const CLUSConfigComplianceStore string = CLUSConfigStore + CFGEndpointCompliance + "/"
View Source
const CLUSConfigCrdStore string = CLUSConfigStore + CFGEndpointCrd + "/"
View Source
const CLUSConfigDlpGroupStore string = CLUSConfigStore + CFGEndpointDlpGroup + "/"
View Source
const CLUSConfigDlpRuleStore string = CLUSConfigStore + CFGEndpointDlpRule + "/"
View Source
const CLUSConfigDomainStore string = CLUSConfigStore + CFGEndpointDomain + "/"
View Source
const CLUSConfigEULAKey string = CLUSConfigStore + CFGEndpointEULA
View Source
const CLUSConfigFedAdmCtrlKey string = CLUSConfigAdmissionControlStore + "fed/"
View Source
const CLUSConfigFedResponseRuleKey string = CLUSConfigResponseRuleStore + "fed/"

multi-clusters

View Source
const CLUSConfigFederationStore string = CLUSConfigStore + CFGEndpointFederation + "/"
View Source
const CLUSConfigFileAccessRuleStore string = CLUSConfigStore + CFGEndpointFileAccessRule + "/"
View Source
const CLUSConfigFileMonitorStore string = CLUSConfigStore + CFGEndpointFileMonitor + "/"
View Source
const CLUSConfigGroupStore string = CLUSConfigStore + CFGEndpointGroup + "/"
View Source
const CLUSConfigLicenseKey string = CLUSConfigStore + CFGEndpointLicense
View Source
const CLUSConfigPolicyStore string = CLUSConfigStore + CFGEndpointPolicy + "/"
View Source
const CLUSConfigProcessProfileStore string = CLUSConfigStore + CFGEndpointProcessProfile + "/"
View Source
const CLUSConfigPwdProfileStore string = CLUSConfigStore + CFGEndpointPwdProfile + "/"
View Source
const CLUSConfigRegistryStore string = CLUSConfigStore + CFGEndpointRegistry + "/"
View Source
const CLUSConfigResponseRuleStore string = CLUSConfigStore + CFGEndpointResponseRule + "/"
View Source
const CLUSConfigScanKey string = CLUSConfigStore + CFGEndpointScan
View Source
const CLUSConfigScriptStore string = CLUSConfigStore + CFGEndpointScript + "/"
View Source
const CLUSConfigServerStore string = CLUSConfigStore + CFGEndpointServer + "/"
View Source
const CLUSConfigStore string = CLUSObjectStore + "config/"
View Source
const CLUSConfigSystemKey string = CLUSConfigStore + CFGEndpointSystem
View Source
const CLUSConfigUserRoleStore string = CLUSConfigStore + CFGEndpointUserRole + "/"
View Source
const CLUSConfigUserStore string = CLUSConfigStore + CFGEndpointUser + "/"
View Source
const CLUSConfigVulnerabilityProfileStore string = CLUSConfigVulnerabilityStore + "profile/"
View Source
const CLUSConfigVulnerabilityStore string = CLUSConfigStore + CFGEndpointVulnerability + "/"
View Source
const CLUSConfigWafGroupStore string = CLUSConfigStore + CFGEndpointWafGroup + "/"
View Source
const CLUSConfigWafRuleStore string = CLUSConfigStore + CFGEndpointWafRule + "/"
View Source
const CLUSControllerStore string = CLUSObjectStore + "controller/"
View Source
const CLUSCrdProcStore string = "crdcontent/"
View Source
const CLUSCtrlConfigLoadedKey string = CLUSStateStore + "ctrl_cfg_load"
View Source
const CLUSCtrlDistLockStore string = CLUSStateStore + "dist_lock/"
View Source
const CLUSCtrlEnabledValue string = "ok"

state

View Source
const CLUSCtrlInstallationKey string = CLUSStateStore + "installation"

cluster key represent one installation, which will remain unchanged when controllers come and go, and rolling upgrade. It is not part of system configuration.

View Source
const CLUSCtrlNodeAdmissionKey string = CLUSStateStore + "ctrl_ready" // node admission
View Source
const CLUSCtrlUsageReportStore string = CLUSStateStore + "usage_report/"
View Source
const CLUSCtrlVerKey string = CLUSStateStore + "ctrl_ver"
View Source
const CLUSDefPwdProfileName = "default"

for password profile

View Source
const CLUSEventLogStore string = CLUSObjectStore + "eventlog/"
View Source
const CLUSExpiredTokenStore string = CLUSStateStore + "expired_token/"
View Source
const CLUSFqdnIpStore string = CLUSFqdnStore + "ip/" //not to be watched by consul

fqdn

View Source
const CLUSFqdnStore string = "fqdn/" //not to be watched by consul
View Source
const CLUSHostStore string = CLUSObjectStore + "host/"

object

View Source
const CLUSImportStatusSubKey = "status"
View Source
const CLUSImportStore string = CLUSStateStore + "import/"
View Source
const CLUSIncidentLogStore string = CLUSObjectStore + "incidentlog/"
View Source
const CLUSLicenseStore string = CLUSObjectStore + "license/"
View Source
const CLUSLockAdmCtrlKey string = CLUSLockStore + "adm_ctrl"
View Source
const CLUSLockCloudKey string = CLUSLockStore + "cloud"
View Source
const CLUSLockConfigKey string = CLUSLockStore + "all"

lock

View Source
const CLUSLockCrdQueueKey string = CLUSLockStore + "crd_queue"
View Source
const CLUSLockFedKey string = CLUSLockStore + "federation"
View Source
const CLUSLockPolicyKey string = CLUSLockStore + "policy"
View Source
const CLUSLockScannerKey string = CLUSLockStore + "scanner"
View Source
const CLUSLockServerKey string = CLUSLockStore + "server"
View Source
const CLUSLockStore string = "lock/"
View Source
const CLUSLockUpgradeKey string = CLUSLockStore + "upgrade"
View Source
const CLUSLockUserKey string = CLUSLockStore + "user"
View Source
const CLUSNetworkEPStore string = CLUSObjectStore + "networkep/"
View Source
const CLUSNetworkStore string = "network/"
View Source
const CLUSNodeCommonProfileStore string = CLUSNodeCommonStoreKey + CLUSWorkloadProfileStore
View Source
const CLUSNodeCommonStoreKey string = CLUSNodeStore + ProfileCommonGroup + "/"
View Source
const CLUSNodeStore string = "node/"
View Source
const CLUSObjectStore string = "object/"
View Source
const CLUSRecalPolicyStore string = CLUSRecalculateStore + "policy/" //not to be watched by consul

recalculate

View Source
const CLUSRecalculateStore string = "recalculate/" //not to be watched by consul
View Source
const CLUSReservedUuidAnchorMode string = "00000000-0000-0000-0000-000000000005" // rejected by anchor mode
View Source
const CLUSReservedUuidDockerCp string = "00000000-0000-0000-0000-000000000004" // docker cp
View Source
const CLUSReservedUuidNotAlllowed string = "00000000-0000-0000-0000-000000000000" // processes beyond white list

////

View Source
const CLUSReservedUuidPrefix string = "00000000-0000-0000-0000-0000000000" // reserved the last 2 digits

//// Process UUID Rules

Reserved(256 entries): 	00000000-0000-0000-0000-0000000000XX
Default rules:			00000000-0000-0000-0000-00000000000X
Linux-specific:  		00000000-0000-0000-0000-00000000001X ans 2X
Windows-specific:  		00000000-0000-0000-0000-00000000003X ans 4X
View Source
const CLUSReservedUuidRiskyApp string = "00000000-0000-0000-0000-000000000001" // riskApp
View Source
const CLUSReservedUuidRootEscalation string = "00000000-0000-0000-0000-000000000003" // root privilege escallation
View Source
const CLUSReservedUuidShieldAllowed string = "00000000-0000-0000-0000-000000000006" // allowed as a family process
View Source
const CLUSReservedUuidTunnelProc string = "00000000-0000-0000-0000-000000000002" // tunnel
View Source
const (
	CLUSRootCAKey = "rootCA"
)
View Source
const CLUSScanDataStore string = CLUSScanStore + "data/"
View Source
const CLUSScanStateStore string = CLUSScanStore + "state/"

scan

View Source
const CLUSScanStore string = "scan/"
View Source
const CLUSScannerDBStore string = CLUSScanStore + "database/"
View Source
const CLUSScannerDBVersionID string = "NeuVectorCVEDBVersion" // used for indicate db version changed
View Source
const CLUSScannerStatsStore string = CLUSScanStore + "scanner_stats/"
View Source
const CLUSScannerStore string = CLUSScanStore + "scanner/"
View Source
const CLUSStateStore string = "state/"
View Source
const CLUSSysPwdProfileName = "nvsyspwdprofile" // reserved just for referencing active password profile
View Source
const CLUSThreatLogStore string = CLUSObjectStore + "threatlog/"
View Source
const CLUSUniconfStore string = CLUSObjectStore + "uniconf/" // Target both controller and specific enforcer
View Source
const CLUSWorkloadProfileStore string = "profiles/"
View Source
const CLUSWorkloadStore string = CLUSObjectStore + "workload/"
View Source
const CVEDatabaseFolder = "/etc/neuvector/db/"
View Source
const CompactCVEDBName = "cvedb.compact"
View Source
const ContainerRuntimeDocker string = "docker"
View Source
const ContainerStatsSlots uint = 60 // 5s * 60 = 3m

Stats

View Source
const CriteriaValueAny string = "any"
View Source
const CustomScriptFailedPrefix string = "Failed to run the custom check"
View Source
const DefaultCVEDBName = "cvedb"
View Source
const DefaultGroupRuleID uint32 = 0
View Source
const DefaultOpenShiftRegistryURL = "docker-registry.default.svc"

Registry

View Source
const (
	DlpRuleKeyPattern string = "pattern"
)

dlp rule

View Source
const DlpRuleName string = "dlprule"
View Source
const DlpRuleStore string = CLUSNetworkStore + DlpRuleName + "/"
View Source
const DlpRulesDefaultName string = "DlpWorkloadRules"
View Source
const DomainDelimiter string = "."
View Source
const GroupNVProtect string = "NV.Protect"
View Source
const HiddenFedDomain string = "$*&().^$"
View Source
const IMPORT_QUERY_INTERVAL = 30
View Source
const InternalIPNetDefaultName string = "InternalIPNet"
View Source
const MaxLambdaHistory = 3
View Source
const (
	NEPTypeLB = "netlb"
)
View Source
const NV_VBR_PORT_MTU int = 2048 //2k
View Source
const NV_VBR_PORT_MTU_JUMBO int = 9216 //9k
View Source
const PolicyFedRuleIDBase = 100000
View Source
const PolicyFedRuleIDMax = 110000 // exclusive
View Source
const PolicyGroundRuleIDBase = 110000
View Source
const PolicyGroundRuleIDMax = 120000
View Source
const PolicyIPRulesDefaultName string = "GroupIPRules"

network

View Source
const PolicyIPRulesVersionID string = "NeuVectorPolicyVersion" // used for indicate policy version changed
View Source
const PolicyLearnedIDBase = 10000
View Source
const ProfileCPUFileFmt string = ProfileFolder + "%scpu.prof"
View Source
const ProfileCommonGroup string = "common" // nodes

profiles

View Source
const ProfileFileAccess string = "fileAccess"
View Source
const ProfileFileAccessStore string = CLUSWorkloadProfileStore + ProfileFileAccess + "/"
View Source
const ProfileFileMonitor string = "file"
View Source
const ProfileFileMonitorStore string = CLUSWorkloadProfileStore + ProfileFileMonitor + "/"
View Source
const ProfileFileScriptStore string = CLUSWorkloadProfileStore + ProfileScript + "/"
View Source
const ProfileFolder string = "/var/neuvector/profile/"
View Source
const ProfileGoroutineFileFmt string = ProfileFolder + "%sgoroutine.prof"
View Source
const ProfileGroup string = "group"
View Source
const ProfileGroupStore string = CLUSWorkloadProfileStore + ProfileGroup + "/"
View Source
const ProfileMemoryFileFmt string = ProfileFolder + "%smemory.prof"
View Source
const ProfileProcess string = "process"
View Source
const ProfileProcessStore string = CLUSWorkloadProfileStore + ProfileProcess + "/"
View Source
const ProfileScript string = "script"
View Source
const QuarantineReasonUser string = "user-configured"

QuarantineReason:

View Source
const RegularCVEDBName = "cvedb.regular"
View Source
const SnifferIdAgentField = 8
View Source
const SpecialIPNetDefaultName string = "SpecialIPNet"
View Source
const UnusedGroupAgingDefault uint8 = 24 //aging time in Hour
View Source
const UnusedGroupAgingMax uint8 = 168 //aging time in Hour,24*7
View Source
const WafRuleName string = "wafrule"
View Source
const WafRuleStore string = CLUSNetworkStore + WafRuleName + "/"

Variables

View Source
var CLUSEndpointIngress string = "ingress"
View Source
var CLUSHostAddrGroup string = "nv.hostaddr_group" //used as wlid for "nodes" in policy calculation
View Source
var CLUSIPExternal net.IP = net.IPv4zero
View Source
var CLUSLearnedHostPrefix string = "Host:"
View Source
var CLUSLearnedWorkloadPrefix string = "Workload:"
View Source
var CLUSWLAddress string = "nv.address"
View Source
var CLUSWLAddressGroup string = "nv.address_group"
View Source
var CLUSWLExternal string = "nv.external"
View Source
var CLUSWLFqdnPrefix string = "fqdn:"
View Source
var CLUSWLModeGroup string = "nv.mode_group"
View Source
var CLUSWLService string = "nv.service"
View Source
var KickLoginSessionsType_name = map[int32]string{
	0: "KickByServer",
	1: "KickByFed",
	2: "KickByUser",
}
View Source
var KickLoginSessionsType_value = map[string]int32{
	"KickByServer": 0,
	"KickByFed":    1,
	"KickByUser":   2,
}
View Source
var ProfilingCmd_name = map[int32]string{
	0: "StartProfiling",
	1: "StopProfiling",
}
View Source
var ProfilingCmd_value = map[string]int32{
	"StartProfiling": 0,
	"StopProfiling":  1,
}
View Source
var ProfilingMethod_name = map[int32]string{
	0: "CPU",
	1: "Memory",
}
View Source
var ProfilingMethod_value = map[string]int32{
	"CPU":    0,
	"Memory": 1,
}
View Source
var ReportRespAction_name = map[int32]string{
	0: "Done",
	1: "Resend",
}
View Source
var ReportRespAction_value = map[string]int32{
	"Done":   0,
	"Resend": 1,
}
View Source
var ScanErrorCode_name = map[int32]string{
	0:  "ScanErrNone",
	1:  "ScanErrNetwork",
	2:  "ScanErrNotSupport",
	3:  "ScanErrSizeOverLimit",
	4:  "ScanErrPackage",
	5:  "ScanErrDatabase",
	6:  "ScanErrTimeout",
	7:  "ScanErrInProgress",
	8:  "ScanErrRegistryAPI",
	9:  "ScanErrFileSystem",
	10: "ScanErrContainerAPI",
	11: "ScanErrXrayAPI",
	12: "ScanErrContainerExit",
	13: "ScanErrAuthentication",
	14: "ScanErrCertificate",
	15: "ScanErrCanceled",
	16: "ScanErrDriverAPINotSupport",
	17: "ScanErrImageNotFound",
	18: "ScanErrAwsDownloadErr",
	19: "ScanErrArgument",
}
View Source
var ScanErrorCode_value = map[string]int32{
	"ScanErrNone":                0,
	"ScanErrNetwork":             1,
	"ScanErrNotSupport":          2,
	"ScanErrSizeOverLimit":       3,
	"ScanErrPackage":             4,
	"ScanErrDatabase":            5,
	"ScanErrTimeout":             6,
	"ScanErrInProgress":          7,
	"ScanErrRegistryAPI":         8,
	"ScanErrFileSystem":          9,
	"ScanErrContainerAPI":        10,
	"ScanErrXrayAPI":             11,
	"ScanErrContainerExit":       12,
	"ScanErrAuthentication":      13,
	"ScanErrCertificate":         14,
	"ScanErrCanceled":            15,
	"ScanErrDriverAPINotSupport": 16,
	"ScanErrImageNotFound":       17,
	"ScanErrAwsDownloadErr":      18,
	"ScanErrArgument":            19,
}
View Source
var ScanObjectType_name = map[int32]string{
	0: "CONTAINER",
	1: "HOST",
	2: "IMAGE",
	3: "PLATFORM",
	4: "SERVERLESS",
}
View Source
var ScanObjectType_value = map[string]int32{
	"CONTAINER":  0,
	"HOST":       1,
	"IMAGE":      2,
	"PLATFORM":   3,
	"SERVERLESS": 4,
}
View Source
var ScanProvider_name = map[int32]string{
	0: "Neuvector",
	1: "JFrogXray",
}
View Source
var ScanProvider_value = map[string]int32{
	"Neuvector": 0,
	"JFrogXray": 1,
}
View Source
var ScanVulStatus_name = map[int32]string{
	0: "Unpatched",
	1: "FixExists",
	2: "WillNotFix",
	3: "Unaffected",
}
View Source
var ScanVulStatus_value = map[string]int32{
	"Unpatched":  0,
	"FixExists":  1,
	"WillNotFix": 2,
	"Unaffected": 3,
}
View Source
var SnifferCmd_name = map[int32]string{
	0: "StartSniffer",
	1: "StopSniffer",
	2: "RemoveSniffer",
}
View Source
var SnifferCmd_value = map[string]int32{
	"StartSniffer":  0,
	"StopSniffer":   1,
	"RemoveSniffer": 2,
}
View Source
var SnifferStatus_name = map[int32]string{
	0: "Failed",
	1: "Running",
	2: "Stopped",
}
View Source
var SnifferStatus_value = map[string]int32{
	"Failed":  0,
	"Running": 1,
	"Stopped": 2,
}
View Source
var StoreWatcherAction_name = map[int32]string{
	0: "PauseWatcher",
	1: "ResumeWatcher",
}
View Source
var StoreWatcherAction_value = map[string]int32{
	"PauseWatcher":  0,
	"ResumeWatcher": 1,
}

Functions

func CLUSAdmissionCertKey

func CLUSAdmissionCertKey(store, policyName string) string

func CLUSAdmissionRuleKey

func CLUSAdmissionRuleKey(policyName, admType, ruleType string, id uint32) string

func CLUSAdmissionRuleListKey

func CLUSAdmissionRuleListKey(policyName, admType, ruleType string) string

func CLUSAdmissionStateKey

func CLUSAdmissionStateKey(store, policyName string) string

func CLUSAdmissionStatsKey

func CLUSAdmissionStatsKey(policyName string) string

func CLUSAgentEventLogKey

func CLUSAgentEventLogKey(hostID string, devID string) string

func CLUSAgentKey

func CLUSAgentKey(hostID string, devID string) string

func CLUSAuditLogKey

func CLUSAuditLogKey(hostID string, devID string) string

func CLUSBenchKey

func CLUSBenchKey(hostID string) string

func CLUSBenchReportKey

func CLUSBenchReportKey(hostID string, bench BenchType) string

func CLUSCloudCfgKey

func CLUSCloudCfgKey(cloudType, projectName string) string

func CLUSCloudFuncKey

func CLUSCloudFuncKey(cloudType, project, region, funcName string) string

func CLUSCloudKey

func CLUSCloudKey(cloudType, projectName string) string

func CLUSCloudKey2Type

func CLUSCloudKey2Type(key string) string

func CLUSComplianceKey2Type

func CLUSComplianceKey2Type(key string) string

func CLUSComplianceProfileKey

func CLUSComplianceProfileKey(name string) string

func CLUSComplianceProfileKey2Name

func CLUSComplianceProfileKey2Name(key string) string

func CLUSConfigKey2Config

func CLUSConfigKey2Config(key string) string

func CLUSControllerEventLogKey

func CLUSControllerEventLogKey(hostID string, devID string) string

func CLUSControllerKey

func CLUSControllerKey(hostID string, devID string) string

func CLUSCrdKey

func CLUSCrdKey(crdType, name string) string

func CLUSCrdQueueKey

func CLUSCrdQueueKey(name string) string

func CLUSCtrlDistLockKey

func CLUSCtrlDistLockKey(lock string) string

func CLUSCtrlUsageReportKey

func CLUSCtrlUsageReportKey(ts int64) string

func CLUSCtrlUsageReportKey2TS

func CLUSCtrlUsageReportKey2TS(key string) int64

func CLUSCustomCheckConfigKey

func CLUSCustomCheckConfigKey(name string) string

func CLUSCustomCheckNetworkKey

func CLUSCustomCheckNetworkKey(name string) string

func CLUSDeviceKey2ID

func CLUSDeviceKey2ID(key string) string

func CLUSDlpGroupConfigKey

func CLUSDlpGroupConfigKey(group string) string

func CLUSDlpGroupKey2Name

func CLUSDlpGroupKey2Name(key string) string

func CLUSDlpRuleConfigKey

func CLUSDlpRuleConfigKey(sensor string) string

func CLUSDlpRuleKey

func CLUSDlpRuleKey(sensor string) string

func CLUSDlpRuleKey2Name

func CLUSDlpRuleKey2Name(key string) string

func CLUSDlpWorkloadRulesKey

func CLUSDlpWorkloadRulesKey(name string) string

func CLUSDomainConfigKey

func CLUSDomainConfigKey(name string) string

func CLUSDomainKey

func CLUSDomainKey(name string) string

func CLUSDomainKey2Name

func CLUSDomainKey2Name(key string) string

func CLUSExpiredTokenKey

func CLUSExpiredTokenKey(token string) string

func CLUSFedJointClusterKey

func CLUSFedJointClusterKey(id string) string

func CLUSFedJointClusterStatusKey

func CLUSFedJointClusterStatusKey(id string) string

func CLUSFedKey2CfgKey

func CLUSFedKey2CfgKey(key string) string

func CLUSFedKey2ClusterIdKey

func CLUSFedKey2ClusterIdKey(key string) string

func CLUSFileAccessRuleKey

func CLUSFileAccessRuleKey(name string) string

func CLUSFileAccessRuleNetworkKey

func CLUSFileAccessRuleNetworkKey(name string) string

func CLUSFileMonitorKey

func CLUSFileMonitorKey(name string) string

func CLUSFileMonitorKey2Group

func CLUSFileMonitorKey2Group(key string) string

func CLUSFileMonitorNetworkKey

func CLUSFileMonitorNetworkKey(name string) string

func CLUSFqdnIpKey

func CLUSFqdnIpKey(hostID string, fqdname string) string

func CLUSGroupKey

func CLUSGroupKey(name string) string

func CLUSGroupKey2GroupName

func CLUSGroupKey2GroupName(key string) string

func CLUSGroupKey2Name

func CLUSGroupKey2Name(key string) string

func CLUSGroupNetworkKey

func CLUSGroupNetworkKey(name string) string

func CLUSHostKey

func CLUSHostKey(hostID string, by string) string

func CLUSHostKey2ID

func CLUSHostKey2ID(key string) string

func CLUSImportOpKey

func CLUSImportOpKey(name string) string

func CLUSIncidentLogKey

func CLUSIncidentLogKey(hostID string, devID string) string

func CLUSInternalIPNetsKey

func CLUSInternalIPNetsKey(name string) string

func CLUSIsPolicyRuleKey

func CLUSIsPolicyRuleKey(key string) bool

func CLUSIsPolicyRuleListKey

func CLUSIsPolicyRuleListKey(key string) bool

func CLUSIsPolicyZipRuleListKey

func CLUSIsPolicyZipRuleListKey(key string) bool

func CLUSKey2Target

func CLUSKey2Target(key string) string

func CLUSKeyLastToken

func CLUSKeyLastToken(key string) string

func CLUSKeyLength

func CLUSKeyLength(key string) int

func CLUSKeyNthToken

func CLUSKeyNthToken(key string, nth int) string

func CLUSNetworkEPHostStore

func CLUSNetworkEPHostStore(hostID string) string

func CLUSNetworkEPKey

func CLUSNetworkEPKey(hostID string, epID string) string

func CLUSNetworkEPKey2ID

func CLUSNetworkEPKey2ID(key string) string

func CLUSNetworkKey2Subject

func CLUSNetworkKey2Subject(key string) string

func CLUSNodeProfileGroupKey

func CLUSNodeProfileGroupKey(nodeID, profile, group string) string

func CLUSNodeProfileKey

func CLUSNodeProfileKey(nodeID, subkey string) string

func CLUSNodeProfileStoreKey

func CLUSNodeProfileStoreKey(nodeID string) string

func CLUSNodeProfileSubkey

func CLUSNodeProfileSubkey(key string) string

func CLUSObjectCertKey

func CLUSObjectCertKey(cn string) string

func CLUSObjectKey2Object

func CLUSObjectKey2Object(key string) string

func CLUSPolicyIPRulesKey

func CLUSPolicyIPRulesKey(name string) string

func CLUSPolicyKey2AdmCfgPolicySubkey

func CLUSPolicyKey2AdmCfgPolicySubkey(key string, last bool) string

func CLUSPolicyKey2AdmCfgSubkey

func CLUSPolicyKey2AdmCfgSubkey(key string) string

func CLUSPolicyKey2ResPolicySubkey

func CLUSPolicyKey2ResPolicySubkey(key string) (string, string)

func CLUSPolicyRuleKey

func CLUSPolicyRuleKey(name string, id uint32) string

func CLUSPolicyRuleKey2AdmRuleType

func CLUSPolicyRuleKey2AdmRuleType(key, cfgType string) (string, string)

func CLUSPolicyRuleKey2ID

func CLUSPolicyRuleKey2ID(key string) uint32

func CLUSPolicyRuleListKey

func CLUSPolicyRuleListKey(name string) string

func CLUSPolicyZipRuleListKey

func CLUSPolicyZipRuleListKey(name string) string

func CLUSProfileConfigKey

func CLUSProfileConfigKey(group string) string

func CLUSProfileKey

func CLUSProfileKey(group string) string

func CLUSProfileKey2Name

func CLUSProfileKey2Name(key string) string

func CLUSPwdProfileKey

func CLUSPwdProfileKey(name string) string

func CLUSRecalPolicyIPRulesKey

func CLUSRecalPolicyIPRulesKey(name string) string

func CLUSRegistryConfigKey

func CLUSRegistryConfigKey(name string) string

func CLUSRegistryImageDataKey

func CLUSRegistryImageDataKey(name, id string) string

func CLUSRegistryImageDataStore

func CLUSRegistryImageDataStore(name string) string

func CLUSRegistryImageStateKey

func CLUSRegistryImageStateKey(name, id string) string

func CLUSRegistryImageStateStore

func CLUSRegistryImageStateStore(name string) string

func CLUSRegistryStateKey

func CLUSRegistryStateKey(name string) string

func CLUSResponseRuleKey

func CLUSResponseRuleKey(policyName string, id uint32) string

func CLUSResponseRuleListKey

func CLUSResponseRuleListKey(name string) string

func CLUSScanDataHostKey

func CLUSScanDataHostKey(id string) string

func CLUSScanDataPlatformKey

func CLUSScanDataPlatformKey(id string) string

func CLUSScanDataWorkloadKey

func CLUSScanDataWorkloadKey(id string) string

func CLUSScanKey2Subject

func CLUSScanKey2Subject(key string) string

func CLUSScanStateHostKey

func CLUSScanStateHostKey(id string) string

func CLUSScanStateKey2ID

func CLUSScanStateKey2ID(key string) string

func CLUSScanStateKey2Type

func CLUSScanStateKey2Type(key string) string

func CLUSScanStatePlatformKey

func CLUSScanStatePlatformKey(id string) string

func CLUSScanStateWorkloadKey

func CLUSScanStateWorkloadKey(id string) string

func CLUSScannerKey

func CLUSScannerKey(id string) string

func CLUSScannerKey2ID

func CLUSScannerKey2ID(key string) string

func CLUSScannerStatsKey

func CLUSScannerStatsKey(id string) string

func CLUSServerKey

func CLUSServerKey(name string) string

func CLUSThreatLogKey

func CLUSThreatLogKey(hostID string, devID string) string

func CLUSUniconfAgentKey

func CLUSUniconfAgentKey(target, id string) string

func CLUSUniconfControllerKey

func CLUSUniconfControllerKey(target, id string) string

func CLUSUniconfKey2ID

func CLUSUniconfKey2ID(key string) string

func CLUSUniconfKey2Subject

func CLUSUniconfKey2Subject(key string) string

func CLUSUniconfTargetStore

func CLUSUniconfTargetStore(target string) string

uniconf

func CLUSUniconfWorkloadKey

func CLUSUniconfWorkloadKey(target, id string) string

func CLUSUserKey

func CLUSUserKey(username string) string

func CLUSUserRoleKey

func CLUSUserRoleKey(name string) string

///// For custom roles

func CLUSVulnerabilityKey2Type

func CLUSVulnerabilityKey2Type(key string) string

func CLUSVulnerabilityProfileKey

func CLUSVulnerabilityProfileKey(name string) string

func CLUSVulnerabilityProfileKey2Name

func CLUSVulnerabilityProfileKey2Name(key string) string

func CLUSWafGroupConfigKey

func CLUSWafGroupConfigKey(group string) string

func CLUSWafGroupKey2Name

func CLUSWafGroupKey2Name(key string) string

func CLUSWafRuleConfigKey

func CLUSWafRuleConfigKey(sensor string) string

func CLUSWafRuleKey

func CLUSWafRuleKey(sensor string) string

func CLUSWafRuleKey2Name

func CLUSWafRuleKey2Name(key string) string

func CLUSWorkloadHostStore

func CLUSWorkloadHostStore(hostID string) string

Host ID is included in the workload key to helps us retrieve all workloads on a host quickly. Without it, we have to loop through all workload keys; using agent ID is also problematic, as a new agent has no idea of the agent ID when the workload was created.

func CLUSWorkloadKey

func CLUSWorkloadKey(hostID string, wlID string) string

func CLUSWorkloadKey2ID

func CLUSWorkloadKey2ID(key string) string

func EqualMatch

func EqualMatch(match, value string) bool

func IsGroupMember

func IsGroupMember(group *CLUSGroup, workload *CLUSWorkload) bool

func IsSvcIpGroupMember

func IsSvcIpGroupMember(usergroup *CLUSGroup, svcipgroup *CLUSGroup) bool

func IsSvcIpGroupSelected

func IsSvcIpGroupSelected(svcipgroup *CLUSGroup, selector []CLUSCriteriaEntry) bool

func IsWorkloadSelected

func IsWorkloadSelected(workload *CLUSWorkload, selector []CLUSCriteriaEntry) bool

For criteria of same type, apply 'or' if there is at least one positive match;

apply 'and' if all are negative match;

For different criteria type, apply 'and'

func QuarantineReasonEvent

func QuarantineReasonEvent(event string, id uint32) string

func RegisterControllerAgentServiceServer

func RegisterControllerAgentServiceServer(s *grpc.Server, srv ControllerAgentServiceServer)

func RegisterControllerCapServiceServer

func RegisterControllerCapServiceServer(s *grpc.Server, srv ControllerCapServiceServer)

func RegisterControllerCtrlServiceServer

func RegisterControllerCtrlServiceServer(s *grpc.Server, srv ControllerCtrlServiceServer)

func RegisterControllerScanServiceServer

func RegisterControllerScanServiceServer(s *grpc.Server, srv ControllerScanServiceServer)

func RegisterControllerUpgradeServiceServer

func RegisterControllerUpgradeServiceServer(s *grpc.Server, srv ControllerUpgradeServiceServer)

func RegisterEnforcerCapServiceServer

func RegisterEnforcerCapServiceServer(s *grpc.Server, srv EnforcerCapServiceServer)

func RegisterEnforcerScanServiceServer

func RegisterEnforcerScanServiceServer(s *grpc.Server, srv EnforcerScanServiceServer)

func RegisterEnforcerServiceServer

func RegisterEnforcerServiceServer(s *grpc.Server, srv EnforcerServiceServer)

func RegisterScannerServiceServer

func RegisterScannerServiceServer(s *grpc.Server, srv ScannerServiceServer)

Types

type AccessObject

type AccessObject interface {
	GetDomain(f GetAccessObjectFunc) ([]string, []string) // ([]string, []string)
}

type BenchStatus

type BenchStatus int
const (
	BenchStatusIdle BenchStatus = iota
	BenchStatusScheduled
	BenchStatusRunning
	BenchStatusFinished
	BenchStatusNotSupport
	BenchStatusDockerHostFail
	BenchStatusDockerContainerFail
	BenchStatusKubeMasterFail
	BenchStatusKubeWorkerFail
	BenchStatusMax
)

type BenchType

type BenchType string
const (
	BenchDockerHost      BenchType = "docker_host"
	BenchDockerContainer BenchType = "docker_container" // all containers report
	BenchKubeMaster      BenchType = "kube_master"
	BenchKubeWorker      BenchType = "kube_worker"
	BenchContainer       BenchType = "container" // per-container report
	BenchCustomHost      BenchType = "custom_host"
	BenchCustomContainer BenchType = "custom_container"
	BenchContainerSecret BenchType = "container_secret"
	BenchContainerSetID  BenchType = "container_setid"
)

type CLUSAWSAccountKey

type CLUSAWSAccountKey struct {
	ID              string `json:"id"`
	AccessKeyID     string `json:"access_key_id,cloak"`
	SecretAccessKey string `json:"secret_access_key,cloak"`
	Region          string `json:"region"`
}

type CLUSActivePwdProfileConfig

type CLUSActivePwdProfileConfig struct {
	Name string `json:"name"` // name of the active password profile to use for the whole cluster
}

type CLUSAdmCtrlState

type CLUSAdmCtrlState struct {
	Enable      bool   `json:"enable"`
	Uri         string `json:"uri"`           // for neuvector-validating-admission-webhook.neuvector.svc webhook
	NvStatusUri string `json:"nv_status_uri"` // for neuvector-validating-status-webhook.neuvector.svc webhook
}

type CLUSAdmRuleCriterion

type CLUSAdmRuleCriterion struct {
	Name        string                  `json:"name"`
	Op          string                  `json:"op"`
	Value       string                  `json:"value"`
	ValueSlice  []string                `json:"value_slice"`
	SubCriteria []*CLUSAdmRuleCriterion `json:"sub_criteria,omitempty"`
}

type CLUSAdmissionCert

type CLUSAdmissionCert struct {
	CN         string `json:"cn"`
	CaKeyPath  string `json:"ca_key_path"`
	CaKey      []byte `json:"ca_key"`
	CaCertPath string `json:"ca_cert_path"`
	CaCert     []byte `json:"ca_cert"`
	KeyPath    string `json:"key_path"`
	Key        []byte `json:"key"`
	CertPath   string `json:"cert_path"`
	Cert       []byte `json:"cert"`
}

type CLUSAdmissionCertCloaked

type CLUSAdmissionCertCloaked struct {
	CN         string `json:"cn"`
	CaKeyPath  string `json:"ca_key_path"`       // obsolete, use const AdmCAKeyPath
	CaKey      []byte `json:"ca_key"`            // not written to kv
	CaCertPath string `json:"ca_cert_path"`      // obsolete, use const AdmCACertPath
	CaCert     []byte `json:"ca_cert"`           // not written to kv
	KeyPath    string `json:"key_path"`          // obsolete, calc at runtime like "neuvector-svc-admission-webhook.{ns}.svc.key.pem"
	Key        []byte `json:"key"`               // not written to kv
	CertPath   string `json:"cert_path"`         // obsolete, calc at runtime like "neuvector-svc-admission-webhook.{ns}.svc.cert.pem"
	Cert       []byte `json:"cert"`              // not written to kv
	CaKeyNew   string `json:"ca_key_new,cloak"`  // for v.3.0
	CaCertNew  string `json:"ca_cert_new,cloak"` // for v.3.0
	KeyNew     string `json:"key_new,cloak"`     // for v.3.0
	CertNew    string `json:"cert_new,cloak"`    // for v.3.0, cert for webhook server
	Cloaked    bool   `json:"cloaked"`
}

type CLUSAdmissionRequest

type CLUSAdmissionRequest struct {
	ID         string `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
	HostID     string `protobuf:"bytes,2,opt,name=HostID" json:"HostID,omitempty"`
	HostCPUs   int64  `protobuf:"varint,3,opt,name=HostCPUs" json:"HostCPUs,omitempty"`
	HostMemory int64  `protobuf:"varint,4,opt,name=HostMemory" json:"HostMemory,omitempty"`
}

func (*CLUSAdmissionRequest) Descriptor

func (*CLUSAdmissionRequest) Descriptor() ([]byte, []int)

func (*CLUSAdmissionRequest) GetHostCPUs

func (m *CLUSAdmissionRequest) GetHostCPUs() int64

func (*CLUSAdmissionRequest) GetHostID

func (m *CLUSAdmissionRequest) GetHostID() string

func (*CLUSAdmissionRequest) GetHostMemory

func (m *CLUSAdmissionRequest) GetHostMemory() int64

func (*CLUSAdmissionRequest) GetID

func (m *CLUSAdmissionRequest) GetID() string

func (*CLUSAdmissionRequest) ProtoMessage

func (*CLUSAdmissionRequest) ProtoMessage()

func (*CLUSAdmissionRequest) Reset

func (m *CLUSAdmissionRequest) Reset()

func (*CLUSAdmissionRequest) String

func (m *CLUSAdmissionRequest) String() string

type CLUSAdmissionResponse

type CLUSAdmissionResponse struct {
	Allowed bool   `protobuf:"varint,1,opt,name=Allowed" json:"Allowed,omitempty"`
	Reason  string `protobuf:"bytes,2,opt,name=Reason" json:"Reason,omitempty"`
}

func (*CLUSAdmissionResponse) Descriptor

func (*CLUSAdmissionResponse) Descriptor() ([]byte, []int)

func (*CLUSAdmissionResponse) GetAllowed

func (m *CLUSAdmissionResponse) GetAllowed() bool

func (*CLUSAdmissionResponse) GetReason

func (m *CLUSAdmissionResponse) GetReason() string

func (*CLUSAdmissionResponse) ProtoMessage

func (*CLUSAdmissionResponse) ProtoMessage()

func (*CLUSAdmissionResponse) Reset

func (m *CLUSAdmissionResponse) Reset()

func (*CLUSAdmissionResponse) String

func (m *CLUSAdmissionResponse) String() string

type CLUSAdmissionRule

type CLUSAdmissionRule struct {
	ID       uint32                  `json:"id"`
	Category string                  `json:"category"`
	Comment  string                  `json:"comment"`
	Criteria []*CLUSAdmRuleCriterion `json:"criteria"`
	Disable  bool                    `json:"disable"`
	Critical bool                    `json:"critical"`
	CfgType  TCfgType                `json:"cfg_type"`
	RuleType string                  `json:"rule_type"` // "exception", "deny"
}

func (*CLUSAdmissionRule) GetDomain

func (o *CLUSAdmissionRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAdmissionRules

type CLUSAdmissionRules struct {
	RuleMap   map[uint32]*CLUSAdmissionRule `json:"rule_map"` // key is rule ID
	RuleHeads []*CLUSRuleHead               `json:"rule_heads"`
}

type CLUSAdmissionState

type CLUSAdmissionState struct {
	Enable         bool                         `json:"enable"`
	Mode           string                       `json:"mode"`
	DefaultAction  string                       `json:"default_action"`
	AdmClientMode  string                       `json:"adm_client_mode"`
	FailurePolicy  string                       `json:"failure_policy"`  // empty means "Ignore". it's only for neuvector-svc-admission-webhook
	TimeoutSeconds int32                        `json:"timeout_seconds"` // 0 means 30
	NvDeployStatus map[string]bool              `json:"nvDeployStatus"`  // key is NvDeploymentName/NvAdmSvcName/NvCrdSvcName. value being true means the k8s resource exists
	CtrlStates     map[string]*CLUSAdmCtrlState `json:"ctrl_states"`     // key is NvAdmValidateType
	CfgType        TCfgType                     `json:"cfg_type"`
}

NvDeployStatus field is only for object/config/admission_control/default/state only

func (*CLUSAdmissionState) GetDomain

func (o *CLUSAdmissionState) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAdmissionStats

type CLUSAdmissionStats struct {
	K8sAllowedRequests       uint64 `json:"k8s_allowed_requests"`
	K8sDeniedRequests        uint64 `json:"k8s_denied_requests"`
	K8sErroneousRequests     uint64 `json:"k8s_erroneous_requests"`
	K8sIgnoredRequests       uint64 `json:"k8s_ignored_requests"`
	K8sProcessingRequests    int64  `json:"k8s_processing_requests"`
	JenkinsAllowedRequests   uint64 `json:"jenkins_allowed_requests"`   // obsolete
	JenkinsDeniedRequests    uint64 `json:"jenkins_denied_requests"`    // obsolete
	JenkinsErroneousRequests uint64 `json:"jenkins_erroneous_requests"` // obsolete
}

func (*CLUSAdmissionStats) GetDomain

func (o *CLUSAdmissionStats) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAgent

type CLUSAgent struct {
	CLUSDevice
}

func (*CLUSAgent) GetDomain

func (o *CLUSAgent) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAgentConfig

type CLUSAgentConfig struct {
	Debug                []string `json:"debug,omitempty"`
	DisableNvProtectMode bool     `json:"disable_nvprotect"`
	DisableKvCongestCtl  bool     `json:"disable_kvcctl"`
}

func (*CLUSAgentConfig) GetDomain

func (o *CLUSAgentConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSApp

type CLUSApp struct {
	CLUSProtoPort
	Proto       uint32 `json:"protocol"`
	Server      uint32 `json:"server"`
	Application uint32 `json:"application"`
}

type CLUSApplicationListDummy

type CLUSApplicationListDummy struct{} // dummy type just for access control checking purpose

func (*CLUSApplicationListDummy) GetDomain

type CLUSAuditBenchItem

type CLUSAuditBenchItem struct {
	Level     string `json:"level"`
	TestNum   string `json:"test_num"`
	Msg       string `json:"message"`
	Group     string `json:"group"`
	Profile   string `json:"profile"`
	Scored    bool   `json:"scored"`
	Automated bool   `json:"automated"`
}

type CLUSAuditLog

type CLUSAuditLog struct {
	ID           TLogAudit            `json:"id"`
	HostID       string               `json:"host_id"`
	HostName     string               `json:"host_name"`
	AgentID      string               `json:"agent_id"`
	AgentName    string               `json:"agent_name"`
	WorkloadID   string               `json:"workload_id"`
	WorkloadName string               `json:"workload_name"`
	Count        uint32               `json:"count"`
	ReportedAt   time.Time            `json:"reported_at"`
	Items        []CLUSAuditBenchItem `json:"items"`
	Props        map[string]string    `json:"props"`
	Region       string               `json:"region,omitempty"`
	ProjectName  string               `json:"project_name,omitempty"`
}

type CLUSAwsFuncPermission

type CLUSAwsFuncPermission struct {
	AttachedPolicy bool     `json:"aws_attached_policy"`
	AllowedDetail  []string `json:"allowed_detail"`
}

type CLUSAwsFuncScanInput

type CLUSAwsFuncScanInput struct {
	FuncName string `json:"func_name"`
	RoleName string `json:"role_name"`
	Region   string `json:"region"`
	FuncLink string `json:"func_link"`
	Arn      string `json:"arn"`
	NvSecID  string `json:"nv_sec_id"`
	Version  string `json:"version"`
}

type CLUSAwsFuncScanOutput

type CLUSAwsFuncScanOutput struct {
	AllowedRes map[string]CLUSAwsFuncPermission `json:"allowd_res"` // key: policyName  value: list of resource
	ReqRes     map[string][]string              `json:"req_res"`    // key: policyName  value: list of resource
	ScanState  string                           `json:"scan_state"`
	ScanError  string                           `json:"scan_error"`
	ScanResult CLUSScanReport                   `json:"scan_result"`
	Arn        string                           `json:"arn"`
	NvSecID    string                           `json:"nvsecid"`
	Version    string                           `json:"version"`
}

type CLUSAwsFuncScanOutputList

type CLUSAwsFuncScanOutputList struct {
	AwsLambdaRecord [MaxLambdaHistory]*CLUSAwsFuncScanOutput `json:"aws_lambda_record"`
	SlsUploadOutput *CLUSAwsFuncScanOutput                   `json:"sls_upload_output"`
}

func (*CLUSAwsFuncScanOutputList) GetDomain

type CLUSAwsLambdaFunc

type CLUSAwsLambdaFunc struct {
	Name        string `json:"func_name"`
	CodeSha256  string `json:"code_sha256"`
	Status      string `json:"status"`
	ScanResult  string `json:"scan_result"`
	PermitLevel string `json:"PermitLevel"`
	Role        string `json:"role"`
	Arn         string `json:"arn"`
	NvSecID     string `json:"nv_sec_id"`
	Version     string `json:"version"`
	HighVuls    int    `json:"high"`
	MedVuls     int    `json:"medium"`
}

type CLUSAwsLambdaRegionRes

type CLUSAwsLambdaRegionRes struct {
	Region     string                        `json:"region"`
	Status     string                        `json:"status"`
	LambdaFunc map[string]*CLUSAwsLambdaFunc `json:"lambda_func"`
}

type CLUSAwsLambdaRes

type CLUSAwsLambdaRes struct {
	Status      string                             `json:"status"`
	ResourceMap map[string]*CLUSAwsLambdaRegionRes `json:"aws_region_resource"`
}

type CLUSAwsProjectCfg

type CLUSAwsProjectCfg struct {
	AccID       string   `json:"accid,cloak"`
	AccKey      string   `json:"acckey,cloak"`
	ProjectName string   `json:"projectname"`
	RegionList  []string `json:"region_list"`
}

func (*CLUSAwsProjectCfg) GetDomain

func (o *CLUSAwsProjectCfg) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAwsResource

type CLUSAwsResource struct {
	AccID       string            `json:"accid,cloak"`
	AccKey      string            `json:"acckey,cloak"`
	ProjectName string            `json:"projectname"`
	RegionList  []string          `json:"region_list"`
	ResLambda   *CLUSAwsLambdaRes `json:"aws_lambda_resource"`
}

func (*CLUSAwsResource) GetDomain

func (o *CLUSAwsResource) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSAwsScanInput

type CLUSAwsScanInput struct {
	AccID            string                  `json:"accid,cloak"`
	AccKey           string                  `json:"acckey,cloak"`
	ProjectName      string                  `json:"projectname"`
	ScanFunctionList []*CLUSAwsFuncScanInput `json:"scanFunctionList"`
	DelFunctionList  []*CLUSAwsFuncScanInput `json:"DelFunctionList"`
}

type CLUSBenchItem

type CLUSBenchItem struct {
	Level       string   `json:"level"`
	TestNum     string   `json:"test_number"`
	Header      string   `json:"header"`
	Message     []string `json:"message"`
	Remediation string   `json:"remediation"`
	Scored      bool     `json:"scored"`
	Automated   bool     `json:"automated"`
	Profile     string   `json:"profile"`
	Group       string   `json:"group"`
}

type CLUSBenchReport

type CLUSBenchReport struct {
	Status  BenchStatus      `json:"status"`
	RunAt   time.Time        `json:"run_at"`
	Version string           `json:"version"`
	Items   []*CLUSBenchItem `json:"items"`
}

func (*CLUSBenchReport) GetDomain

func (o *CLUSBenchReport) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSBenchSecretReport

type CLUSBenchSecretReport struct {
	Status BenchStatus     `json:"status"`
	RunAt  time.Time       `json:"run_at"`
	Items  []CLUSSecretLog `json:"items"`
}

CLUSBenchSecretReport provides reports at REST layer

type CLUSBoolean

type CLUSBoolean struct {
	Value bool `protobuf:"varint,1,opt,name=Value" json:"Value,omitempty"`
}

func (*CLUSBoolean) Descriptor

func (*CLUSBoolean) Descriptor() ([]byte, []int)

func (*CLUSBoolean) GetValue

func (m *CLUSBoolean) GetValue() bool

func (*CLUSBoolean) ProtoMessage

func (*CLUSBoolean) ProtoMessage()

func (*CLUSBoolean) Reset

func (m *CLUSBoolean) Reset()

func (*CLUSBoolean) String

func (m *CLUSBoolean) String() string

type CLUSCIScanDummy

type CLUSCIScanDummy struct{} // dummy type just for access control checking purpose

func (*CLUSCIScanDummy) GetDomain

func (o *CLUSCIScanDummy) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSComplianceProfile

type CLUSComplianceProfile struct {
	Name          string                                `json:"name"`
	DisableSystem bool                                  `json:"disable_system"`
	Entries       map[string]CLUSComplianceProfileEntry `json:"entries"`
}

func (*CLUSComplianceProfile) GetDomain

func (o *CLUSComplianceProfile) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSComplianceProfileEntry

type CLUSComplianceProfileEntry struct {
	TestNum string   `json:"test_num"`
	Tags    []string `json:"tags"`
}

type CLUSConnection

type CLUSConnection struct {
	AgentID      string `protobuf:"bytes,1,opt,name=AgentID" json:"AgentID,omitempty"`
	HostID       string `protobuf:"bytes,2,opt,name=HostID" json:"HostID,omitempty"`
	ClientWL     string `protobuf:"bytes,3,opt,name=ClientWL" json:"ClientWL,omitempty"`
	ServerWL     string `protobuf:"bytes,4,opt,name=ServerWL" json:"ServerWL,omitempty"`
	ClientIP     []byte `protobuf:"bytes,5,opt,name=ClientIP,proto3" json:"ClientIP,omitempty"`
	ServerIP     []byte `protobuf:"bytes,6,opt,name=ServerIP,proto3" json:"ServerIP,omitempty"`
	Scope        string `protobuf:"bytes,7,opt,name=Scope" json:"Scope,omitempty"`
	Network      string `protobuf:"bytes,8,opt,name=Network" json:"Network,omitempty"`
	ClientPort   uint32 `protobuf:"varint,9,opt,name=ClientPort" json:"ClientPort,omitempty"`
	ServerPort   uint32 `protobuf:"varint,10,opt,name=ServerPort" json:"ServerPort,omitempty"`
	IPProto      uint32 `protobuf:"varint,11,opt,name=IPProto" json:"IPProto,omitempty"`
	Application  uint32 `protobuf:"varint,12,opt,name=Application" json:"Application,omitempty"`
	Bytes        uint64 `protobuf:"varint,13,opt,name=Bytes" json:"Bytes,omitempty"`
	Sessions     uint32 `protobuf:"varint,14,opt,name=Sessions" json:"Sessions,omitempty"`
	FirstSeenAt  uint32 `protobuf:"varint,15,opt,name=FirstSeenAt" json:"FirstSeenAt,omitempty"`
	LastSeenAt   uint32 `protobuf:"varint,16,opt,name=LastSeenAt" json:"LastSeenAt,omitempty"`
	ThreatID     uint32 `protobuf:"varint,17,opt,name=ThreatID" json:"ThreatID,omitempty"`
	Severity     uint32 `protobuf:"varint,18,opt,name=Severity" json:"Severity,omitempty"`
	PolicyAction uint32 `protobuf:"varint,19,opt,name=PolicyAction" json:"PolicyAction,omitempty"`
	Ingress      bool   `protobuf:"varint,20,opt,name=Ingress" json:"Ingress,omitempty"`
	ExternalPeer bool   `protobuf:"varint,21,opt,name=ExternalPeer" json:"ExternalPeer,omitempty"`
	LocalPeer    bool   `protobuf:"varint,22,opt,name=LocalPeer" json:"LocalPeer,omitempty"`
	PolicyId     uint32 `protobuf:"varint,23,opt,name=PolicyId" json:"PolicyId,omitempty"`
	Violates     uint32 `protobuf:"varint,24,opt,name=Violates" json:"Violates,omitempty"`
	LogUID       string `protobuf:"bytes,25,opt,name=LogUID" json:"LogUID,omitempty"`
	Xff          bool   `protobuf:"varint,26,opt,name=Xff" json:"Xff,omitempty"`
	SvcExtIP     bool   `protobuf:"varint,27,opt,name=SvcExtIP" json:"SvcExtIP,omitempty"`
	ToSidecar    bool   `protobuf:"varint,28,opt,name=ToSidecar" json:"ToSidecar,omitempty"`
}

func (*CLUSConnection) Descriptor

func (*CLUSConnection) Descriptor() ([]byte, []int)

func (*CLUSConnection) GetAgentID

func (m *CLUSConnection) GetAgentID() string

func (*CLUSConnection) GetApplication

func (m *CLUSConnection) GetApplication() uint32

func (*CLUSConnection) GetBytes

func (m *CLUSConnection) GetBytes() uint64

func (*CLUSConnection) GetClientIP

func (m *CLUSConnection) GetClientIP() []byte

func (*CLUSConnection) GetClientPort

func (m *CLUSConnection) GetClientPort() uint32

func (*CLUSConnection) GetClientWL

func (m *CLUSConnection) GetClientWL() string

func (*CLUSConnection) GetExternalPeer

func (m *CLUSConnection) GetExternalPeer() bool

func (*CLUSConnection) GetFirstSeenAt

func (m *CLUSConnection) GetFirstSeenAt() uint32

func (*CLUSConnection) GetHostID

func (m *CLUSConnection) GetHostID() string

func (*CLUSConnection) GetIPProto

func (m *CLUSConnection) GetIPProto() uint32

func (*CLUSConnection) GetIngress

func (m *CLUSConnection) GetIngress() bool

func (*CLUSConnection) GetLastSeenAt

func (m *CLUSConnection) GetLastSeenAt() uint32

func (*CLUSConnection) GetLocalPeer

func (m *CLUSConnection) GetLocalPeer() bool

func (*CLUSConnection) GetLogUID

func (m *CLUSConnection) GetLogUID() string

func (*CLUSConnection) GetNetwork

func (m *CLUSConnection) GetNetwork() string

func (*CLUSConnection) GetPolicyAction

func (m *CLUSConnection) GetPolicyAction() uint32

func (*CLUSConnection) GetPolicyId

func (m *CLUSConnection) GetPolicyId() uint32

func (*CLUSConnection) GetScope

func (m *CLUSConnection) GetScope() string

func (*CLUSConnection) GetServerIP

func (m *CLUSConnection) GetServerIP() []byte

func (*CLUSConnection) GetServerPort

func (m *CLUSConnection) GetServerPort() uint32

func (*CLUSConnection) GetServerWL

func (m *CLUSConnection) GetServerWL() string

func (*CLUSConnection) GetSessions

func (m *CLUSConnection) GetSessions() uint32

func (*CLUSConnection) GetSeverity

func (m *CLUSConnection) GetSeverity() uint32

func (*CLUSConnection) GetSvcExtIP

func (m *CLUSConnection) GetSvcExtIP() bool

func (*CLUSConnection) GetThreatID

func (m *CLUSConnection) GetThreatID() uint32

func (*CLUSConnection) GetToSidecar

func (m *CLUSConnection) GetToSidecar() bool

func (*CLUSConnection) GetViolates

func (m *CLUSConnection) GetViolates() uint32

func (*CLUSConnection) GetXff

func (m *CLUSConnection) GetXff() bool

func (*CLUSConnection) ProtoMessage

func (*CLUSConnection) ProtoMessage()

func (*CLUSConnection) Reset

func (m *CLUSConnection) Reset()

func (*CLUSConnection) String

func (m *CLUSConnection) String() string

type CLUSConnectionArray

type CLUSConnectionArray struct {
	Connections []*CLUSConnection `protobuf:"bytes,1,rep,name=Connections" json:"Connections,omitempty"`
}

func (*CLUSConnectionArray) Descriptor

func (*CLUSConnectionArray) Descriptor() ([]byte, []int)

func (*CLUSConnectionArray) GetConnections

func (m *CLUSConnectionArray) GetConnections() []*CLUSConnection

func (*CLUSConnectionArray) ProtoMessage

func (*CLUSConnectionArray) ProtoMessage()

func (*CLUSConnectionArray) Reset

func (m *CLUSConnectionArray) Reset()

func (*CLUSConnectionArray) String

func (m *CLUSConnectionArray) String() string

type CLUSContainerLogReq

type CLUSContainerLogReq struct {
	Id    string `protobuf:"bytes,1,opt,name=Id" json:"Id,omitempty"`
	Start int32  `protobuf:"varint,2,opt,name=Start" json:"Start,omitempty"`
	Limit uint32 `protobuf:"varint,3,opt,name=Limit" json:"Limit,omitempty"`
}

func (*CLUSContainerLogReq) Descriptor

func (*CLUSContainerLogReq) Descriptor() ([]byte, []int)

func (*CLUSContainerLogReq) GetId

func (m *CLUSContainerLogReq) GetId() string

func (*CLUSContainerLogReq) GetLimit

func (m *CLUSContainerLogReq) GetLimit() uint32

func (*CLUSContainerLogReq) GetStart

func (m *CLUSContainerLogReq) GetStart() int32

func (*CLUSContainerLogReq) ProtoMessage

func (*CLUSContainerLogReq) ProtoMessage()

func (*CLUSContainerLogReq) Reset

func (m *CLUSContainerLogReq) Reset()

func (*CLUSContainerLogReq) String

func (m *CLUSContainerLogReq) String() string

type CLUSContainerLogRes

type CLUSContainerLogRes struct {
	LogZb []byte `protobuf:"bytes,1,opt,name=LogZb,proto3" json:"LogZb,omitempty"`
}

func (*CLUSContainerLogRes) Descriptor

func (*CLUSContainerLogRes) Descriptor() ([]byte, []int)

func (*CLUSContainerLogRes) GetLogZb

func (m *CLUSContainerLogRes) GetLogZb() []byte

func (*CLUSContainerLogRes) ProtoMessage

func (*CLUSContainerLogRes) ProtoMessage()

func (*CLUSContainerLogRes) Reset

func (m *CLUSContainerLogRes) Reset()

func (*CLUSContainerLogRes) String

func (m *CLUSContainerLogRes) String() string

type CLUSController

type CLUSController struct {
	CLUSDevice
	Leader            bool   `json:"leader"`
	OrchConnStatus    string `json:"orch_conn_status"`
	OrchConnLastError string `json:"orch_conn_last_error"`
}

func (*CLUSController) GetDomain

func (o *CLUSController) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSControllerConfig

type CLUSControllerConfig struct {
	Debug []string `json:"debug,omitempty"`
}

func (*CLUSControllerConfig) GetDomain

func (o *CLUSControllerConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSControllerCounter

type CLUSControllerCounter struct {
	GraphNodes uint32 `protobuf:"varint,1,opt,name=GraphNodes" json:"GraphNodes,omitempty"`
	GoRoutines uint32 `protobuf:"varint,2,opt,name=GoRoutines" json:"GoRoutines,omitempty"`
	Lsof       []byte `protobuf:"bytes,3,opt,name=Lsof,proto3" json:"Lsof,omitempty"`
	PS         []byte `protobuf:"bytes,4,opt,name=PS,proto3" json:"PS,omitempty"`
	ScanTasks  uint32 `protobuf:"varint,5,opt,name=ScanTasks" json:"ScanTasks,omitempty"`
}

func (*CLUSControllerCounter) Descriptor

func (*CLUSControllerCounter) Descriptor() ([]byte, []int)

func (*CLUSControllerCounter) GetGoRoutines

func (m *CLUSControllerCounter) GetGoRoutines() uint32

func (*CLUSControllerCounter) GetGraphNodes

func (m *CLUSControllerCounter) GetGraphNodes() uint32

func (*CLUSControllerCounter) GetLsof

func (m *CLUSControllerCounter) GetLsof() []byte

func (*CLUSControllerCounter) GetPS

func (m *CLUSControllerCounter) GetPS() []byte

func (*CLUSControllerCounter) GetScanTasks

func (m *CLUSControllerCounter) GetScanTasks() uint32

func (*CLUSControllerCounter) ProtoMessage

func (*CLUSControllerCounter) ProtoMessage()

func (*CLUSControllerCounter) Reset

func (m *CLUSControllerCounter) Reset()

func (*CLUSControllerCounter) String

func (m *CLUSControllerCounter) String() string

type CLUSCrdEventRecord

type CLUSCrdEventRecord struct {
	CrdEventRecord []string
}

type CLUSCrdFileRule

type CLUSCrdFileRule struct {
	Filter    string   `json:"filter"`
	Recursive bool     `json:"recursive"`
	Behavior  string   `json:"behavior"`
	App       []string `json:"app"`
}

type CLUSCrdProcessProfile

type CLUSCrdProcessProfile struct {
	Baseline string `json:"baseline"` // "default" or "shield", for process profile
}

type CLUSCrdProcessRule

type CLUSCrdProcessRule struct {
	Name            string `json:"name"`
	Path            string `json:"path"`
	Action          string `json:"action"`
	AllowFileUpdate bool   `json:"allow_update"`
}

type CLUSCrdRecord

type CLUSCrdRecord struct {
	CrdRecord *admissionv1beta1.AdmissionReview
}

type CLUSCrdSecurityRule

type CLUSCrdSecurityRule struct {
	Name            string                `json:"name"`
	Groups          []string              `json:"groups"`
	Rules           map[string]uint32     `json:"rules"`
	ProfileName     string                `json:"profile_name"`
	ProfileMode     string                `json:"profile_mode"`
	ProcessProfile  CLUSCrdProcessProfile `json:"process_profile"`
	ProcessRules    []CLUSCrdProcessRule  `json:"process_rules"`
	FileRules       []CLUSCrdFileRule     `json:"file_rules"`
	WafGroupSensors []string              `json:"waf_group_sensors"` // waf sensors associated with the target group
	AdmCtrlRules    map[string]uint32     `json:"admctrl_rules"`     // map key is the generated name of admission control rule, valud is assigned rule id
	WafSensor       string                `json:"waf_sensor"`        // waf sensor defined in this crd security rule
}

type CLUSCriteriaEntry

type CLUSCriteriaEntry struct {
	Key   string `json:"key"`
	Value string `json:"value"`
	Op    string `json:"op"`
}

type CLUSCtrlVersion

type CLUSCtrlVersion struct {
	CtrlVersion string `json:"version"`
	KVVersion   string `json:"kv_version"`
}

type CLUSCustomCheck

type CLUSCustomCheck struct {
	Name   string `json:"name"`
	Script string `json:"script"`
}

func (*CLUSCustomCheck) GetDomain

func (o *CLUSCustomCheck) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSCustomCheckGroup

type CLUSCustomCheckGroup struct {
	Scripts []*CLUSCustomCheck `json:"scripts"`
}

type CLUSDatapathCounter

type CLUSDatapathCounter struct {
	RXPackets           uint64   `protobuf:"varint,1,opt,name=RXPackets" json:"RXPackets,omitempty"`
	RXDropPackets       uint64   `protobuf:"varint,2,opt,name=RXDropPackets" json:"RXDropPackets,omitempty"`
	TXPackets           uint64   `protobuf:"varint,3,opt,name=TXPackets" json:"TXPackets,omitempty"`
	TXDropPackets       uint64   `protobuf:"varint,4,opt,name=TXDropPackets" json:"TXDropPackets,omitempty"`
	ErrorPackets        uint64   `protobuf:"varint,5,opt,name=ErrorPackets" json:"ErrorPackets,omitempty"`
	NoWorkloadPackets   uint64   `protobuf:"varint,6,opt,name=NoWorkloadPackets" json:"NoWorkloadPackets,omitempty"`
	IPv4Packets         uint64   `protobuf:"varint,7,opt,name=IPv4Packets" json:"IPv4Packets,omitempty"`
	IPv6Packets         uint64   `protobuf:"varint,8,opt,name=IPv6Packets" json:"IPv6Packets,omitempty"`
	TCPPackets          uint64   `protobuf:"varint,9,opt,name=TCPPackets" json:"TCPPackets,omitempty"`
	TCPNoSessionPackets uint64   `protobuf:"varint,10,opt,name=TCPNoSessionPackets" json:"TCPNoSessionPackets,omitempty"`
	UDPPackets          uint64   `protobuf:"varint,11,opt,name=UDPPackets" json:"UDPPackets,omitempty"`
	ICMPPackets         uint64   `protobuf:"varint,12,opt,name=ICMPPackets" json:"ICMPPackets,omitempty"`
	OtherPackets        uint64   `protobuf:"varint,13,opt,name=OtherPackets" json:"OtherPackets,omitempty"`
	Fragments           uint64   `protobuf:"varint,14,opt,name=Fragments" json:"Fragments,omitempty"`
	TimeoutFragments    uint64   `protobuf:"varint,15,opt,name=TimeoutFragments" json:"TimeoutFragments,omitempty"`
	TotalSessions       uint64   `protobuf:"varint,16,opt,name=TotalSessions" json:"TotalSessions,omitempty"`
	TCPSessions         uint64   `protobuf:"varint,17,opt,name=TCPSessions" json:"TCPSessions,omitempty"`
	UDPSessions         uint64   `protobuf:"varint,18,opt,name=UDPSessions" json:"UDPSessions,omitempty"`
	ICMPSessions        uint64   `protobuf:"varint,19,opt,name=ICMPSessions" json:"ICMPSessions,omitempty"`
	IPSessions          uint64   `protobuf:"varint,20,opt,name=IPSessions" json:"IPSessions,omitempty"`
	DropMeters          uint64   `protobuf:"varint,21,opt,name=DropMeters" json:"DropMeters,omitempty"`
	ProxyMeters         uint64   `protobuf:"varint,22,opt,name=ProxyMeters" json:"ProxyMeters,omitempty"`
	CurMeters           uint64   `protobuf:"varint,23,opt,name=CurMeters" json:"CurMeters,omitempty"`
	CurLogCaches        uint64   `protobuf:"varint,24,opt,name=CurLogCaches" json:"CurLogCaches,omitempty"`
	FreedFragments      uint64   `protobuf:"varint,25,opt,name=FreedFragments" json:"FreedFragments,omitempty"`
	Assemblys           uint64   `protobuf:"varint,26,opt,name=Assemblys" json:"Assemblys,omitempty"`
	FreedAssemblys      uint64   `protobuf:"varint,27,opt,name=FreedAssemblys" json:"FreedAssemblys,omitempty"`
	ParserSessions      []uint64 `protobuf:"varint,28,rep,packed,name=ParserSessions" json:"ParserSessions,omitempty"`
	ParserPackets       []uint64 `protobuf:"varint,29,rep,packed,name=ParserPackets" json:"ParserPackets,omitempty"`
	PolicyType1Rules    uint32   `protobuf:"varint,30,opt,name=PolicyType1Rules" json:"PolicyType1Rules,omitempty"`
	PolicyType2Rules    uint32   `protobuf:"varint,31,opt,name=PolicyType2Rules" json:"PolicyType2Rules,omitempty"`
	PolicyDomains       uint32   `protobuf:"varint,32,opt,name=PolicyDomains" json:"PolicyDomains,omitempty"`
	PolicyDomainIPs     uint32   `protobuf:"varint,33,opt,name=PolicyDomainIPs" json:"PolicyDomainIPs,omitempty"`
	GoRoutines          uint32   `protobuf:"varint,34,opt,name=GoRoutines" json:"GoRoutines,omitempty"`
	Lsof                []byte   `protobuf:"bytes,35,opt,name=Lsof,proto3" json:"Lsof,omitempty"`
	PS                  []byte   `protobuf:"bytes,36,opt,name=PS,proto3" json:"PS,omitempty"`
	LimitDropConns      uint64   `protobuf:"varint,37,opt,name=LimitDropConns" json:"LimitDropConns,omitempty"`
	LimitPassConns      uint64   `protobuf:"varint,38,opt,name=LimitPassConns" json:"LimitPassConns,omitempty"`
}

func (*CLUSDatapathCounter) Descriptor

func (*CLUSDatapathCounter) Descriptor() ([]byte, []int)

func (*CLUSDatapathCounter) GetAssemblys

func (m *CLUSDatapathCounter) GetAssemblys() uint64

func (*CLUSDatapathCounter) GetCurLogCaches

func (m *CLUSDatapathCounter) GetCurLogCaches() uint64

func (*CLUSDatapathCounter) GetCurMeters

func (m *CLUSDatapathCounter) GetCurMeters() uint64

func (*CLUSDatapathCounter) GetDropMeters

func (m *CLUSDatapathCounter) GetDropMeters() uint64

func (*CLUSDatapathCounter) GetErrorPackets

func (m *CLUSDatapathCounter) GetErrorPackets() uint64

func (*CLUSDatapathCounter) GetFragments

func (m *CLUSDatapathCounter) GetFragments() uint64

func (*CLUSDatapathCounter) GetFreedAssemblys

func (m *CLUSDatapathCounter) GetFreedAssemblys() uint64

func (*CLUSDatapathCounter) GetFreedFragments

func (m *CLUSDatapathCounter) GetFreedFragments() uint64

func (*CLUSDatapathCounter) GetGoRoutines

func (m *CLUSDatapathCounter) GetGoRoutines() uint32

func (*CLUSDatapathCounter) GetICMPPackets

func (m *CLUSDatapathCounter) GetICMPPackets() uint64

func (*CLUSDatapathCounter) GetICMPSessions

func (m *CLUSDatapathCounter) GetICMPSessions() uint64

func (*CLUSDatapathCounter) GetIPSessions

func (m *CLUSDatapathCounter) GetIPSessions() uint64

func (*CLUSDatapathCounter) GetIPv4Packets

func (m *CLUSDatapathCounter) GetIPv4Packets() uint64

func (*CLUSDatapathCounter) GetIPv6Packets

func (m *CLUSDatapathCounter) GetIPv6Packets() uint64

func (*CLUSDatapathCounter) GetLimitDropConns

func (m *CLUSDatapathCounter) GetLimitDropConns() uint64

func (*CLUSDatapathCounter) GetLimitPassConns

func (m *CLUSDatapathCounter) GetLimitPassConns() uint64

func (*CLUSDatapathCounter) GetLsof

func (m *CLUSDatapathCounter) GetLsof() []byte

func (*CLUSDatapathCounter) GetNoWorkloadPackets

func (m *CLUSDatapathCounter) GetNoWorkloadPackets() uint64

func (*CLUSDatapathCounter) GetOtherPackets

func (m *CLUSDatapathCounter) GetOtherPackets() uint64

func (*CLUSDatapathCounter) GetPS

func (m *CLUSDatapathCounter) GetPS() []byte

func (*CLUSDatapathCounter) GetParserPackets

func (m *CLUSDatapathCounter) GetParserPackets() []uint64

func (*CLUSDatapathCounter) GetParserSessions

func (m *CLUSDatapathCounter) GetParserSessions() []uint64

func (*CLUSDatapathCounter) GetPolicyDomainIPs

func (m *CLUSDatapathCounter) GetPolicyDomainIPs() uint32

func (*CLUSDatapathCounter) GetPolicyDomains

func (m *CLUSDatapathCounter) GetPolicyDomains() uint32

func (*CLUSDatapathCounter) GetPolicyType1Rules

func (m *CLUSDatapathCounter) GetPolicyType1Rules() uint32

func (*CLUSDatapathCounter) GetPolicyType2Rules

func (m *CLUSDatapathCounter) GetPolicyType2Rules() uint32

func (*CLUSDatapathCounter) GetProxyMeters

func (m *CLUSDatapathCounter) GetProxyMeters() uint64

func (*CLUSDatapathCounter) GetRXDropPackets

func (m *CLUSDatapathCounter) GetRXDropPackets() uint64

func (*CLUSDatapathCounter) GetRXPackets

func (m *CLUSDatapathCounter) GetRXPackets() uint64

func (*CLUSDatapathCounter) GetTCPNoSessionPackets

func (m *CLUSDatapathCounter) GetTCPNoSessionPackets() uint64

func (*CLUSDatapathCounter) GetTCPPackets

func (m *CLUSDatapathCounter) GetTCPPackets() uint64

func (*CLUSDatapathCounter) GetTCPSessions

func (m *CLUSDatapathCounter) GetTCPSessions() uint64

func (*CLUSDatapathCounter) GetTXDropPackets

func (m *CLUSDatapathCounter) GetTXDropPackets() uint64

func (*CLUSDatapathCounter) GetTXPackets

func (m *CLUSDatapathCounter) GetTXPackets() uint64

func (*CLUSDatapathCounter) GetTimeoutFragments

func (m *CLUSDatapathCounter) GetTimeoutFragments() uint64

func (*CLUSDatapathCounter) GetTotalSessions

func (m *CLUSDatapathCounter) GetTotalSessions() uint64

func (*CLUSDatapathCounter) GetUDPPackets

func (m *CLUSDatapathCounter) GetUDPPackets() uint64

func (*CLUSDatapathCounter) GetUDPSessions

func (m *CLUSDatapathCounter) GetUDPSessions() uint64

func (*CLUSDatapathCounter) ProtoMessage

func (*CLUSDatapathCounter) ProtoMessage()

func (*CLUSDatapathCounter) Reset

func (m *CLUSDatapathCounter) Reset()

func (*CLUSDatapathCounter) String

func (m *CLUSDatapathCounter) String() string

type CLUSDerivedDlpRule

type CLUSDerivedDlpRule struct {
	Name   string `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Action uint32 `protobuf:"varint,2,opt,name=Action" json:"Action,omitempty"`
}

func (*CLUSDerivedDlpRule) Descriptor

func (*CLUSDerivedDlpRule) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRule) GetAction

func (m *CLUSDerivedDlpRule) GetAction() uint32

func (*CLUSDerivedDlpRule) GetDomain

func (o *CLUSDerivedDlpRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

func (*CLUSDerivedDlpRule) GetName

func (m *CLUSDerivedDlpRule) GetName() string

func (*CLUSDerivedDlpRule) ProtoMessage

func (*CLUSDerivedDlpRule) ProtoMessage()

func (*CLUSDerivedDlpRule) Reset

func (m *CLUSDerivedDlpRule) Reset()

func (*CLUSDerivedDlpRule) String

func (m *CLUSDerivedDlpRule) String() string

type CLUSDerivedDlpRuleArray

type CLUSDerivedDlpRuleArray struct {
	Mode     string                `protobuf:"bytes,1,opt,name=Mode" json:"Mode,omitempty"`
	DefAct   uint32                `protobuf:"varint,2,opt,name=DefAct" json:"DefAct,omitempty"`
	ApplyDir int32                 `protobuf:"varint,3,opt,name=ApplyDir" json:"ApplyDir,omitempty"`
	WlMacs   []string              `protobuf:"bytes,4,rep,name=WlMacs" json:"WlMacs,omitempty"`
	DlpRules []*CLUSDerivedDlpRule `protobuf:"bytes,5,rep,name=DlpRules" json:"DlpRules,omitempty"`
	WafRules []*CLUSDerivedDlpRule `protobuf:"bytes,6,rep,name=WafRules" json:"WafRules,omitempty"`
	Rids     []uint32              `protobuf:"varint,7,rep,packed,name=rids" json:"rids,omitempty"`
	Wafrids  []uint32              `protobuf:"varint,8,rep,packed,name=wafrids" json:"wafrids,omitempty"`
	RuleType string                `protobuf:"bytes,9,opt,name=RuleType" json:"RuleType,omitempty"`
}

func (*CLUSDerivedDlpRuleArray) Descriptor

func (*CLUSDerivedDlpRuleArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleArray) GetApplyDir

func (m *CLUSDerivedDlpRuleArray) GetApplyDir() int32

func (*CLUSDerivedDlpRuleArray) GetDefAct

func (m *CLUSDerivedDlpRuleArray) GetDefAct() uint32

func (*CLUSDerivedDlpRuleArray) GetDlpRules

func (m *CLUSDerivedDlpRuleArray) GetDlpRules() []*CLUSDerivedDlpRule

func (*CLUSDerivedDlpRuleArray) GetMode

func (m *CLUSDerivedDlpRuleArray) GetMode() string

func (*CLUSDerivedDlpRuleArray) GetRids

func (m *CLUSDerivedDlpRuleArray) GetRids() []uint32

func (*CLUSDerivedDlpRuleArray) GetRuleType

func (m *CLUSDerivedDlpRuleArray) GetRuleType() string

func (*CLUSDerivedDlpRuleArray) GetWafRules

func (m *CLUSDerivedDlpRuleArray) GetWafRules() []*CLUSDerivedDlpRule

func (*CLUSDerivedDlpRuleArray) GetWafrids

func (m *CLUSDerivedDlpRuleArray) GetWafrids() []uint32

func (*CLUSDerivedDlpRuleArray) GetWlMacs

func (m *CLUSDerivedDlpRuleArray) GetWlMacs() []string

func (*CLUSDerivedDlpRuleArray) ProtoMessage

func (*CLUSDerivedDlpRuleArray) ProtoMessage()

func (*CLUSDerivedDlpRuleArray) Reset

func (m *CLUSDerivedDlpRuleArray) Reset()

func (*CLUSDerivedDlpRuleArray) String

func (m *CLUSDerivedDlpRuleArray) String() string

type CLUSDerivedDlpRuleEntry

type CLUSDerivedDlpRuleEntry struct {
	Name     string   `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	ID       uint32   `protobuf:"varint,2,opt,name=ID" json:"ID,omitempty"`
	Patterns []string `protobuf:"bytes,3,rep,name=Patterns" json:"Patterns,omitempty"`
}

func (*CLUSDerivedDlpRuleEntry) Descriptor

func (*CLUSDerivedDlpRuleEntry) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleEntry) GetDomain

func (*CLUSDerivedDlpRuleEntry) GetID

func (m *CLUSDerivedDlpRuleEntry) GetID() uint32

func (*CLUSDerivedDlpRuleEntry) GetName

func (m *CLUSDerivedDlpRuleEntry) GetName() string

func (*CLUSDerivedDlpRuleEntry) GetPatterns

func (m *CLUSDerivedDlpRuleEntry) GetPatterns() []string

func (*CLUSDerivedDlpRuleEntry) ProtoMessage

func (*CLUSDerivedDlpRuleEntry) ProtoMessage()

func (*CLUSDerivedDlpRuleEntry) Reset

func (m *CLUSDerivedDlpRuleEntry) Reset()

func (*CLUSDerivedDlpRuleEntry) String

func (m *CLUSDerivedDlpRuleEntry) String() string

type CLUSDerivedDlpRuleEntryArray

type CLUSDerivedDlpRuleEntryArray struct {
	DlpRuleEntries []*CLUSDerivedDlpRuleEntry `protobuf:"bytes,1,rep,name=DlpRuleEntries" json:"DlpRuleEntries,omitempty"`
}

func (*CLUSDerivedDlpRuleEntryArray) Descriptor

func (*CLUSDerivedDlpRuleEntryArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleEntryArray) GetDlpRuleEntries

func (m *CLUSDerivedDlpRuleEntryArray) GetDlpRuleEntries() []*CLUSDerivedDlpRuleEntry

func (*CLUSDerivedDlpRuleEntryArray) ProtoMessage

func (*CLUSDerivedDlpRuleEntryArray) ProtoMessage()

func (*CLUSDerivedDlpRuleEntryArray) Reset

func (m *CLUSDerivedDlpRuleEntryArray) Reset()

func (*CLUSDerivedDlpRuleEntryArray) String

type CLUSDerivedDlpRuleMac

type CLUSDerivedDlpRuleMac struct {
	Mac string `protobuf:"bytes,1,opt,name=Mac" json:"Mac,omitempty"`
}

func (*CLUSDerivedDlpRuleMac) Descriptor

func (*CLUSDerivedDlpRuleMac) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleMac) GetDomain

func (o *CLUSDerivedDlpRuleMac) GetDomain(f GetAccessObjectFunc) ([]string, []string)

func (*CLUSDerivedDlpRuleMac) GetMac

func (m *CLUSDerivedDlpRuleMac) GetMac() string

func (*CLUSDerivedDlpRuleMac) ProtoMessage

func (*CLUSDerivedDlpRuleMac) ProtoMessage()

func (*CLUSDerivedDlpRuleMac) Reset

func (m *CLUSDerivedDlpRuleMac) Reset()

func (*CLUSDerivedDlpRuleMac) String

func (m *CLUSDerivedDlpRuleMac) String() string

type CLUSDerivedDlpRuleMacArray

type CLUSDerivedDlpRuleMacArray struct {
	DlpRuleMacs []*CLUSDerivedDlpRuleMac `protobuf:"bytes,1,rep,name=DlpRuleMacs" json:"DlpRuleMacs,omitempty"`
}

func (*CLUSDerivedDlpRuleMacArray) Descriptor

func (*CLUSDerivedDlpRuleMacArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleMacArray) GetDlpRuleMacs

func (m *CLUSDerivedDlpRuleMacArray) GetDlpRuleMacs() []*CLUSDerivedDlpRuleMac

func (*CLUSDerivedDlpRuleMacArray) ProtoMessage

func (*CLUSDerivedDlpRuleMacArray) ProtoMessage()

func (*CLUSDerivedDlpRuleMacArray) Reset

func (m *CLUSDerivedDlpRuleMacArray) Reset()

func (*CLUSDerivedDlpRuleMacArray) String

func (m *CLUSDerivedDlpRuleMacArray) String() string

type CLUSDerivedDlpRuleMap

type CLUSDerivedDlpRuleMap struct {
	DlpRuleMap map[string]*CLUSDerivedDlpRuleArray `` /* 140-byte string literal not displayed */
}

func (*CLUSDerivedDlpRuleMap) Descriptor

func (*CLUSDerivedDlpRuleMap) Descriptor() ([]byte, []int)

func (*CLUSDerivedDlpRuleMap) GetDlpRuleMap

func (m *CLUSDerivedDlpRuleMap) GetDlpRuleMap() map[string]*CLUSDerivedDlpRuleArray

func (*CLUSDerivedDlpRuleMap) ProtoMessage

func (*CLUSDerivedDlpRuleMap) ProtoMessage()

func (*CLUSDerivedDlpRuleMap) Reset

func (m *CLUSDerivedDlpRuleMap) Reset()

func (*CLUSDerivedDlpRuleMap) String

func (m *CLUSDerivedDlpRuleMap) String() string

type CLUSDerivedFileRule

type CLUSDerivedFileRule struct {
	Recursive bool     `protobuf:"varint,1,opt,name=Recursive" json:"Recursive,omitempty"`
	Filter    string   `protobuf:"bytes,2,opt,name=Filter" json:"Filter,omitempty"`
	Path      string   `protobuf:"bytes,3,opt,name=Path" json:"Path,omitempty"`
	Regex     string   `protobuf:"bytes,4,opt,name=Regex" json:"Regex,omitempty"`
	Behavior  string   `protobuf:"bytes,5,opt,name=Behavior" json:"Behavior,omitempty"`
	GroupName string   `protobuf:"bytes,6,opt,name=GroupName" json:"GroupName,omitempty"`
	Apps      []string `protobuf:"bytes,7,rep,name=Apps" json:"Apps,omitempty"`
	CfgType   string   `protobuf:"bytes,8,opt,name=CfgType" json:"CfgType,omitempty"`
}

func (*CLUSDerivedFileRule) Descriptor

func (*CLUSDerivedFileRule) Descriptor() ([]byte, []int)

func (*CLUSDerivedFileRule) GetApps

func (m *CLUSDerivedFileRule) GetApps() []string

func (*CLUSDerivedFileRule) GetBehavior

func (m *CLUSDerivedFileRule) GetBehavior() string

func (*CLUSDerivedFileRule) GetCfgType

func (m *CLUSDerivedFileRule) GetCfgType() string

func (*CLUSDerivedFileRule) GetFilter

func (m *CLUSDerivedFileRule) GetFilter() string

func (*CLUSDerivedFileRule) GetGroupName

func (m *CLUSDerivedFileRule) GetGroupName() string

func (*CLUSDerivedFileRule) GetPath

func (m *CLUSDerivedFileRule) GetPath() string

func (*CLUSDerivedFileRule) GetRecursive

func (m *CLUSDerivedFileRule) GetRecursive() bool

func (*CLUSDerivedFileRule) GetRegex

func (m *CLUSDerivedFileRule) GetRegex() string

func (*CLUSDerivedFileRule) ProtoMessage

func (*CLUSDerivedFileRule) ProtoMessage()

func (*CLUSDerivedFileRule) Reset

func (m *CLUSDerivedFileRule) Reset()

func (*CLUSDerivedFileRule) String

func (m *CLUSDerivedFileRule) String() string

type CLUSDerivedFileRuleArray

type CLUSDerivedFileRuleArray struct {
	Rules []*CLUSDerivedFileRule `protobuf:"bytes,1,rep,name=Rules" json:"Rules,omitempty"`
}

func (*CLUSDerivedFileRuleArray) Descriptor

func (*CLUSDerivedFileRuleArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedFileRuleArray) GetRules

func (*CLUSDerivedFileRuleArray) ProtoMessage

func (*CLUSDerivedFileRuleArray) ProtoMessage()

func (*CLUSDerivedFileRuleArray) Reset

func (m *CLUSDerivedFileRuleArray) Reset()

func (*CLUSDerivedFileRuleArray) String

func (m *CLUSDerivedFileRuleArray) String() string

type CLUSDerivedPolicyApp

type CLUSDerivedPolicyApp struct {
	App    uint32 `protobuf:"varint,1,opt,name=App" json:"App,omitempty"`
	Action uint32 `protobuf:"varint,2,opt,name=Action" json:"Action,omitempty"`
	RuleID uint32 `protobuf:"varint,3,opt,name=RuleID" json:"RuleID,omitempty"`
}

func (*CLUSDerivedPolicyApp) Descriptor

func (*CLUSDerivedPolicyApp) Descriptor() ([]byte, []int)

func (*CLUSDerivedPolicyApp) GetAction

func (m *CLUSDerivedPolicyApp) GetAction() uint32

func (*CLUSDerivedPolicyApp) GetApp

func (m *CLUSDerivedPolicyApp) GetApp() uint32

func (*CLUSDerivedPolicyApp) GetRuleID

func (m *CLUSDerivedPolicyApp) GetRuleID() uint32

func (*CLUSDerivedPolicyApp) ProtoMessage

func (*CLUSDerivedPolicyApp) ProtoMessage()

func (*CLUSDerivedPolicyApp) Reset

func (m *CLUSDerivedPolicyApp) Reset()

func (*CLUSDerivedPolicyApp) String

func (m *CLUSDerivedPolicyApp) String() string

type CLUSDerivedPolicyRule

type CLUSDerivedPolicyRule struct {
	ID      uint32                  `protobuf:"varint,1,opt,name=ID" json:"ID,omitempty"`
	SrcIP   []byte                  `protobuf:"bytes,2,opt,name=SrcIP,proto3" json:"SrcIP,omitempty"`
	DstIP   []byte                  `protobuf:"bytes,3,opt,name=DstIP,proto3" json:"DstIP,omitempty"`
	SrcIPR  []byte                  `protobuf:"bytes,4,opt,name=SrcIPR,proto3" json:"SrcIPR,omitempty"`
	DstIPR  []byte                  `protobuf:"bytes,5,opt,name=DstIPR,proto3" json:"DstIPR,omitempty"`
	Port    uint32                  `protobuf:"varint,6,opt,name=Port" json:"Port,omitempty"`
	PortR   uint32                  `protobuf:"varint,7,opt,name=PortR" json:"PortR,omitempty"`
	IPProto uint32                  `protobuf:"varint,8,opt,name=IPProto" json:"IPProto,omitempty"`
	Action  uint32                  `protobuf:"varint,9,opt,name=Action" json:"Action,omitempty"`
	Ingress bool                    `protobuf:"varint,10,opt,name=Ingress" json:"Ingress,omitempty"`
	FQDN    string                  `protobuf:"bytes,11,opt,name=FQDN" json:"FQDN,omitempty"`
	Apps    []*CLUSDerivedPolicyApp `protobuf:"bytes,12,rep,name=Apps" json:"Apps,omitempty"`
}

func (*CLUSDerivedPolicyRule) Descriptor

func (*CLUSDerivedPolicyRule) Descriptor() ([]byte, []int)

func (*CLUSDerivedPolicyRule) GetAction

func (m *CLUSDerivedPolicyRule) GetAction() uint32

func (*CLUSDerivedPolicyRule) GetApps

func (*CLUSDerivedPolicyRule) GetDomain

func (o *CLUSDerivedPolicyRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

func (*CLUSDerivedPolicyRule) GetDstIP

func (m *CLUSDerivedPolicyRule) GetDstIP() []byte

func (*CLUSDerivedPolicyRule) GetDstIPR

func (m *CLUSDerivedPolicyRule) GetDstIPR() []byte

func (*CLUSDerivedPolicyRule) GetFQDN

func (m *CLUSDerivedPolicyRule) GetFQDN() string

func (*CLUSDerivedPolicyRule) GetID

func (m *CLUSDerivedPolicyRule) GetID() uint32

func (*CLUSDerivedPolicyRule) GetIPProto

func (m *CLUSDerivedPolicyRule) GetIPProto() uint32

func (*CLUSDerivedPolicyRule) GetIngress

func (m *CLUSDerivedPolicyRule) GetIngress() bool

func (*CLUSDerivedPolicyRule) GetPort

func (m *CLUSDerivedPolicyRule) GetPort() uint32

func (*CLUSDerivedPolicyRule) GetPortR

func (m *CLUSDerivedPolicyRule) GetPortR() uint32

func (*CLUSDerivedPolicyRule) GetSrcIP

func (m *CLUSDerivedPolicyRule) GetSrcIP() []byte

func (*CLUSDerivedPolicyRule) GetSrcIPR

func (m *CLUSDerivedPolicyRule) GetSrcIPR() []byte

func (*CLUSDerivedPolicyRule) ProtoMessage

func (*CLUSDerivedPolicyRule) ProtoMessage()

func (*CLUSDerivedPolicyRule) Reset

func (m *CLUSDerivedPolicyRule) Reset()

func (*CLUSDerivedPolicyRule) String

func (m *CLUSDerivedPolicyRule) String() string

type CLUSDerivedPolicyRuleArray

type CLUSDerivedPolicyRuleArray struct {
	Rules []*CLUSDerivedPolicyRule `protobuf:"bytes,1,rep,name=Rules" json:"Rules,omitempty"`
}

func (*CLUSDerivedPolicyRuleArray) Descriptor

func (*CLUSDerivedPolicyRuleArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedPolicyRuleArray) GetRules

func (*CLUSDerivedPolicyRuleArray) ProtoMessage

func (*CLUSDerivedPolicyRuleArray) ProtoMessage()

func (*CLUSDerivedPolicyRuleArray) Reset

func (m *CLUSDerivedPolicyRuleArray) Reset()

func (*CLUSDerivedPolicyRuleArray) String

func (m *CLUSDerivedPolicyRuleArray) String() string

type CLUSDerivedPolicyRuleMap

type CLUSDerivedPolicyRuleMap struct {
	RuleMap map[string]*CLUSDerivedPolicyRuleArray `` /* 134-byte string literal not displayed */
}

func (*CLUSDerivedPolicyRuleMap) Descriptor

func (*CLUSDerivedPolicyRuleMap) Descriptor() ([]byte, []int)

func (*CLUSDerivedPolicyRuleMap) GetRuleMap

func (*CLUSDerivedPolicyRuleMap) ProtoMessage

func (*CLUSDerivedPolicyRuleMap) ProtoMessage()

func (*CLUSDerivedPolicyRuleMap) Reset

func (m *CLUSDerivedPolicyRuleMap) Reset()

func (*CLUSDerivedPolicyRuleMap) String

func (m *CLUSDerivedPolicyRuleMap) String() string

type CLUSDerivedProcessRule

type CLUSDerivedProcessRule struct {
	Name      string `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Path      string `protobuf:"bytes,2,opt,name=Path" json:"Path,omitempty"`
	Action    string `protobuf:"bytes,3,opt,name=Action" json:"Action,omitempty"`
	CreatedAt uint64 `protobuf:"varint,4,opt,name=CreatedAt" json:"CreatedAt,omitempty"`
	UpdateAt  uint64 `protobuf:"varint,5,opt,name=UpdateAt" json:"UpdateAt,omitempty"`
	GroupName string `protobuf:"bytes,6,opt,name=GroupName" json:"GroupName,omitempty"`
	CfgType   string `protobuf:"bytes,7,opt,name=CfgType" json:"CfgType,omitempty"`
}

func (*CLUSDerivedProcessRule) Descriptor

func (*CLUSDerivedProcessRule) Descriptor() ([]byte, []int)

func (*CLUSDerivedProcessRule) GetAction

func (m *CLUSDerivedProcessRule) GetAction() string

func (*CLUSDerivedProcessRule) GetCfgType

func (m *CLUSDerivedProcessRule) GetCfgType() string

func (*CLUSDerivedProcessRule) GetCreatedAt

func (m *CLUSDerivedProcessRule) GetCreatedAt() uint64

func (*CLUSDerivedProcessRule) GetGroupName

func (m *CLUSDerivedProcessRule) GetGroupName() string

func (*CLUSDerivedProcessRule) GetName

func (m *CLUSDerivedProcessRule) GetName() string

func (*CLUSDerivedProcessRule) GetPath

func (m *CLUSDerivedProcessRule) GetPath() string

func (*CLUSDerivedProcessRule) GetUpdateAt

func (m *CLUSDerivedProcessRule) GetUpdateAt() uint64

func (*CLUSDerivedProcessRule) ProtoMessage

func (*CLUSDerivedProcessRule) ProtoMessage()

func (*CLUSDerivedProcessRule) Reset

func (m *CLUSDerivedProcessRule) Reset()

func (*CLUSDerivedProcessRule) String

func (m *CLUSDerivedProcessRule) String() string

type CLUSDerivedProcessRuleArray

type CLUSDerivedProcessRuleArray struct {
	Rules []*CLUSDerivedProcessRule `protobuf:"bytes,1,rep,name=Rules" json:"Rules,omitempty"`
}

func (*CLUSDerivedProcessRuleArray) Descriptor

func (*CLUSDerivedProcessRuleArray) Descriptor() ([]byte, []int)

func (*CLUSDerivedProcessRuleArray) GetRules

func (*CLUSDerivedProcessRuleArray) ProtoMessage

func (*CLUSDerivedProcessRuleArray) ProtoMessage()

func (*CLUSDerivedProcessRuleArray) Reset

func (m *CLUSDerivedProcessRuleArray) Reset()

func (*CLUSDerivedProcessRuleArray) String

func (m *CLUSDerivedProcessRuleArray) String() string

type CLUSDevice

type CLUSDevice struct {
	ID            string                  `json:"id"`
	Name          string                  `json:"name"`
	SelfHostname  string                  `json:"self_hostname"`
	HostName      string                  `json:"host_name"`
	HostID        string                  `json:"host_id"`
	Domain        string                  `json:"domain"`
	NetworkMode   string                  `json:"network_mode"`
	PidMode       string                  `json:"pid_mode"`
	Ver           string                  `json:"version"`
	Labels        map[string]string       `json:"labels"`
	CreatedAt     time.Time               `json:"created_at"`
	StartedAt     time.Time               `json:"started_at"`
	JoinedAt      time.Time               `json:"joined_at"`
	MemoryLimit   int64                   `json:"memory_limit"`
	CPUs          string                  `json:"cpus"`
	ClusterIP     string                  `json:"cluster_ip"`
	RPCServerPort uint16                  `json:"rpc_server_port"`
	Pid           int                     `json:"pid"`
	Ifaces        map[string][]CLUSIPAddr `json:"interfaces"`
}

type CLUSDistLocker

type CLUSDistLocker struct {
	LockedBy string    `json:"locked_by"`
	LockedAt time.Time `json:"locked_at"`
	Caller   string    `json:"caller"`
}

type CLUSDlpCriteriaEntry

type CLUSDlpCriteriaEntry struct {
	Key     string `json:"key"`
	Value   string `json:"value"`
	Op      string `json:"op"`
	Context string `json:"context,omitempty"`
}

type CLUSDlpGroup

type CLUSDlpGroup struct {
	Name    string            `json:"name"`
	Status  bool              `json:"status"`
	Sensors []*CLUSDlpSetting `json:"sensors"`
}

func (*CLUSDlpGroup) GetDomain

func (o *CLUSDlpGroup) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSDlpRule

type CLUSDlpRule struct {
	Name     string                 `json:"name"`
	ID       uint32                 `json:"id"`
	Patterns []CLUSDlpCriteriaEntry `json:"patterns"`
}

func (*CLUSDlpRule) GetDomain

func (o *CLUSDlpRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSDlpSensor

type CLUSDlpSensor struct {
	Name          string                    `json:"name"`
	Groups        map[string]string         `json:"groups,omitempty"` //group to action mapping,
	RuleListNames map[string]string         `json:"rule_list_names,omitempty"`
	RuleList      map[string]*CLUSDlpRule   `json:"rule_list,omitempty"`
	PreRuleList   map[string][]*CLUSDlpRule `json:"pre_rule_list,omitempty"`
	Comment       string                    `json:"comment,omitempty"`
	Predefine     bool                      `json:"predefine,omitempty"`
}

func (*CLUSDlpSensor) GetDomain

func (o *CLUSDlpSensor) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSDlpSetting

type CLUSDlpSetting struct {
	Name   string `json:"name"`
	Action string `json:"action"`
}

type CLUSDlpWorkloadRule

type CLUSDlpWorkloadRule struct {
	WorkloadId    string            `json:"workload_id"`
	PolicyMode    string            `json:"mode,omitempty"`
	RuleListNames []*CLUSDlpSetting `json:"rule_list_names"`
	RuleIds       []uint32          `json:"rule_ids"`
	RuleType      string            `json:"ruletype"`
}

type CLUSDomain

type CLUSDomain struct {
	Name    string   `json:"name"`
	Dummy   bool     `json:"dummy"`
	Disable bool     `json:"disable"`
	Tags    []string `json:"tags"`
}

func (*CLUSDomain) GetDomain

func (o *CLUSDomain) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSEULA

type CLUSEULA struct {
	Accepted bool `json:"accepted"`
}

type CLUSEventCondition

type CLUSEventCondition struct {
	CondType  string `json:"type,omitempty"`
	CondValue string `json:"value,omitempty"`
}

type CLUSEventLog

type CLUSEventLog struct {
	Event          TLogEvent         `json:"event"`
	HostID         string            `json:"host_id"`
	HostName       string            `json:"host_name"`
	ControllerID   string            `json:"controller_id"`
	ControllerName string            `json:"controller_name"`
	AgentID        string            `json:"agent_id"`
	AgentName      string            `json:"agent_name"`
	WorkloadID     string            `json:"workload_id"`
	WorkloadName   string            `json:"workload_name"`
	ReportedAt     time.Time         `json:"reported_at"`
	User           string            `json:"user"`
	UserRoles      map[string]string `json:"user_roles"`
	UserAddr       string            `json:"user_addr"`
	UserSession    string            `json:"user_session"`
	RESTMethod     string            `json:"rest_method,omitempty"`
	RESTRequest    string            `json:"rest_request,omitempty"`
	RESTBody       string            `json:"rest_body,omitempty"`
	EnforcerLimit  int               `json:"enforcer_limit,omitempty"`
	LicenseExpire  time.Time         `json:"license_expire,omitempty"`
	Msg            string            `json:"message"`
}

type CLUSFedAdmCtrlRulesData

type CLUSFedAdmCtrlRulesData struct {
	Revision uint64                         `json:"revision"`
	Rules    map[string]*CLUSAdmissionRules `json:"rules"` // key is fed rules type
}

type CLUSFedClusterStatus

type CLUSFedClusterStatus struct {
	Status int `json:"status"` // status of a joint cluster
}

type CLUSFedDoPingPoll

type CLUSFedDoPingPoll struct {
	Cmd         uint32 `json:"cmd"`
	FullPolling uint32 `json:"full_polling"`
	Now         int64  `json:"now"`
}

type CLUSFedFileMonitorData

type CLUSFedFileMonitorData struct {
	Revision    uint64                    `json:"revision"`
	Profiles    []*CLUSFileMonitorProfile `json:"profiles"`
	AccessRules []*CLUSFileAccessRule     `json:"access_rules"`
}

type CLUSFedGroupsData

type CLUSFedGroupsData struct {
	Revision uint64       `json:"revision"`
	Groups   []*CLUSGroup `json:"groups"`
}

type CLUSFedJoinedClusterList

type CLUSFedJoinedClusterList struct {
	IDs []string `json:"ids,omitempty"` // all non-master clusters' id in the federation
}

type CLUSFedJointClusterInfo

type CLUSFedJointClusterInfo struct {
	Disabled      bool               `json:"disabled"`
	Name          string             `json:"name"`
	ID            string             `json:"id"`
	Secret        string             `json:"secret,cloak"`      // generated by joint cluster befor joining federation
	ClientKey     string             `json:"client_key,cloak"`  // base64 encoded
	ClientCert    string             `json:"client_cert,cloak"` // base64 encoded
	User          string             `json:"user,omitempty"`    // the user who joins this cluster to federation
	RestInfo      CLUSRestServerInfo `json:"rest_info"`
	ProxyRequired bool               `json:"proxy_required"` // a joint cluster may be reachable without proxy even master cluster is configured to use proxy. decided when it joins fed
}

type CLUSFedMasterClusterInfo

type CLUSFedMasterClusterInfo struct {
	Disabled bool               `json:"disabled"`
	Name     string             `json:"name"`
	ID       string             `json:"id"`
	Secret   string             `json:"secret,cloak"`   // used for encryoting/decrypting join_ticket issued by the master cluster
	CACert   string             `json:"ca_cert,cloak"`  // base64 encoded
	User     string             `json:"user,omitempty"` // the user who promotes this cluster to master cluster in federation
	RestInfo CLUSRestServerInfo `json:"rest_info"`
}

type CLUSFedMembership

type CLUSFedMembership struct {
	FedRole          string                   `json:"fed_role"`                 // "", "master" or "joint"
	PingInterval     uint32                   `json:"ping_interval,omitempty"`  // in minute, for master cluster to ping joing clusters
	PollInterval     uint32                   `json:"poll_interval,omitempty"`  // in minute, for joint clusters to poll master cluster
	LocalRestInfo    CLUSRestServerInfo       `json:"local_rest_info"`          // meaningful when the role is ""
	MasterCluster    CLUSFedMasterClusterInfo `json:"master_cluster,omitempty"` // meaningful when the role is "master" or "joint"
	JointCluster     CLUSFedJointClusterInfo  `json:"joint_cluster,omitempty"`  // meaningful when the role is "joint"
	PendingDismiss   bool                     `json:"pending_dismiss"`          // set to true when the cluster is demoted/kicked & leaves fed. set to false when the fed rules cleanup is done
	PendingDismissAt time.Time                `json:"pending_dismiss_at"`
	UseProxy         string                   `json:"use_proxy"` // http / https
}

func (*CLUSFedMembership) GetDomain

func (o *CLUSFedMembership) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSFedNetworkRulesData

type CLUSFedNetworkRulesData struct {
	Revision  uint64            `json:"revision"`
	Rules     []*CLUSPolicyRule `json:"rules"`
	RuleHeads []*CLUSRuleHead   `json:"rule_heads"`
}

type CLUSFedProcessProfileData

type CLUSFedProcessProfileData struct {
	Revision uint64                `json:"revision"`
	Profiles []*CLUSProcessProfile `json:"profiles"`
}

type CLUSFedResponseRulesData

type CLUSFedResponseRulesData struct {
	Revision  uint64                       `json:"revision"`
	Rules     map[uint32]*CLUSResponseRule `json:"rules"`
	RuleHeads []*CLUSRuleHead              `json:"rule_heads"`
}

type CLUSFedRulesRevision

type CLUSFedRulesRevision struct {
	Revisions map[string]uint64 `json:"revisions"` // key is fed rules type, value is revision
}

fed ruleTypes' revision data. stored under object/config/federation/rules_revision

func CLUSEmptyFedRulesRevision

func CLUSEmptyFedRulesRevision() *CLUSFedRulesRevision

type CLUSFedSystemConfigData

type CLUSFedSystemConfigData struct {
	Revision     uint64            `json:"revision"`
	SystemConfig *CLUSSystemConfig `json:"system_config"`
}

type CLUSFileAccessFilterRule

type CLUSFileAccessFilterRule struct {
	Apps        []string  `json:"apps"`
	Behavior    string    `json:"behavior"`
	CustomerAdd bool      `json:"customer_add"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type CLUSFileAccessRule

type CLUSFileAccessRule struct {
	Group      string
	Filters    map[string]*CLUSFileAccessFilterRule `json:"filters"`
	FiltersCRD map[string]*CLUSFileAccessFilterRule `json:"filters_crd"`
}

type CLUSFileAccessRuleArray

type CLUSFileAccessRuleArray struct {
	Rules []*CLUSFileAccessRuleReq `protobuf:"bytes,1,rep,name=Rules" json:"Rules,omitempty"`
}

func (*CLUSFileAccessRuleArray) Descriptor

func (*CLUSFileAccessRuleArray) Descriptor() ([]byte, []int)

func (*CLUSFileAccessRuleArray) GetRules

func (*CLUSFileAccessRuleArray) ProtoMessage

func (*CLUSFileAccessRuleArray) ProtoMessage()

func (*CLUSFileAccessRuleArray) Reset

func (m *CLUSFileAccessRuleArray) Reset()

func (*CLUSFileAccessRuleArray) String

func (m *CLUSFileAccessRuleArray) String() string

type CLUSFileAccessRuleReq

type CLUSFileAccessRuleReq struct {
	GroupName string `protobuf:"bytes,1,opt,name=GroupName" json:"GroupName,omitempty"`
	Filter    string `protobuf:"bytes,2,opt,name=Filter" json:"Filter,omitempty"`
	Path      string `protobuf:"bytes,3,opt,name=Path" json:"Path,omitempty"`
}

func (*CLUSFileAccessRuleReq) Descriptor

func (*CLUSFileAccessRuleReq) Descriptor() ([]byte, []int)

func (*CLUSFileAccessRuleReq) GetFilter

func (m *CLUSFileAccessRuleReq) GetFilter() string

func (*CLUSFileAccessRuleReq) GetGroupName

func (m *CLUSFileAccessRuleReq) GetGroupName() string

func (*CLUSFileAccessRuleReq) GetPath

func (m *CLUSFileAccessRuleReq) GetPath() string

func (*CLUSFileAccessRuleReq) ProtoMessage

func (*CLUSFileAccessRuleReq) ProtoMessage()

func (*CLUSFileAccessRuleReq) Reset

func (m *CLUSFileAccessRuleReq) Reset()

func (*CLUSFileAccessRuleReq) String

func (m *CLUSFileAccessRuleReq) String() string

type CLUSFileMonitorFile

type CLUSFileMonitorFile struct {
	Path    string   `protobuf:"bytes,1,opt,name=Path" json:"Path,omitempty"`
	Mask    uint64   `protobuf:"varint,2,opt,name=Mask" json:"Mask,omitempty"`
	IsDir   bool     `protobuf:"varint,3,opt,name=IsDir" json:"IsDir,omitempty"`
	Protect bool     `protobuf:"varint,4,opt,name=Protect" json:"Protect,omitempty"`
	Files   []string `protobuf:"bytes,5,rep,name=Files" json:"Files,omitempty"`
}

func (*CLUSFileMonitorFile) Descriptor

func (*CLUSFileMonitorFile) Descriptor() ([]byte, []int)

func (*CLUSFileMonitorFile) GetFiles

func (m *CLUSFileMonitorFile) GetFiles() []string

func (*CLUSFileMonitorFile) GetIsDir

func (m *CLUSFileMonitorFile) GetIsDir() bool

func (*CLUSFileMonitorFile) GetMask

func (m *CLUSFileMonitorFile) GetMask() uint64

func (*CLUSFileMonitorFile) GetPath

func (m *CLUSFileMonitorFile) GetPath() string

func (*CLUSFileMonitorFile) GetProtect

func (m *CLUSFileMonitorFile) GetProtect() bool

func (*CLUSFileMonitorFile) ProtoMessage

func (*CLUSFileMonitorFile) ProtoMessage()

func (*CLUSFileMonitorFile) Reset

func (m *CLUSFileMonitorFile) Reset()

func (*CLUSFileMonitorFile) String

func (m *CLUSFileMonitorFile) String() string

type CLUSFileMonitorFileArray

type CLUSFileMonitorFileArray struct {
	Files []*CLUSFileMonitorFile `protobuf:"bytes,1,rep,name=Files" json:"Files,omitempty"`
}

func (*CLUSFileMonitorFileArray) Descriptor

func (*CLUSFileMonitorFileArray) Descriptor() ([]byte, []int)

func (*CLUSFileMonitorFileArray) GetFiles

func (*CLUSFileMonitorFileArray) ProtoMessage

func (*CLUSFileMonitorFileArray) ProtoMessage()

func (*CLUSFileMonitorFileArray) Reset

func (m *CLUSFileMonitorFileArray) Reset()

func (*CLUSFileMonitorFileArray) String

func (m *CLUSFileMonitorFileArray) String() string

type CLUSFileMonitorFilter

type CLUSFileMonitorFilter struct {
	Filter       string `json:"filter"`
	Path         string `json:"path"`
	Regex        string `json:"regex"`
	Recursive    bool   `json:"recursive"`
	CustomerAdd  bool   `json:"customer_add"`
	Behavior     string `json:"behavior"`
	DerivedGroup string `json:"dgroup,omitempty"`
}

type CLUSFileMonitorProfile

type CLUSFileMonitorProfile struct {
	Group      string
	Mode       string
	CfgType    TCfgType                `json:"cfg_type"`
	Filters    []CLUSFileMonitorFilter `json:"filters"`
	FiltersCRD []CLUSFileMonitorFilter `json:"filters_crd"`
}

func (*CLUSFileMonitorProfile) GetDomain

type CLUSFilePacket

type CLUSFilePacket struct {
	Data []byte `protobuf:"bytes,1,opt,name=Data,proto3" json:"Data,omitempty"`
	Name string `protobuf:"bytes,2,opt,name=Name" json:"Name,omitempty"`
	Len  uint32 `protobuf:"varint,3,opt,name=Len" json:"Len,omitempty"`
}

func (*CLUSFilePacket) Descriptor

func (*CLUSFilePacket) Descriptor() ([]byte, []int)

func (*CLUSFilePacket) GetData

func (m *CLUSFilePacket) GetData() []byte

func (*CLUSFilePacket) GetLen

func (m *CLUSFilePacket) GetLen() uint32

func (*CLUSFilePacket) GetName

func (m *CLUSFilePacket) GetName() string

func (*CLUSFilePacket) ProtoMessage

func (*CLUSFilePacket) ProtoMessage()

func (*CLUSFilePacket) Reset

func (m *CLUSFilePacket) Reset()

func (*CLUSFilePacket) String

func (m *CLUSFilePacket) String() string

type CLUSFilter

type CLUSFilter struct {
	Workload string `protobuf:"bytes,1,opt,name=Workload" json:"Workload,omitempty"`
	ID       uint32 `protobuf:"varint,2,opt,name=ID" json:"ID,omitempty"`
	Start    uint32 `protobuf:"varint,3,opt,name=Start" json:"Start,omitempty"`
	Limit    uint32 `protobuf:"varint,4,opt,name=Limit" json:"Limit,omitempty"`
}

func (*CLUSFilter) Descriptor

func (*CLUSFilter) Descriptor() ([]byte, []int)

func (*CLUSFilter) GetID

func (m *CLUSFilter) GetID() uint32

func (*CLUSFilter) GetLimit

func (m *CLUSFilter) GetLimit() uint32

func (*CLUSFilter) GetStart

func (m *CLUSFilter) GetStart() uint32

func (*CLUSFilter) GetWorkload

func (m *CLUSFilter) GetWorkload() string

func (*CLUSFilter) ProtoMessage

func (*CLUSFilter) ProtoMessage()

func (*CLUSFilter) Reset

func (m *CLUSFilter) Reset()

func (*CLUSFilter) String

func (m *CLUSFilter) String() string

type CLUSFqdnIp

type CLUSFqdnIp struct {
	FqdnName string   `json:"fqdn_name"`
	FqdnIP   []net.IP `json:"fqdn_ip"`
}

type CLUSGCRKey

type CLUSGCRKey struct {
	JsonKey string `json:"json_key,cloak"`
}

type CLUSGraphOps

type CLUSGraphOps struct {
	From     string `protobuf:"bytes,1,opt,name=From" json:"From,omitempty"`
	To       string `protobuf:"bytes,2,opt,name=To" json:"To,omitempty"`
	Endpoint string `protobuf:"bytes,3,opt,name=Endpoint" json:"Endpoint,omitempty"`
	Alias    string `protobuf:"bytes,4,opt,name=Alias" json:"Alias,omitempty"`
}

func (*CLUSGraphOps) Descriptor

func (*CLUSGraphOps) Descriptor() ([]byte, []int)

func (*CLUSGraphOps) GetAlias

func (m *CLUSGraphOps) GetAlias() string

func (*CLUSGraphOps) GetEndpoint

func (m *CLUSGraphOps) GetEndpoint() string

func (*CLUSGraphOps) GetFrom

func (m *CLUSGraphOps) GetFrom() string

func (*CLUSGraphOps) GetTo

func (m *CLUSGraphOps) GetTo() string

func (*CLUSGraphOps) ProtoMessage

func (*CLUSGraphOps) ProtoMessage()

func (*CLUSGraphOps) Reset

func (m *CLUSGraphOps) Reset()

func (*CLUSGraphOps) String

func (m *CLUSGraphOps) String() string

type CLUSGroup

type CLUSGroup struct {
	Name           string              `json:"name"`
	Comment        string              `json:"comment"`
	Learned_UNUSED bool                `json:"learned"`
	Reserved       bool                `json:"reserved"`
	Criteria       []CLUSCriteriaEntry `json:"criteria"`
	Domain         string              `json:"domain"`
	CreaterDomains []string            `json:"creater_domains"`
	PolicyMode     string              `json:"policy_mode,omitempty"`
	ProfileMode    string              `json:"profile_mode,omitempty"`
	NotScored      bool                `json:"not_scored,omitempty"`
	Kind           string              `json:"kind,omitempty"`
	PlatformRole   string              `json:"platform_role"`
	CapIntcp       bool                `json:"cap_intcp"`
	CfgType        TCfgType            `json:"cfg_type"`
}

func (*CLUSGroup) GetDomain

func (o *CLUSGroup) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSGroupIPPolicy

type CLUSGroupIPPolicy struct {
	ID     uint32              `json:"policy_id"`
	From   []*CLUSWorkloadAddr `json:"from_addr"`
	To     []*CLUSWorkloadAddr `json:"to_addr,omitempty"`
	Action uint8               `json:"action"`
}

type CLUSGroupIPPolicyVer

type CLUSGroupIPPolicyVer struct {
	Key                  string `json:"key"`
	PolicyIPRulesVersion string `json:"pol_version"`
	SlotNo               int    `json:"slot_no"`
	RulesLen             int    `json:"rules_len"`
	WorkloadSlot         int    `json:"workload_slot,omitempty"`
	WorkloadLen          int    `json:"workload_len,omitempty"`
}

type CLUSHost

type CLUSHost struct {
	ID             string                  `json:"id"`
	Name           string                  `json:"name"`
	Runtime        string                  `json:"runtime"`
	Platform       string                  `json:"platform"`
	Flavor         string                  `json:"flavor"` // platform flavor
	Network        string                  `json:"network"`
	RuntimeVer     string                  `json:"runtime_version"`
	RuntimeAPIVer  string                  `json:"runtime_api_version"`
	OS             string                  `json:"os"`
	Kernel         string                  `json:"kernel"`
	CPUs           int64                   `json:"cpus"`
	Memory         int64                   `json:"memory"`
	Ifaces         map[string][]CLUSIPAddr `json:"interfaces"`
	TunnelIP       []net.IPNet             `json:"tunnel_ips"`
	CapDockerBench bool                    `json:"cap_docker_bench"`
	CapKubeBench   bool                    `json:"cap_kube_bench"`
	StorageDriver  string                  `json:"storage_driver"`
	CgroupVersion  int                     `json:"cgroup_version"`
}

func (*CLUSHost) GetDomain

func (o *CLUSHost) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSIBMSAConfig

type CLUSIBMSAConfig struct {
	AccountID   string `json:"accountID,cloak"`
	APIKey      string `json:"apikey,cloak"`
	ProviderID  string `json:"providerId,cloak"` // service-id
	FindingsURL string `json:"findingsURL"`
	TokenURL    string `json:"tokenURL"`
}

func (*CLUSIBMSAConfig) GetDomain

func (o *CLUSIBMSAConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSIBMSAConfigNV

type CLUSIBMSAConfigNV struct {
	EpEnabled      bool      `json:"ep_enabled"`
	EpStart        uint32    `json:"ep_start"` // set to 1 after /v1/partner/ibm_sa/setup/test return 200
	EpDashboardURL string    `json:"ep_dashboard_url"`
	EpConnectedAt  time.Time `json:"ep_connected_at"`
}

type CLUSIBMSAOnboardData

type CLUSIBMSAOnboardData struct {
	NoteName   string `json:"note_name"`
	ID         string `json:"id,cloak"` // service-id ?
	ProviderID string `json:"provider_id"`
}

type CLUSIPAddr

type CLUSIPAddr struct {
	IPNet       net.IPNet `json:"ipnet"`
	Gateway     string    `json:"gateway"`
	Scope       string    `json:"scope"`
	NetworkID   string    `json:"net_id"`
	NetworkName string    `json:"net_name"`
}

type CLUSIPPort

type CLUSIPPort struct {
	IPNet net.IPNet `json:"ipnet"`
	Port  uint16    `json:"port"`
}

type CLUSImage

type CLUSImage struct {
	Domain string `json:"domain"`
	Repo   string `json:"repo"`
	Tag    string `json:"tag"`
	RegMod string `json:"reg_mod"`
}

func (*CLUSImage) GetDomain

func (o *CLUSImage) GetDomain(f GetAccessObjectFunc) ([]string, []string)

for images in openshift registry only

type CLUSImportTask

type CLUSImportTask struct {
	TID            string    `json:"tid"`
	ImportType     string    `json:"import_type"`
	CtrlerID       string    `json:"ctrler_id"`
	TempFilename   string    `json:"temp_filename"`
	Status         string    `json:"status"`
	Percentage     int       `json:"percentage"`
	TotalLines     int       `json:"total_lines"`
	LastUpdateTime time.Time `json:"last_update_time"`
	CallerFullname string    `json:"caller_fullname"`
	CallerRemote   string    `json:"caller_remote"`
	CallerID       string    `json:"caller_id"`
}

type CLUSIncidentLog

type CLUSIncidentLog struct {
	LogUID       string       `json:"log_uid"`
	ID           TLogIncident `json:"id"`
	HostID       string       `json:"host_id"`
	HostName     string       `json:"host_name"`
	AgentID      string       `json:"agent_id"`
	AgentName    string       `json:"agent_name"`
	WorkloadID   string       `json:"workload_id"`
	WorkloadName string       `json:"workload_name"`
	ReportedAt   time.Time    `json:"reported_at"`
	ProcName     string       `json:"process_name,omitempty"`
	ProcPath     string       `json:"process_path,omitempty"`
	ProcCmds     []string     `json:"process_cmd,omitempty"`
	ProcRealUID  int          `json:"proc_real_uid,omitempty"`
	ProcEffUID   int          `json:"proc_eff_uid,omitempty"`
	ProcRealUser string       `json:"proc_real_user,omitempty"`
	ProcEffUser  string       `json:"proc_eff_user,omitempty"`
	FilePath     string       `json:"file_path,omitempty"`
	Files        []string     `json:"file_name,omitempty"`
	LocalIP      net.IP       `json:"local_ip,omitempty"`
	RemoteIP     net.IP       `json:"remote_ip,omitempty"`
	EtherType    uint16       `json:"ether_type"`
	LocalPort    uint16       `json:"local_port,omitempty"`
	RemotePort   uint16       `json:"remote_port,omitempty"`
	IPProto      uint8        `json:"ip_proto,omitempty"`
	ConnIngress  bool         `json:"conn_ingress"`
	LocalPeer    bool         `json:"local_peer"`
	ProcPName    string       `json:"process_parent_name,omitempty"`
	ProcPPath    string       `json:"process_parent_path,omitempty"`
	Count        int          `json:"count,omitempty"`
	StartAt      time.Time    `json:"start_at,omitempty"`
	Action       string       `json:"action"`
	RuleID       string       `json:"rule_id"`
	Group        string       `json:"group"`
	Msg          string       `json:"message"`
}

type CLUSKick

type CLUSKick struct {
	CtrlID string `protobuf:"bytes,1,opt,name=CtrlID" json:"CtrlID,omitempty"`
	Reason string `protobuf:"bytes,2,opt,name=Reason" json:"Reason,omitempty"`
}

func (*CLUSKick) Descriptor

func (*CLUSKick) Descriptor() ([]byte, []int)

func (*CLUSKick) GetCtrlID

func (m *CLUSKick) GetCtrlID() string

func (*CLUSKick) GetReason

func (m *CLUSKick) GetReason() string

func (*CLUSKick) ProtoMessage

func (*CLUSKick) ProtoMessage()

func (*CLUSKick) Reset

func (m *CLUSKick) Reset()

func (*CLUSKick) String

func (m *CLUSKick) String() string

type CLUSKickLoginSessionsRequest

type CLUSKickLoginSessionsRequest struct {
	CtrlerID     string                `protobuf:"bytes,1,opt,name=CtrlerID" json:"CtrlerID,omitempty"`
	Type         KickLoginSessionsType `protobuf:"varint,2,opt,name=Type,enum=share.KickLoginSessionsType" json:"Type,omitempty"`
	Server       string                `protobuf:"bytes,3,opt,name=Server" json:"Server,omitempty"`
	UserFullname string                `protobuf:"bytes,4,opt,name=UserFullname" json:"UserFullname,omitempty"`
	UserServer   string                `protobuf:"bytes,5,opt,name=UserServer" json:"UserServer,omitempty"`
	UserName     string                `protobuf:"bytes,6,opt,name=UserName" json:"UserName,omitempty"`
}

func (*CLUSKickLoginSessionsRequest) Descriptor

func (*CLUSKickLoginSessionsRequest) Descriptor() ([]byte, []int)

func (*CLUSKickLoginSessionsRequest) GetCtrlerID

func (m *CLUSKickLoginSessionsRequest) GetCtrlerID() string

func (*CLUSKickLoginSessionsRequest) GetServer

func (m *CLUSKickLoginSessionsRequest) GetServer() string

func (*CLUSKickLoginSessionsRequest) GetType

func (*CLUSKickLoginSessionsRequest) GetUserFullname

func (m *CLUSKickLoginSessionsRequest) GetUserFullname() string

func (*CLUSKickLoginSessionsRequest) GetUserName

func (m *CLUSKickLoginSessionsRequest) GetUserName() string

func (*CLUSKickLoginSessionsRequest) GetUserServer

func (m *CLUSKickLoginSessionsRequest) GetUserServer() string

func (*CLUSKickLoginSessionsRequest) ProtoMessage

func (*CLUSKickLoginSessionsRequest) ProtoMessage()

func (*CLUSKickLoginSessionsRequest) Reset

func (m *CLUSKickLoginSessionsRequest) Reset()

func (*CLUSKickLoginSessionsRequest) String

type CLUSLogFilter

type CLUSLogFilter struct {
	Tail int `json:"tail"`
}

type CLUSLoginTokenInfo

type CLUSLoginTokenInfo struct {
	CtrlerID     string `protobuf:"bytes,1,opt,name=CtrlerID" json:"CtrlerID,omitempty"`
	LoginID      string `protobuf:"bytes,2,opt,name=LoginID" json:"LoginID,omitempty"`
	UserFullname string `protobuf:"bytes,3,opt,name=UserFullname" json:"UserFullname,omitempty"`
	LoginToken   string `protobuf:"bytes,4,opt,name=LoginToken" json:"LoginToken,omitempty"`
}

func (*CLUSLoginTokenInfo) Descriptor

func (*CLUSLoginTokenInfo) Descriptor() ([]byte, []int)

func (*CLUSLoginTokenInfo) GetCtrlerID

func (m *CLUSLoginTokenInfo) GetCtrlerID() string

func (*CLUSLoginTokenInfo) GetLoginID

func (m *CLUSLoginTokenInfo) GetLoginID() string

func (*CLUSLoginTokenInfo) GetLoginToken

func (m *CLUSLoginTokenInfo) GetLoginToken() string

func (*CLUSLoginTokenInfo) GetUserFullname

func (m *CLUSLoginTokenInfo) GetUserFullname() string

func (*CLUSLoginTokenInfo) ProtoMessage

func (*CLUSLoginTokenInfo) ProtoMessage()

func (*CLUSLoginTokenInfo) Reset

func (m *CLUSLoginTokenInfo) Reset()

func (*CLUSLoginTokenInfo) String

func (m *CLUSLoginTokenInfo) String() string

type CLUSMappedPort

type CLUSMappedPort struct {
	CLUSProtoPort
	HostIP   net.IP `json:"host_ip"`
	HostPort uint16 `json:"host_port"`
}

type CLUSMeter

type CLUSMeter struct {
	MeterID    uint32 `protobuf:"varint,1,opt,name=MeterID" json:"MeterID,omitempty"`
	Workload   string `protobuf:"bytes,2,opt,name=Workload" json:"Workload,omitempty"`
	PeerIP     []byte `protobuf:"bytes,3,opt,name=PeerIP,proto3" json:"PeerIP,omitempty"`
	Count      uint32 `protobuf:"varint,4,opt,name=Count" json:"Count,omitempty"`
	LastCount  uint32 `protobuf:"varint,5,opt,name=LastCount" json:"LastCount,omitempty"`
	Idle       uint32 `protobuf:"varint,6,opt,name=Idle" json:"Idle,omitempty"`
	Span       uint32 `protobuf:"varint,7,opt,name=Span" json:"Span,omitempty"`
	UpperLimit uint32 `protobuf:"varint,8,opt,name=UpperLimit" json:"UpperLimit,omitempty"`
	LowerLimit uint32 `protobuf:"varint,9,opt,name=LowerLimit" json:"LowerLimit,omitempty"`
	Tap        bool   `protobuf:"varint,10,opt,name=Tap" json:"Tap,omitempty"`
}

func (*CLUSMeter) Descriptor

func (*CLUSMeter) Descriptor() ([]byte, []int)

func (*CLUSMeter) GetCount

func (m *CLUSMeter) GetCount() uint32

func (*CLUSMeter) GetIdle

func (m *CLUSMeter) GetIdle() uint32

func (*CLUSMeter) GetLastCount

func (m *CLUSMeter) GetLastCount() uint32

func (*CLUSMeter) GetLowerLimit

func (m *CLUSMeter) GetLowerLimit() uint32

func (*CLUSMeter) GetMeterID

func (m *CLUSMeter) GetMeterID() uint32

func (*CLUSMeter) GetPeerIP

func (m *CLUSMeter) GetPeerIP() []byte

func (*CLUSMeter) GetSpan

func (m *CLUSMeter) GetSpan() uint32

func (*CLUSMeter) GetTap

func (m *CLUSMeter) GetTap() bool

func (*CLUSMeter) GetUpperLimit

func (m *CLUSMeter) GetUpperLimit() uint32

func (*CLUSMeter) GetWorkload

func (m *CLUSMeter) GetWorkload() string

func (*CLUSMeter) ProtoMessage

func (*CLUSMeter) ProtoMessage()

func (*CLUSMeter) Reset

func (m *CLUSMeter) Reset()

func (*CLUSMeter) String

func (m *CLUSMeter) String() string

type CLUSMeterArray

type CLUSMeterArray struct {
	Meters []*CLUSMeter `protobuf:"bytes,1,rep,name=Meters" json:"Meters,omitempty"`
}

func (*CLUSMeterArray) Descriptor

func (*CLUSMeterArray) Descriptor() ([]byte, []int)

func (*CLUSMeterArray) GetMeters

func (m *CLUSMeterArray) GetMeters() []*CLUSMeter

func (*CLUSMeterArray) ProtoMessage

func (*CLUSMeterArray) ProtoMessage()

func (*CLUSMeterArray) Reset

func (m *CLUSMeterArray) Reset()

func (*CLUSMeterArray) String

func (m *CLUSMeterArray) String() string

type CLUSMetry

type CLUSMetry struct {
	CPU           float64 `protobuf:"fixed64,1,opt,name=CPU" json:"CPU,omitempty"`
	Memory        uint64  `protobuf:"varint,2,opt,name=Memory" json:"Memory,omitempty"`
	SessionIn     uint32  `protobuf:"varint,3,opt,name=SessionIn" json:"SessionIn,omitempty"`
	SessionOut    uint32  `protobuf:"varint,4,opt,name=SessionOut" json:"SessionOut,omitempty"`
	SessionCurIn  uint32  `protobuf:"varint,5,opt,name=SessionCurIn" json:"SessionCurIn,omitempty"`
	SessionCurOut uint32  `protobuf:"varint,6,opt,name=SessionCurOut" json:"SessionCurOut,omitempty"`
	PacketIn      uint64  `protobuf:"varint,7,opt,name=PacketIn" json:"PacketIn,omitempty"`
	PacketOut     uint64  `protobuf:"varint,8,opt,name=PacketOut" json:"PacketOut,omitempty"`
	ByteIn        uint64  `protobuf:"varint,9,opt,name=ByteIn" json:"ByteIn,omitempty"`
	ByteOut       uint64  `protobuf:"varint,10,opt,name=ByteOut" json:"ByteOut,omitempty"`
}

func (*CLUSMetry) Descriptor

func (*CLUSMetry) Descriptor() ([]byte, []int)

func (*CLUSMetry) GetByteIn

func (m *CLUSMetry) GetByteIn() uint64

func (*CLUSMetry) GetByteOut

func (m *CLUSMetry) GetByteOut() uint64

func (*CLUSMetry) GetCPU

func (m *CLUSMetry) GetCPU() float64

func (*CLUSMetry) GetMemory

func (m *CLUSMetry) GetMemory() uint64

func (*CLUSMetry) GetPacketIn

func (m *CLUSMetry) GetPacketIn() uint64

func (*CLUSMetry) GetPacketOut

func (m *CLUSMetry) GetPacketOut() uint64

func (*CLUSMetry) GetSessionCurIn

func (m *CLUSMetry) GetSessionCurIn() uint32

func (*CLUSMetry) GetSessionCurOut

func (m *CLUSMetry) GetSessionCurOut() uint32

func (*CLUSMetry) GetSessionIn

func (m *CLUSMetry) GetSessionIn() uint32

func (*CLUSMetry) GetSessionOut

func (m *CLUSMetry) GetSessionOut() uint32

func (*CLUSMetry) ProtoMessage

func (*CLUSMetry) ProtoMessage()

func (*CLUSMetry) Reset

func (m *CLUSMetry) Reset()

func (*CLUSMetry) String

func (m *CLUSMetry) String() string

type CLUSNetworkEP

type CLUSNetworkEP struct {
	ID        string   `json:"id"`
	Name      string   `json:"name"`
	Type      string   `json:"type"`
	NetworkID string   `json:"net_id"`
	IP        []net.IP `json:"ip"`
}

type CLUSPolicyRule

type CLUSPolicyRule struct {
	ID             uint32    `json:"id"`
	Comment        string    `json:"comment"`
	From           string    `json:"from"` // group name
	To             string    `json:"to"`   // group name
	FromHost       string    `json:"from_host"`
	ToHost         string    `json:"to_host"`
	Ports          string    `json:"ports"` // free-style port list
	Applications   []uint32  `json:"applications"`
	Action         string    `json:"action"`
	Learned_UNUSED bool      `json:"learned"`
	Disable        bool      `json:"Disable"`
	CreatedAt      time.Time `json:"created_at"`
	LastModAt      time.Time `json:"last_modified_at"`
	CfgType        TCfgType  `json:"cfg_type"`
	Priority       uint32    `json:"priority"`
}

func (*CLUSPolicyRule) GetDomain

func (o *CLUSPolicyRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSPolicyRuleCheck

type CLUSPolicyRuleCheck struct {
	ID           uint32   `protobuf:"varint,1,opt,name=ID" json:"ID,omitempty"`
	From         string   `protobuf:"bytes,2,opt,name=From" json:"From,omitempty"`
	To           string   `protobuf:"bytes,3,opt,name=To" json:"To,omitempty"`
	Ports        string   `protobuf:"bytes,4,opt,name=Ports" json:"Ports,omitempty"`
	Applications []uint32 `protobuf:"varint,5,rep,packed,name=Applications" json:"Applications,omitempty"`
	Learned      bool     `protobuf:"varint,6,opt,name=Learned" json:"Learned,omitempty"`
	Disabled     bool     `protobuf:"varint,7,opt,name=Disabled" json:"Disabled,omitempty"`
	CreatedTS    int64    `protobuf:"varint,8,opt,name=CreatedTS" json:"CreatedTS,omitempty"`
	LastModTS    int64    `protobuf:"varint,9,opt,name=LastModTS" json:"LastModTS,omitempty"`
}

func (*CLUSPolicyRuleCheck) Descriptor

func (*CLUSPolicyRuleCheck) Descriptor() ([]byte, []int)

func (*CLUSPolicyRuleCheck) GetApplications

func (m *CLUSPolicyRuleCheck) GetApplications() []uint32

func (*CLUSPolicyRuleCheck) GetCreatedTS

func (m *CLUSPolicyRuleCheck) GetCreatedTS() int64

func (*CLUSPolicyRuleCheck) GetDisabled

func (m *CLUSPolicyRuleCheck) GetDisabled() bool

func (*CLUSPolicyRuleCheck) GetFrom

func (m *CLUSPolicyRuleCheck) GetFrom() string

func (*CLUSPolicyRuleCheck) GetID

func (m *CLUSPolicyRuleCheck) GetID() uint32

func (*CLUSPolicyRuleCheck) GetLastModTS

func (m *CLUSPolicyRuleCheck) GetLastModTS() int64

func (*CLUSPolicyRuleCheck) GetLearned

func (m *CLUSPolicyRuleCheck) GetLearned() bool

func (*CLUSPolicyRuleCheck) GetPorts

func (m *CLUSPolicyRuleCheck) GetPorts() string

func (*CLUSPolicyRuleCheck) GetTo

func (m *CLUSPolicyRuleCheck) GetTo() string

func (*CLUSPolicyRuleCheck) ProtoMessage

func (*CLUSPolicyRuleCheck) ProtoMessage()

func (*CLUSPolicyRuleCheck) Reset

func (m *CLUSPolicyRuleCheck) Reset()

func (*CLUSPolicyRuleCheck) String

func (m *CLUSPolicyRuleCheck) String() string

type CLUSPolicyRuleMismatch

type CLUSPolicyRuleMismatch struct {
	ClusterRule *CLUSPolicyRuleCheck `protobuf:"bytes,1,opt,name=ClusterRule" json:"ClusterRule,omitempty"`
	LearnedRule *CLUSPolicyRuleCheck `protobuf:"bytes,2,opt,name=LearnedRule" json:"LearnedRule,omitempty"`
}

func (*CLUSPolicyRuleMismatch) Descriptor

func (*CLUSPolicyRuleMismatch) Descriptor() ([]byte, []int)

func (*CLUSPolicyRuleMismatch) GetClusterRule

func (m *CLUSPolicyRuleMismatch) GetClusterRule() *CLUSPolicyRuleCheck

func (*CLUSPolicyRuleMismatch) GetLearnedRule

func (m *CLUSPolicyRuleMismatch) GetLearnedRule() *CLUSPolicyRuleCheck

func (*CLUSPolicyRuleMismatch) ProtoMessage

func (*CLUSPolicyRuleMismatch) ProtoMessage()

func (*CLUSPolicyRuleMismatch) Reset

func (m *CLUSPolicyRuleMismatch) Reset()

func (*CLUSPolicyRuleMismatch) String

func (m *CLUSPolicyRuleMismatch) String() string

type CLUSPolicySyncStatus

type CLUSPolicySyncStatus struct {
	Leader         bool                      `protobuf:"varint,1,opt,name=Leader" json:"Leader,omitempty"`
	GraphNodeCount uint32                    `protobuf:"varint,2,opt,name=GraphNodeCount" json:"GraphNodeCount,omitempty"`
	LearnedRuleMax uint32                    `protobuf:"varint,3,opt,name=LearnedRuleMax" json:"LearnedRuleMax,omitempty"`
	Mismatches     []*CLUSPolicyRuleMismatch `protobuf:"bytes,4,rep,name=Mismatches" json:"Mismatches,omitempty"`
}

func (*CLUSPolicySyncStatus) Descriptor

func (*CLUSPolicySyncStatus) Descriptor() ([]byte, []int)

func (*CLUSPolicySyncStatus) GetGraphNodeCount

func (m *CLUSPolicySyncStatus) GetGraphNodeCount() uint32

func (*CLUSPolicySyncStatus) GetLeader

func (m *CLUSPolicySyncStatus) GetLeader() bool

func (*CLUSPolicySyncStatus) GetLearnedRuleMax

func (m *CLUSPolicySyncStatus) GetLearnedRuleMax() uint32

func (*CLUSPolicySyncStatus) GetMismatches

func (m *CLUSPolicySyncStatus) GetMismatches() []*CLUSPolicyRuleMismatch

func (*CLUSPolicySyncStatus) ProtoMessage

func (*CLUSPolicySyncStatus) ProtoMessage()

func (*CLUSPolicySyncStatus) Reset

func (m *CLUSPolicySyncStatus) Reset()

func (*CLUSPolicySyncStatus) String

func (m *CLUSPolicySyncStatus) String() string

type CLUSPortApp

type CLUSPortApp struct {
	Ports       string `json:"port"`
	Application uint32 `json:"application"`
	CheckApp    bool   `json:"check_app"`
}

type CLUSProbeContainer

type CLUSProbeContainer struct {
	Id       string  `protobuf:"bytes,1,opt,name=Id" json:"Id,omitempty"`
	Pid      int32   `protobuf:"varint,2,opt,name=Pid" json:"Pid,omitempty"`
	Children []int32 `protobuf:"varint,3,rep,packed,name=Children" json:"Children,omitempty"`
	PortsMap string  `protobuf:"bytes,4,opt,name=PortsMap" json:"PortsMap,omitempty"`
}

func (*CLUSProbeContainer) Descriptor

func (*CLUSProbeContainer) Descriptor() ([]byte, []int)

func (*CLUSProbeContainer) GetChildren

func (m *CLUSProbeContainer) GetChildren() []int32

func (*CLUSProbeContainer) GetId

func (m *CLUSProbeContainer) GetId() string

func (*CLUSProbeContainer) GetPid

func (m *CLUSProbeContainer) GetPid() int32

func (*CLUSProbeContainer) GetPortsMap

func (m *CLUSProbeContainer) GetPortsMap() string

func (*CLUSProbeContainer) ProtoMessage

func (*CLUSProbeContainer) ProtoMessage()

func (*CLUSProbeContainer) Reset

func (m *CLUSProbeContainer) Reset()

func (*CLUSProbeContainer) String

func (m *CLUSProbeContainer) String() string

type CLUSProbeContainerArray

type CLUSProbeContainerArray struct {
	Containers []*CLUSProbeContainer `protobuf:"bytes,1,rep,name=Containers" json:"Containers,omitempty"`
}

func (*CLUSProbeContainerArray) Descriptor

func (*CLUSProbeContainerArray) Descriptor() ([]byte, []int)

func (*CLUSProbeContainerArray) GetContainers

func (m *CLUSProbeContainerArray) GetContainers() []*CLUSProbeContainer

func (*CLUSProbeContainerArray) ProtoMessage

func (*CLUSProbeContainerArray) ProtoMessage()

func (*CLUSProbeContainerArray) Reset

func (m *CLUSProbeContainerArray) Reset()

func (*CLUSProbeContainerArray) String

func (m *CLUSProbeContainerArray) String() string

type CLUSProbeProcess

type CLUSProbeProcess struct {
	Pid       int32  `protobuf:"varint,1,opt,name=Pid" json:"Pid,omitempty"`
	Ppid      int32  `protobuf:"varint,2,opt,name=Ppid" json:"Ppid,omitempty"`
	Name      string `protobuf:"bytes,3,opt,name=Name" json:"Name,omitempty"`
	Ruid      uint32 `protobuf:"varint,4,opt,name=Ruid" json:"Ruid,omitempty"`
	Euid      uint32 `protobuf:"varint,5,opt,name=Euid" json:"Euid,omitempty"`
	ScanTimes uint32 `protobuf:"varint,6,opt,name=ScanTimes" json:"ScanTimes,omitempty"`
	StartTime uint64 `protobuf:"varint,7,opt,name=StartTime" json:"StartTime,omitempty"`
	Reported  uint32 `protobuf:"varint,8,opt,name=Reported" json:"Reported,omitempty"`
	Container string `protobuf:"bytes,9,opt,name=Container" json:"Container,omitempty"`
}

func (*CLUSProbeProcess) Descriptor

func (*CLUSProbeProcess) Descriptor() ([]byte, []int)

func (*CLUSProbeProcess) GetContainer

func (m *CLUSProbeProcess) GetContainer() string

func (*CLUSProbeProcess) GetEuid

func (m *CLUSProbeProcess) GetEuid() uint32

func (*CLUSProbeProcess) GetName

func (m *CLUSProbeProcess) GetName() string

func (*CLUSProbeProcess) GetPid

func (m *CLUSProbeProcess) GetPid() int32

func (*CLUSProbeProcess) GetPpid

func (m *CLUSProbeProcess) GetPpid() int32

func (*CLUSProbeProcess) GetReported

func (m *CLUSProbeProcess) GetReported() uint32

func (*CLUSProbeProcess) GetRuid

func (m *CLUSProbeProcess) GetRuid() uint32

func (*CLUSProbeProcess) GetScanTimes

func (m *CLUSProbeProcess) GetScanTimes() uint32

func (*CLUSProbeProcess) GetStartTime

func (m *CLUSProbeProcess) GetStartTime() uint64

func (*CLUSProbeProcess) ProtoMessage

func (*CLUSProbeProcess) ProtoMessage()

func (*CLUSProbeProcess) Reset

func (m *CLUSProbeProcess) Reset()

func (*CLUSProbeProcess) String

func (m *CLUSProbeProcess) String() string

type CLUSProbeProcessArray

type CLUSProbeProcessArray struct {
	Processes []*CLUSProbeProcess `protobuf:"bytes,1,rep,name=Processes" json:"Processes,omitempty"`
}

func (*CLUSProbeProcessArray) Descriptor

func (*CLUSProbeProcessArray) Descriptor() ([]byte, []int)

func (*CLUSProbeProcessArray) GetProcesses

func (m *CLUSProbeProcessArray) GetProcesses() []*CLUSProbeProcess

func (*CLUSProbeProcessArray) ProtoMessage

func (*CLUSProbeProcessArray) ProtoMessage()

func (*CLUSProbeProcessArray) Reset

func (m *CLUSProbeProcessArray) Reset()

func (*CLUSProbeProcessArray) String

func (m *CLUSProbeProcessArray) String() string

type CLUSProbeSummary

type CLUSProbeSummary struct {
	ContainerMap       uint32 `protobuf:"varint,1,opt,name=ContainerMap" json:"ContainerMap,omitempty"`
	PidContainerMap    uint32 `protobuf:"varint,2,opt,name=PidContainerMap" json:"PidContainerMap,omitempty"`
	PidProcMap         uint32 `protobuf:"varint,3,opt,name=PidProcMap" json:"PidProcMap,omitempty"`
	NewProcesses       uint32 `protobuf:"varint,4,opt,name=NewProcesses" json:"NewProcesses,omitempty"`
	NewSuspicProc      uint32 `protobuf:"varint,5,opt,name=NewSuspicProc" json:"NewSuspicProc,omitempty"`
	ContainerStops     uint32 `protobuf:"varint,6,opt,name=ContainerStops" json:"ContainerStops,omitempty"`
	WLStorageWatch     uint32 `protobuf:"varint,7,opt,name=WLStorageWatch" json:"WLStorageWatch,omitempty"`
	PidSet             uint32 `protobuf:"varint,8,opt,name=PidSet" json:"PidSet,omitempty"`
	SessionTable       uint32 `protobuf:"varint,9,opt,name=SessionTable" json:"SessionTable,omitempty"`
	InotifyWatches     uint32 `protobuf:"varint,10,opt,name=InotifyWatches" json:"InotifyWatches,omitempty"`
	ProcBlockRoots     uint32 `protobuf:"varint,11,opt,name=ProcBlockRoots" json:"ProcBlockRoots,omitempty"`
	ProcBlockMarks     uint32 `protobuf:"varint,12,opt,name=ProcBlockMarks" json:"ProcBlockMarks,omitempty"`
	ProcBlockEntryCnt  uint32 `protobuf:"varint,13,opt,name=ProcBlockEntryCnt" json:"ProcBlockEntryCnt,omitempty"`
	ProcBlockDirMonCnt uint32 `protobuf:"varint,14,opt,name=ProcBlockDirMonCnt" json:"ProcBlockDirMonCnt,omitempty"`
	FileMonEvents      uint32 `protobuf:"varint,15,opt,name=FileMonEvents" json:"FileMonEvents,omitempty"`
	FileMonGroups      uint32 `protobuf:"varint,16,opt,name=FileMonGroups" json:"FileMonGroups,omitempty"`
	FileMonFaRoots     uint32 `protobuf:"varint,17,opt,name=FileMonFaRoots" json:"FileMonFaRoots,omitempty"`
	FileMonFaMntRoots  uint32 `protobuf:"varint,18,opt,name=FileMonFaMntRoots" json:"FileMonFaMntRoots,omitempty"`
	FileMonFaDirMarks  uint32 `protobuf:"varint,19,opt,name=FileMonFaDirMarks" json:"FileMonFaDirMarks,omitempty"`
	FileMonFaRules     uint32 `protobuf:"varint,20,opt,name=FileMonFaRules" json:"FileMonFaRules,omitempty"`
	FileMonFaPaths     uint32 `protobuf:"varint,21,opt,name=FileMonFaPaths" json:"FileMonFaPaths,omitempty"`
	FileMonFaDirs      uint32 `protobuf:"varint,22,opt,name=FileMonFaDirs" json:"FileMonFaDirs,omitempty"`
	FileMonInWds       uint32 `protobuf:"varint,23,opt,name=FileMonInWds" json:"FileMonInWds,omitempty"`
	FileMonInPaths     uint32 `protobuf:"varint,24,opt,name=FileMonInPaths" json:"FileMonInPaths,omitempty"`
	FileMonInDirs      uint32 `protobuf:"varint,25,opt,name=FileMonInDirs" json:"FileMonInDirs,omitempty"`
	MaxEvalChanQueued  uint32 `protobuf:"varint,26,opt,name=MaxEvalChanQueued" json:"MaxEvalChanQueued,omitempty"`
	MaxGoroutines      uint32 `protobuf:"varint,27,opt,name=MaxGoroutines" json:"MaxGoroutines,omitempty"`
}

func (*CLUSProbeSummary) Descriptor

func (*CLUSProbeSummary) Descriptor() ([]byte, []int)

func (*CLUSProbeSummary) GetContainerMap

func (m *CLUSProbeSummary) GetContainerMap() uint32

func (*CLUSProbeSummary) GetContainerStops

func (m *CLUSProbeSummary) GetContainerStops() uint32

func (*CLUSProbeSummary) GetFileMonEvents

func (m *CLUSProbeSummary) GetFileMonEvents() uint32

func (*CLUSProbeSummary) GetFileMonFaDirMarks

func (m *CLUSProbeSummary) GetFileMonFaDirMarks() uint32

func (*CLUSProbeSummary) GetFileMonFaDirs

func (m *CLUSProbeSummary) GetFileMonFaDirs() uint32

func (*CLUSProbeSummary) GetFileMonFaMntRoots

func (m *CLUSProbeSummary) GetFileMonFaMntRoots() uint32

func (*CLUSProbeSummary) GetFileMonFaPaths

func (m *CLUSProbeSummary) GetFileMonFaPaths() uint32

func (*CLUSProbeSummary) GetFileMonFaRoots

func (m *CLUSProbeSummary) GetFileMonFaRoots() uint32

func (*CLUSProbeSummary) GetFileMonFaRules

func (m *CLUSProbeSummary) GetFileMonFaRules() uint32

func (*CLUSProbeSummary) GetFileMonGroups

func (m *CLUSProbeSummary) GetFileMonGroups() uint32

func (*CLUSProbeSummary) GetFileMonInDirs

func (m *CLUSProbeSummary) GetFileMonInDirs() uint32

func (*CLUSProbeSummary) GetFileMonInPaths

func (m *CLUSProbeSummary) GetFileMonInPaths() uint32

func (*CLUSProbeSummary) GetFileMonInWds

func (m *CLUSProbeSummary) GetFileMonInWds() uint32

func (*CLUSProbeSummary) GetInotifyWatches

func (m *CLUSProbeSummary) GetInotifyWatches() uint32

func (*CLUSProbeSummary) GetMaxEvalChanQueued

func (m *CLUSProbeSummary) GetMaxEvalChanQueued() uint32

func (*CLUSProbeSummary) GetMaxGoroutines

func (m *CLUSProbeSummary) GetMaxGoroutines() uint32

func (*CLUSProbeSummary) GetNewProcesses

func (m *CLUSProbeSummary) GetNewProcesses() uint32

func (*CLUSProbeSummary) GetNewSuspicProc

func (m *CLUSProbeSummary) GetNewSuspicProc() uint32

func (*CLUSProbeSummary) GetPidContainerMap

func (m *CLUSProbeSummary) GetPidContainerMap() uint32

func (*CLUSProbeSummary) GetPidProcMap

func (m *CLUSProbeSummary) GetPidProcMap() uint32

func (*CLUSProbeSummary) GetPidSet

func (m *CLUSProbeSummary) GetPidSet() uint32

func (*CLUSProbeSummary) GetProcBlockDirMonCnt

func (m *CLUSProbeSummary) GetProcBlockDirMonCnt() uint32

func (*CLUSProbeSummary) GetProcBlockEntryCnt

func (m *CLUSProbeSummary) GetProcBlockEntryCnt() uint32

func (*CLUSProbeSummary) GetProcBlockMarks

func (m *CLUSProbeSummary) GetProcBlockMarks() uint32

func (*CLUSProbeSummary) GetProcBlockRoots

func (m *CLUSProbeSummary) GetProcBlockRoots() uint32

func (*CLUSProbeSummary) GetSessionTable

func (m *CLUSProbeSummary) GetSessionTable() uint32

func (*CLUSProbeSummary) GetWLStorageWatch

func (m *CLUSProbeSummary) GetWLStorageWatch() uint32

func (*CLUSProbeSummary) ProtoMessage

func (*CLUSProbeSummary) ProtoMessage()

func (*CLUSProbeSummary) Reset

func (m *CLUSProbeSummary) Reset()

func (*CLUSProbeSummary) String

func (m *CLUSProbeSummary) String() string

type CLUSProcProfileArray

type CLUSProcProfileArray struct {
	Processes []*CLUSProcProfileReq `protobuf:"bytes,1,rep,name=Processes" json:"Processes,omitempty"`
}

func (*CLUSProcProfileArray) Descriptor

func (*CLUSProcProfileArray) Descriptor() ([]byte, []int)

func (*CLUSProcProfileArray) GetProcesses

func (m *CLUSProcProfileArray) GetProcesses() []*CLUSProcProfileReq

func (*CLUSProcProfileArray) ProtoMessage

func (*CLUSProcProfileArray) ProtoMessage()

func (*CLUSProcProfileArray) Reset

func (m *CLUSProcProfileArray) Reset()

func (*CLUSProcProfileArray) String

func (m *CLUSProcProfileArray) String() string

type CLUSProcProfileReq

type CLUSProcProfileReq struct {
	GroupName string `protobuf:"bytes,1,opt,name=GroupName" json:"GroupName,omitempty"`
	Name      string `protobuf:"bytes,2,opt,name=Name" json:"Name,omitempty"`
	Path      string `protobuf:"bytes,3,opt,name=Path" json:"Path,omitempty"`
	User      string `protobuf:"bytes,4,opt,name=User" json:"User,omitempty"`
	Uid       int32  `protobuf:"varint,5,opt,name=Uid" json:"Uid,omitempty"`
	Hash      []byte `protobuf:"bytes,6,opt,name=Hash,proto3" json:"Hash,omitempty"`
	Action    string `protobuf:"bytes,7,opt,name=Action" json:"Action,omitempty"`
}

func (*CLUSProcProfileReq) Descriptor

func (*CLUSProcProfileReq) Descriptor() ([]byte, []int)

func (*CLUSProcProfileReq) GetAction

func (m *CLUSProcProfileReq) GetAction() string

func (*CLUSProcProfileReq) GetGroupName

func (m *CLUSProcProfileReq) GetGroupName() string

func (*CLUSProcProfileReq) GetHash

func (m *CLUSProcProfileReq) GetHash() []byte

func (*CLUSProcProfileReq) GetName

func (m *CLUSProcProfileReq) GetName() string

func (*CLUSProcProfileReq) GetPath

func (m *CLUSProcProfileReq) GetPath() string

func (*CLUSProcProfileReq) GetUid

func (m *CLUSProcProfileReq) GetUid() int32

func (*CLUSProcProfileReq) GetUser

func (m *CLUSProcProfileReq) GetUser() string

func (*CLUSProcProfileReq) ProtoMessage

func (*CLUSProcProfileReq) ProtoMessage()

func (*CLUSProcProfileReq) Reset

func (m *CLUSProcProfileReq) Reset()

func (*CLUSProcProfileReq) String

func (m *CLUSProcProfileReq) String() string

type CLUSProcess

type CLUSProcess struct {
	Name    string   `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Pid     uint32   `protobuf:"varint,2,opt,name=Pid" json:"Pid,omitempty"`
	PPid    uint32   `protobuf:"varint,3,opt,name=PPid" json:"PPid,omitempty"`
	PGid    uint32   `protobuf:"varint,4,opt,name=PGid" json:"PGid,omitempty"`
	PSid    uint32   `protobuf:"varint,5,opt,name=PSid" json:"PSid,omitempty"`
	RUid    uint32   `protobuf:"varint,6,opt,name=RUid" json:"RUid,omitempty"`
	EUid    uint32   `protobuf:"varint,7,opt,name=EUid" json:"EUid,omitempty"`
	Cmds    []string `protobuf:"bytes,8,rep,name=Cmds" json:"Cmds,omitempty"`
	Root    bool     `protobuf:"varint,9,opt,name=Root" json:"Root,omitempty"`
	User    string   `protobuf:"bytes,10,opt,name=User" json:"User,omitempty"`
	Status  string   `protobuf:"bytes,11,opt,name=Status" json:"Status,omitempty"`
	StartAt int64    `protobuf:"varint,12,opt,name=StartAt" json:"StartAt,omitempty"`
	Action  string   `protobuf:"bytes,13,opt,name=Action" json:"Action,omitempty"`
}

func (*CLUSProcess) Descriptor

func (*CLUSProcess) Descriptor() ([]byte, []int)

func (*CLUSProcess) GetAction

func (m *CLUSProcess) GetAction() string

func (*CLUSProcess) GetCmds

func (m *CLUSProcess) GetCmds() []string

func (*CLUSProcess) GetEUid

func (m *CLUSProcess) GetEUid() uint32

func (*CLUSProcess) GetName

func (m *CLUSProcess) GetName() string

func (*CLUSProcess) GetPGid

func (m *CLUSProcess) GetPGid() uint32

func (*CLUSProcess) GetPPid

func (m *CLUSProcess) GetPPid() uint32

func (*CLUSProcess) GetPSid

func (m *CLUSProcess) GetPSid() uint32

func (*CLUSProcess) GetPid

func (m *CLUSProcess) GetPid() uint32

func (*CLUSProcess) GetRUid

func (m *CLUSProcess) GetRUid() uint32

func (*CLUSProcess) GetRoot

func (m *CLUSProcess) GetRoot() bool

func (*CLUSProcess) GetStartAt

func (m *CLUSProcess) GetStartAt() int64

func (*CLUSProcess) GetStatus

func (m *CLUSProcess) GetStatus() string

func (*CLUSProcess) GetUser

func (m *CLUSProcess) GetUser() string

func (*CLUSProcess) ProtoMessage

func (*CLUSProcess) ProtoMessage()

func (*CLUSProcess) Reset

func (m *CLUSProcess) Reset()

func (*CLUSProcess) String

func (m *CLUSProcess) String() string

type CLUSProcessArray

type CLUSProcessArray struct {
	Processes []*CLUSProcess `protobuf:"bytes,1,rep,name=Processes" json:"Processes,omitempty"`
}

func (*CLUSProcessArray) Descriptor

func (*CLUSProcessArray) Descriptor() ([]byte, []int)

func (*CLUSProcessArray) GetProcesses

func (m *CLUSProcessArray) GetProcesses() []*CLUSProcess

func (*CLUSProcessArray) ProtoMessage

func (*CLUSProcessArray) ProtoMessage()

func (*CLUSProcessArray) Reset

func (m *CLUSProcessArray) Reset()

func (*CLUSProcessArray) String

func (m *CLUSProcessArray) String() string

type CLUSProcessProfile

type CLUSProcessProfile struct {
	Group        string                     `json:"group"`
	AlertDisable bool                       `json:"alert_disabled"`
	HashEnable   bool                       `json:"hash_enabled"`
	Mode         string                     `json:"mode"`
	Baseline     string                     `json:"baseline"`
	Process      []*CLUSProcessProfileEntry `json:"process"`
	CfgType      TCfgType                   `json:"cfg_type"`
}

func (*CLUSProcessProfile) GetDomain

func (o *CLUSProcessProfile) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSProcessProfileEntry

type CLUSProcessProfileEntry struct {
	Name            string    `json:"name"`
	Path            string    `json:"path"`
	User            string    `json:"user"`
	Uid             int32     `json:"uid"`
	Hash            []byte    `json:"hash"`
	Action          string    `json:"action"`
	CfgType         TCfgType  `json:"cfg_type"`
	CreatedAt       time.Time `json:"created_at"`
	UpdatedAt       time.Time `json:"updated_at"`
	Uuid            string    `json:"uuid"`
	DerivedGroup    string    `json:"dgroup"`
	AllowFileUpdate bool      `json:"allow_update"`
}

type CLUSProfilingRequest

type CLUSProfilingRequest struct {
	Cmd      ProfilingCmd      `protobuf:"varint,1,opt,name=Cmd,enum=share.ProfilingCmd" json:"Cmd,omitempty"`
	Methods  []ProfilingMethod `protobuf:"varint,2,rep,packed,name=Methods,enum=share.ProfilingMethod" json:"Methods,omitempty"`
	Duration uint32            `protobuf:"varint,3,opt,name=Duration" json:"Duration,omitempty"`
}

func (*CLUSProfilingRequest) Descriptor

func (*CLUSProfilingRequest) Descriptor() ([]byte, []int)

func (*CLUSProfilingRequest) GetCmd

func (m *CLUSProfilingRequest) GetCmd() ProfilingCmd

func (*CLUSProfilingRequest) GetDuration

func (m *CLUSProfilingRequest) GetDuration() uint32

func (*CLUSProfilingRequest) GetMethods

func (m *CLUSProfilingRequest) GetMethods() []ProfilingMethod

func (*CLUSProfilingRequest) ProtoMessage

func (*CLUSProfilingRequest) ProtoMessage()

func (*CLUSProfilingRequest) Reset

func (m *CLUSProfilingRequest) Reset()

func (*CLUSProfilingRequest) String

func (m *CLUSProfilingRequest) String() string

type CLUSProtoPort

type CLUSProtoPort struct {
	IPProto uint8  `json:"ip_proto"`
	Port    uint16 `json:"port"`
}

type CLUSProxy

type CLUSProxy struct {
	Enable   bool   `json:"enable"`
	URL      string `json:"url"`
	Username string `json:"username"`
	Password string `json:"password,cloak"`
}

type CLUSPwdProfile

type CLUSPwdProfile struct {
	Name                        string `json:"name"`
	Comment                     string `json:"comment"`
	MinLen                      int    `json:"min_len"`
	MinUpperCount               int    `json:"min_uppercase_count"` // for alphabet characters
	MinLowerCount               int    `json:"min_lowercase_count"` // for alphabet characters
	MinDigitCount               int    `json:"min_digit_count"`
	MinSpecialCount             int    `json:"min_special_count"`
	EnablePwdExpiration         bool   `json:"enable_password_expiration"`
	PwdExpireAfterDays          int    `json:"password_expire_after_days"` // must be > 0 when EnablePwdExpiration is true
	EnablePwdHistory            bool   `json:"enable_password_history"`
	PwdHistoryCount             int    `json:"password_keep_history_count"`
	EnableBlockAfterFailedLogin bool   `json:"enable_block_after_failed_login"` // for "Block X minutes after N times failed attempts"
	BlockAfterFailedCount       int    `json:"block_after_failed_login_count"`  // must be > 0 when EnableBlockAfterFailedLogin is true
	BlockMinutes                int    `json:"block_minutes"`                   // must be > 0 when EnableBlockAfterFailedLogin is true
}

func (*CLUSPwdProfile) GetDomain

func (o *CLUSPwdProfile) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSRegistryConfig

type CLUSRegistryConfig struct {
	Registry           string                `json:"registry"`
	Name               string                `json:"name"`
	Type               string                `json:"type"`
	Username           string                `json:"username"`
	Password           string                `json:"password,cloak"`
	AuthToken          string                `json:"auth_token,cloak"`
	AuthWithToken      bool                  `json:"auth_with_token"`
	Domains            []string              `json:"domains"`
	CreaterDomains     []string              `json:"creater_domains"`
	Filters            []string              `json:"filters"`
	ParsedFilters      []*CLUSRegistryFilter `json:"parsed_filters"`
	RescanImage        bool                  `json:"rescan_image"`
	ScanLayers         bool                  `json:"scan_layers"`
	DisableFiles       bool                  `json:"disable_files"`
	RepoLimit          int                   `json:"repo_limit"`
	TagLimit           int                   `json:"tag_limit"`
	Schedule           string                `json:"schedule"`
	PollPeriod         int                   `json:"poll_period"`
	AwsKey             *CLUSAWSAccountKey    `json:"aws_key"`
	GcrKey             *CLUSGCRKey           `json:"gcr_key"`
	JfrogMode          string                `json:"jfrog_mode"`
	JfrogAQL           bool                  `json:"jfrog_aql"`
	GitlabApiUrl       string                `json:"gitlab_api_url"`
	GitlabPrivateToken string                `json:"gitlab_private_token,cloak"`
	IBMCloudAccount    string                `json:"ibmcloud_account"`
	IBMCloudTokenURL   string                `json:"ibmcloud_token_url"`
	HarborVersion      string                `json:"harbor_version"`
	SwrKey             *CLUSSWRAccountKey    `json:"swr_key"`
}

func (*CLUSRegistryConfig) GetDomain

func (o *CLUSRegistryConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSRegistryFilter

type CLUSRegistryFilter struct {
	Org  string `json:"organization"`
	Repo string `json:"repository"`
	Tag  string `json:"tag"`
}

func (*CLUSRegistryFilter) GetDomain

func (o *CLUSRegistryFilter) GetDomain(f GetAccessObjectFunc) ([]string, []string)

for registry filter in openshift registry only

type CLUSRegistryImageSummary

type CLUSRegistryImageSummary struct {
	ImageID   string        `json:"image_id"`
	Registry  string        `json:"registry"`
	RegName   string        `json:"reg_name"`
	Images    []CLUSImage   `json:"repo_tag"`
	Digest    string        `json:"digest"`
	ScannedAt time.Time     `json:"scanned_at"`
	BaseOS    string        `json:"base_os"`
	Version   string        `json:"version"`
	Result    ScanErrorCode `json:"result"`
	Status    string        `json:"status"`
	Author    string        `json:"author"`
	RunAsRoot bool          `json:"run_as_root"`
	Signed    bool          `json:"signed"` // [2019.Apr] comment out until we can accurately tell it
	ScanFlags uint32        `json:"scan_flags"`
	Provider  ScanProvider  `json:"provider"`
	Size      int64         `json:"size"`
}

func (*CLUSRegistryImageSummary) GetDomain

type CLUSRegistryState

type CLUSRegistryState struct {
	Status    string `json:"status"`
	ErrMsg    string `json:"error_message"`
	ErrDetail string `json:"error_detail"`
	StartedAt int64  `json:"started_at"`
}

type CLUSRegistryTypeDummy

type CLUSRegistryTypeDummy struct{} // dummy type just for access control checking purpose

func (*CLUSRegistryTypeDummy) GetDomain

func (o *CLUSRegistryTypeDummy) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSReportResponse

type CLUSReportResponse struct {
	Action         ReportRespAction `protobuf:"varint,1,opt,name=Action,enum=share.ReportRespAction" json:"Action,omitempty"`
	ReportInterval uint32           `protobuf:"varint,2,opt,name=ReportInterval" json:"ReportInterval,omitempty"`
}

func (*CLUSReportResponse) Descriptor

func (*CLUSReportResponse) Descriptor() ([]byte, []int)

func (*CLUSReportResponse) GetAction

func (m *CLUSReportResponse) GetAction() ReportRespAction

func (*CLUSReportResponse) GetReportInterval

func (m *CLUSReportResponse) GetReportInterval() uint32

func (*CLUSReportResponse) ProtoMessage

func (*CLUSReportResponse) ProtoMessage()

func (*CLUSReportResponse) Reset

func (m *CLUSReportResponse) Reset()

func (*CLUSReportResponse) String

func (m *CLUSReportResponse) String() string

type CLUSResponseRule

type CLUSResponseRule struct {
	ID         uint32               `json:"id"`
	Event      string               `json:"event"`
	Comment    string               `json:"comment,omitempty"`
	Group      string               `json:"group,omitempty"`
	Conditions []CLUSEventCondition `json:"conditions,omitempty"`
	Actions    []string             `json:"actions"`
	Webhooks   []string             `json:"webhooks"`
	Disable    bool                 `json:"disable,omitempty"`
	CfgType    TCfgType             `json:"cfg_type"`
}

func (*CLUSResponseRule) GetDomain

func (o *CLUSResponseRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSResponseRuleOptionsDummy

type CLUSResponseRuleOptionsDummy struct{} // dummy type just for access control checking purpose

func (*CLUSResponseRuleOptionsDummy) GetDomain

type CLUSRestServerInfo

type CLUSRestServerInfo struct {
	Server string `json:"server"`
	Port   uint   `json:"port"`
}

type CLUSRolePermission

type CLUSRolePermission struct {
	ID    string `json:"id"`
	Read  bool   `json:"read"`
	Write bool   `json:"write"`
}

type CLUSRuleHead

type CLUSRuleHead struct {
	ID             uint32   `json:"id"`
	Priority       uint32   `json:"priority"`
	Learned_UNUSED bool     `json:"learned"`
	CfgType        TCfgType `json:"cfg_type"`
}

type CLUSSWRAccountKey added in v1.0.14

type CLUSSWRAccountKey struct {
	AccessKey       string `json:"access_key"`
	SecretAccessKey string `json:"secret_access_key"`
	Region          string `json:"region"`
}

type CLUSScanConfig

type CLUSScanConfig struct {
	AutoScan bool `json:"auto_scan"`
}

func (*CLUSScanConfig) GetDomain

func (o *CLUSScanConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSScanReport

type CLUSScanReport struct {
	ScannedAt time.Time `json:"scanned_at"`
	ScanResult
}

ScanResult is used for local RPC so the structure can be stored in the cluster

func (*CLUSScanReport) GetDomain

func (o *CLUSScanReport) GetDomain(f GetAccessObjectFunc) ([]string, []string)

for scan report in openshift registry only

type CLUSScanState

type CLUSScanState struct {
	ScannedAt time.Time `json:"scanned_at"`
	Status    string    `json:"status"`
}

type CLUSScannedVulInfo

type CLUSScannedVulInfo struct {
	PublishDate int64   `json:"publish_date"`
	WithFix     bool    `json:"with_fix"`
	Score       float32 `json:"score"`
}

type CLUSScannedVulInfoSimple

type CLUSScannedVulInfoSimple struct {
	Score float32 `json:"score"`
}

type CLUSScanner

type CLUSScanner struct {
	ID              string    `json:"id"`
	CVEDBVersion    string    `json:"db_version"`
	CVEDBCreateTime string    `json:"db_create_time"`
	JoinedAt        time.Time `json:"joined_at"`
	RPCServer       string    `json:"rpc_server"`
	RPCServerPort   uint16    `json:"rpc_port"`
	BuiltIn         bool      `json:"builtin"`
	CVEDBEntries    int       `json:"db_entries"`
}

func (*CLUSScanner) GetDomain

func (o *CLUSScanner) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSScannerDB

type CLUSScannerDB struct {
	CVEDBVersion    string                        `json:"db_version"`
	CVEDBCreateTime string                        `json:"db_create_time"`
	CVEDB           map[string]*ScanVulnerability `json:"db"`
}

type CLUSScannerStats

type CLUSScannerStats struct {
	ID                string `json:"id"`
	TotalContainers   int    `json:"total_containers"`
	TotalHosts        int    `json:"total_hosts"`
	TotalImages       int    `json:"total_images"`
	TotalServerless   int    `json:"total_serverless"`
	ScannedContainers int    `json:"scanned_containers"`
	ScannedHosts      int    `json:"scanned_hosts"`
	ScannedImages     int    `json:"scanned_images"`
	ScannedServerless int    `json:"scanned_serverless"`
}

type CLUSSecretLog

type CLUSSecretLog struct {
	Type       string `json:"type"`       // secret type
	Text       string `json:"secret"`     // detected secret or signature
	Line       string `json:"line"`       // full line in the content
	File       string `json:"path"`       // file path
	RuleDesc   string `json:"rule_desc"`  // rule description
	Suggestion string `json:"suggestion"` // suggestion to reduce the risk
}

CLUSSecretLog provides reports at scanner/enforcer layer

type CLUSServer

type CLUSServer struct {
	Name   string          `json:"name"`
	Enable bool            `json:"enable"`
	LDAP   *CLUSServerLDAP `json:"ldap,omitempty"`
	SAML   *CLUSServerSAML `json:"saml,omitempty"`
	OIDC   *CLUSServerOIDC `json:"oidc,omitempty"`
}

func (*CLUSServer) GetDomain

func (o *CLUSServer) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSServerAuth

type CLUSServerAuth struct {
	DefaultRole      string              `json:"default_role"`
	RoleGroups       map[string][]string `json:"groups"`             // role -> groups. obsolete since 4.2
	GroupMappedRoles []*GroupRoleMapping `json:"group_mapped_roles"` // group -> (role -> domains). supported since 4.2
}

type CLUSServerLDAP

type CLUSServerLDAP struct {
	CLUSServerAuth
	Type            string `json:"type"`
	Hostname        string `json:"hostname"`
	Port            uint16 `json:"port"`
	SSL             bool   `json:"ssl"`
	BaseDN          string `json:"base_dn"`
	BindDN          string `json:"bind_dn"` // Must handle upgrade if it is cloaked
	BindPasswd      string `json:"bind_password,cloak"`
	GroupMemberAttr string `json:"group_member_attr"`
	UserNameAttr    string `json:"username_attr"`
}

type CLUSServerOIDC

type CLUSServerOIDC struct {
	CLUSServerAuth
	Issuer       string   `json:"issuer"`
	AuthURL      string   `json:"authorization_endpoint"`
	TokenURL     string   `json:"token_endpoint"`
	UserInfoURL  string   `json:"user_info_endpoint"`
	JWKSURL      string   `json:"jwks_endpoint"`
	ClientID     string   `json:"client_id"` // Must handle upgrade if it is cloaked
	ClientSecret string   `json:"client_secret,cloak"`
	Scopes       []string `json:"scopes"`
	GroupClaim   string   `json:"group_claim"`
}

type CLUSServerSAML

type CLUSServerSAML struct {
	CLUSServerAuth
	SSOURL     string `json:"sso_url"`
	Issuer     string `json:"issuer"`
	X509Cert   string `json:"x509_cert,cloak"`
	GroupClaim string `json:"group_claim"`
}

type CLUSSession

type CLUSSession struct {
	ID             uint32 `protobuf:"varint,1,opt,name=ID" json:"ID,omitempty"`
	Workload       string `protobuf:"bytes,2,opt,name=Workload" json:"Workload,omitempty"`
	EtherType      uint32 `protobuf:"varint,3,opt,name=EtherType" json:"EtherType,omitempty"`
	IPProto        uint32 `protobuf:"varint,4,opt,name=IPProto" json:"IPProto,omitempty"`
	ClientMAC      []byte `protobuf:"bytes,5,opt,name=ClientMAC,proto3" json:"ClientMAC,omitempty"`
	ServerMAC      []byte `protobuf:"bytes,6,opt,name=ServerMAC,proto3" json:"ServerMAC,omitempty"`
	ClientIP       []byte `protobuf:"bytes,7,opt,name=ClientIP,proto3" json:"ClientIP,omitempty"`
	ServerIP       []byte `protobuf:"bytes,8,opt,name=ServerIP,proto3" json:"ServerIP,omitempty"`
	ClientPort     uint32 `protobuf:"varint,9,opt,name=ClientPort" json:"ClientPort,omitempty"`
	ServerPort     uint32 `protobuf:"varint,10,opt,name=ServerPort" json:"ServerPort,omitempty"`
	ICMPCode       uint32 `protobuf:"varint,11,opt,name=ICMPCode" json:"ICMPCode,omitempty"`
	ICMPType       uint32 `protobuf:"varint,12,opt,name=ICMPType" json:"ICMPType,omitempty"`
	ClientState    uint32 `protobuf:"varint,13,opt,name=ClientState" json:"ClientState,omitempty"`
	ServerState    uint32 `protobuf:"varint,14,opt,name=ServerState" json:"ServerState,omitempty"`
	ClientPkts     uint32 `protobuf:"varint,15,opt,name=ClientPkts" json:"ClientPkts,omitempty"`
	ServerPkts     uint32 `protobuf:"varint,16,opt,name=ServerPkts" json:"ServerPkts,omitempty"`
	ClientBytes    uint64 `protobuf:"varint,17,opt,name=ClientBytes" json:"ClientBytes,omitempty"`
	ServerBytes    uint64 `protobuf:"varint,18,opt,name=ServerBytes" json:"ServerBytes,omitempty"`
	Application    uint32 `protobuf:"varint,19,opt,name=Application" json:"Application,omitempty"`
	Age            uint32 `protobuf:"varint,20,opt,name=Age" json:"Age,omitempty"`
	Idle           uint32 `protobuf:"varint,21,opt,name=Idle" json:"Idle,omitempty"`
	Life           uint32 `protobuf:"varint,22,opt,name=Life" json:"Life,omitempty"`
	Ingress        bool   `protobuf:"varint,23,opt,name=Ingress" json:"Ingress,omitempty"`
	Tap            bool   `protobuf:"varint,24,opt,name=Tap" json:"Tap,omitempty"`
	Mid            bool   `protobuf:"varint,25,opt,name=Mid" json:"Mid,omitempty"`
	PolicyId       uint32 `protobuf:"varint,26,opt,name=PolicyId" json:"PolicyId,omitempty"`
	PolicyAction   uint32 `protobuf:"varint,27,opt,name=PolicyAction" json:"PolicyAction,omitempty"`
	ClientAsmPkts  uint32 `protobuf:"varint,28,opt,name=ClientAsmPkts" json:"ClientAsmPkts,omitempty"`
	ServerAsmPkts  uint32 `protobuf:"varint,29,opt,name=ServerAsmPkts" json:"ServerAsmPkts,omitempty"`
	ClientAsmBytes uint64 `protobuf:"varint,30,opt,name=ClientAsmBytes" json:"ClientAsmBytes,omitempty"`
	ServerAsmBytes uint64 `protobuf:"varint,31,opt,name=ServerAsmBytes" json:"ServerAsmBytes,omitempty"`
	HostMode       bool   `protobuf:"varint,32,opt,name=HostMode" json:"HostMode,omitempty"`
	XffIP          []byte `protobuf:"bytes,33,opt,name=XffIP,proto3" json:"XffIP,omitempty"`
	XffApp         uint32 `protobuf:"varint,34,opt,name=XffApp" json:"XffApp,omitempty"`
	XffPort        uint32 `protobuf:"varint,35,opt,name=XffPort" json:"XffPort,omitempty"`
}

func (*CLUSSession) Descriptor

func (*CLUSSession) Descriptor() ([]byte, []int)

func (*CLUSSession) GetAge

func (m *CLUSSession) GetAge() uint32

func (*CLUSSession) GetApplication

func (m *CLUSSession) GetApplication() uint32

func (*CLUSSession) GetClientAsmBytes

func (m *CLUSSession) GetClientAsmBytes() uint64

func (*CLUSSession) GetClientAsmPkts

func (m *CLUSSession) GetClientAsmPkts() uint32

func (*CLUSSession) GetClientBytes

func (m *CLUSSession) GetClientBytes() uint64

func (*CLUSSession) GetClientIP

func (m *CLUSSession) GetClientIP() []byte

func (*CLUSSession) GetClientMAC

func (m *CLUSSession) GetClientMAC() []byte

func (*CLUSSession) GetClientPkts

func (m *CLUSSession) GetClientPkts() uint32

func (*CLUSSession) GetClientPort

func (m *CLUSSession) GetClientPort() uint32

func (*CLUSSession) GetClientState

func (m *CLUSSession) GetClientState() uint32

func (*CLUSSession) GetDomain

func (o *CLUSSession) GetDomain(f GetAccessObjectFunc) ([]string, []string)

Modify/delete session can only be done by admin

func (*CLUSSession) GetEtherType

func (m *CLUSSession) GetEtherType() uint32

func (*CLUSSession) GetHostMode

func (m *CLUSSession) GetHostMode() bool

func (*CLUSSession) GetICMPCode

func (m *CLUSSession) GetICMPCode() uint32

func (*CLUSSession) GetICMPType

func (m *CLUSSession) GetICMPType() uint32

func (*CLUSSession) GetID

func (m *CLUSSession) GetID() uint32

func (*CLUSSession) GetIPProto

func (m *CLUSSession) GetIPProto() uint32

func (*CLUSSession) GetIdle

func (m *CLUSSession) GetIdle() uint32

func (*CLUSSession) GetIngress

func (m *CLUSSession) GetIngress() bool

func (*CLUSSession) GetLife

func (m *CLUSSession) GetLife() uint32

func (*CLUSSession) GetMid

func (m *CLUSSession) GetMid() bool

func (*CLUSSession) GetPolicyAction

func (m *CLUSSession) GetPolicyAction() uint32

func (*CLUSSession) GetPolicyId

func (m *CLUSSession) GetPolicyId() uint32

func (*CLUSSession) GetServerAsmBytes

func (m *CLUSSession) GetServerAsmBytes() uint64

func (*CLUSSession) GetServerAsmPkts

func (m *CLUSSession) GetServerAsmPkts() uint32

func (*CLUSSession) GetServerBytes

func (m *CLUSSession) GetServerBytes() uint64

func (*CLUSSession) GetServerIP

func (m *CLUSSession) GetServerIP() []byte

func (*CLUSSession) GetServerMAC

func (m *CLUSSession) GetServerMAC() []byte

func (*CLUSSession) GetServerPkts

func (m *CLUSSession) GetServerPkts() uint32

func (*CLUSSession) GetServerPort

func (m *CLUSSession) GetServerPort() uint32

func (*CLUSSession) GetServerState

func (m *CLUSSession) GetServerState() uint32

func (*CLUSSession) GetTap

func (m *CLUSSession) GetTap() bool

func (*CLUSSession) GetWorkload

func (m *CLUSSession) GetWorkload() string

func (*CLUSSession) GetXffApp

func (m *CLUSSession) GetXffApp() uint32

func (*CLUSSession) GetXffIP

func (m *CLUSSession) GetXffIP() []byte

func (*CLUSSession) GetXffPort

func (m *CLUSSession) GetXffPort() uint32

func (*CLUSSession) ProtoMessage

func (*CLUSSession) ProtoMessage()

func (*CLUSSession) Reset

func (m *CLUSSession) Reset()

func (*CLUSSession) String

func (m *CLUSSession) String() string

type CLUSSessionArray

type CLUSSessionArray struct {
	Sessions []*CLUSSession `protobuf:"bytes,1,rep,name=Sessions" json:"Sessions,omitempty"`
}

func (*CLUSSessionArray) Descriptor

func (*CLUSSessionArray) Descriptor() ([]byte, []int)

func (*CLUSSessionArray) GetSessions

func (m *CLUSSessionArray) GetSessions() []*CLUSSession

func (*CLUSSessionArray) ProtoMessage

func (*CLUSSessionArray) ProtoMessage()

func (*CLUSSessionArray) Reset

func (m *CLUSSessionArray) Reset()

func (*CLUSSessionArray) String

func (m *CLUSSessionArray) String() string

type CLUSSessionCounter

type CLUSSessionCounter struct {
	CurSessions     uint32 `protobuf:"varint,1,opt,name=CurSessions" json:"CurSessions,omitempty"`
	CurTCPSessions  uint32 `protobuf:"varint,2,opt,name=CurTCPSessions" json:"CurTCPSessions,omitempty"`
	CurUDPSessions  uint32 `protobuf:"varint,3,opt,name=CurUDPSessions" json:"CurUDPSessions,omitempty"`
	CurICMPSessions uint32 `protobuf:"varint,4,opt,name=CurICMPSessions" json:"CurICMPSessions,omitempty"`
	CurIPSessions   uint32 `protobuf:"varint,5,opt,name=CurIPSessions" json:"CurIPSessions,omitempty"`
}

func (*CLUSSessionCounter) Descriptor

func (*CLUSSessionCounter) Descriptor() ([]byte, []int)

func (*CLUSSessionCounter) GetCurICMPSessions

func (m *CLUSSessionCounter) GetCurICMPSessions() uint32

func (*CLUSSessionCounter) GetCurIPSessions

func (m *CLUSSessionCounter) GetCurIPSessions() uint32

func (*CLUSSessionCounter) GetCurSessions

func (m *CLUSSessionCounter) GetCurSessions() uint32

func (*CLUSSessionCounter) GetCurTCPSessions

func (m *CLUSSessionCounter) GetCurTCPSessions() uint32

func (*CLUSSessionCounter) GetCurUDPSessions

func (m *CLUSSessionCounter) GetCurUDPSessions() uint32

func (*CLUSSessionCounter) ProtoMessage

func (*CLUSSessionCounter) ProtoMessage()

func (*CLUSSessionCounter) Reset

func (m *CLUSSessionCounter) Reset()

func (*CLUSSessionCounter) String

func (m *CLUSSessionCounter) String() string

type CLUSSetIdPermLog

type CLUSSetIdPermLog struct {
	Types    string `json:"types"`    // setuid, setgid
	File     string `json:"path"`     // file path
	Evidence string `json:"evidence"` // file attributes
}

CLUSSetIdPermLog provides reports at scanner/enforcer layer

type CLUSSniffer

type CLUSSniffer struct {
	ID         string        `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
	AgentID    string        `protobuf:"bytes,2,opt,name=AgentID" json:"AgentID,omitempty"`
	WorkloadID string        `protobuf:"bytes,3,opt,name=WorkloadID" json:"WorkloadID,omitempty"`
	Status     SnifferStatus `protobuf:"varint,4,opt,name=Status,enum=share.SnifferStatus" json:"Status,omitempty"`
	Args       string        `protobuf:"bytes,5,opt,name=Args" json:"Args,omitempty"`
	FileNumber uint32        `protobuf:"varint,6,opt,name=FileNumber" json:"FileNumber,omitempty"`
	Size       int64         `protobuf:"varint,7,opt,name=Size" json:"Size,omitempty"`
	StartTime  int64         `protobuf:"varint,8,opt,name=StartTime" json:"StartTime,omitempty"`
	StopTime   int64         `protobuf:"varint,9,opt,name=StopTime" json:"StopTime,omitempty"`
}

func (*CLUSSniffer) Descriptor

func (*CLUSSniffer) Descriptor() ([]byte, []int)

func (*CLUSSniffer) GetAgentID

func (m *CLUSSniffer) GetAgentID() string

func (*CLUSSniffer) GetArgs

func (m *CLUSSniffer) GetArgs() string

func (*CLUSSniffer) GetFileNumber

func (m *CLUSSniffer) GetFileNumber() uint32

func (*CLUSSniffer) GetID

func (m *CLUSSniffer) GetID() string

func (*CLUSSniffer) GetSize

func (m *CLUSSniffer) GetSize() int64

func (*CLUSSniffer) GetStartTime

func (m *CLUSSniffer) GetStartTime() int64

func (*CLUSSniffer) GetStatus

func (m *CLUSSniffer) GetStatus() SnifferStatus

func (*CLUSSniffer) GetStopTime

func (m *CLUSSniffer) GetStopTime() int64

func (*CLUSSniffer) GetWorkloadID

func (m *CLUSSniffer) GetWorkloadID() string

func (*CLUSSniffer) ProtoMessage

func (*CLUSSniffer) ProtoMessage()

func (*CLUSSniffer) Reset

func (m *CLUSSniffer) Reset()

func (*CLUSSniffer) String

func (m *CLUSSniffer) String() string

type CLUSSnifferArray

type CLUSSnifferArray struct {
	Sniffers []*CLUSSniffer `protobuf:"bytes,1,rep,name=sniffers" json:"sniffers,omitempty"`
}

func (*CLUSSnifferArray) Descriptor

func (*CLUSSnifferArray) Descriptor() ([]byte, []int)

func (*CLUSSnifferArray) GetSniffers

func (m *CLUSSnifferArray) GetSniffers() []*CLUSSniffer

func (*CLUSSnifferArray) ProtoMessage

func (*CLUSSnifferArray) ProtoMessage()

func (*CLUSSnifferArray) Reset

func (m *CLUSSnifferArray) Reset()

func (*CLUSSnifferArray) String

func (m *CLUSSnifferArray) String() string

type CLUSSnifferDownload

type CLUSSnifferDownload struct {
	ID string `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
}

func (*CLUSSnifferDownload) Descriptor

func (*CLUSSnifferDownload) Descriptor() ([]byte, []int)

func (*CLUSSnifferDownload) GetID

func (m *CLUSSnifferDownload) GetID() string

func (*CLUSSnifferDownload) ProtoMessage

func (*CLUSSnifferDownload) ProtoMessage()

func (*CLUSSnifferDownload) Reset

func (m *CLUSSnifferDownload) Reset()

func (*CLUSSnifferDownload) String

func (m *CLUSSnifferDownload) String() string

type CLUSSnifferDummy

type CLUSSnifferDummy struct {
	WorkloadDomain string `json:"workload_domain"`
}

func (*CLUSSnifferDummy) GetDomain

func (o *CLUSSnifferDummy) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSSnifferFilter

type CLUSSnifferFilter struct {
	ID       string `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
	Workload string `protobuf:"bytes,2,opt,name=Workload" json:"Workload,omitempty"`
}

func (*CLUSSnifferFilter) Descriptor

func (*CLUSSnifferFilter) Descriptor() ([]byte, []int)

func (*CLUSSnifferFilter) GetID

func (m *CLUSSnifferFilter) GetID() string

func (*CLUSSnifferFilter) GetWorkload

func (m *CLUSSnifferFilter) GetWorkload() string

func (*CLUSSnifferFilter) ProtoMessage

func (*CLUSSnifferFilter) ProtoMessage()

func (*CLUSSnifferFilter) Reset

func (m *CLUSSnifferFilter) Reset()

func (*CLUSSnifferFilter) String

func (m *CLUSSnifferFilter) String() string

type CLUSSnifferPcap

type CLUSSnifferPcap struct {
	Pcap []byte `protobuf:"bytes,1,opt,name=Pcap,proto3" json:"Pcap,omitempty"`
}

func (*CLUSSnifferPcap) Descriptor

func (*CLUSSnifferPcap) Descriptor() ([]byte, []int)

func (*CLUSSnifferPcap) GetPcap

func (m *CLUSSnifferPcap) GetPcap() []byte

func (*CLUSSnifferPcap) ProtoMessage

func (*CLUSSnifferPcap) ProtoMessage()

func (*CLUSSnifferPcap) Reset

func (m *CLUSSnifferPcap) Reset()

func (*CLUSSnifferPcap) String

func (m *CLUSSnifferPcap) String() string

type CLUSSnifferRequest

type CLUSSnifferRequest struct {
	Cmd              SnifferCmd `protobuf:"varint,1,opt,name=Cmd,enum=share.SnifferCmd" json:"Cmd,omitempty"`
	ID               string     `protobuf:"bytes,2,opt,name=ID" json:"ID,omitempty"`
	WorkloadID       string     `protobuf:"bytes,3,opt,name=WorkloadID" json:"WorkloadID,omitempty"`
	FileNumber       uint32     `protobuf:"varint,4,opt,name=FileNumber" json:"FileNumber,omitempty"`
	FileSizeInMB     uint32     `protobuf:"varint,5,opt,name=FileSizeInMB" json:"FileSizeInMB,omitempty"`
	Filter           string     `protobuf:"bytes,6,opt,name=Filter" json:"Filter,omitempty"`
	DurationInSecond uint32     `protobuf:"varint,7,opt,name=DurationInSecond" json:"DurationInSecond,omitempty"`
}

func (*CLUSSnifferRequest) Descriptor

func (*CLUSSnifferRequest) Descriptor() ([]byte, []int)

func (*CLUSSnifferRequest) GetCmd

func (m *CLUSSnifferRequest) GetCmd() SnifferCmd

func (*CLUSSnifferRequest) GetDurationInSecond

func (m *CLUSSnifferRequest) GetDurationInSecond() uint32

func (*CLUSSnifferRequest) GetFileNumber

func (m *CLUSSnifferRequest) GetFileNumber() uint32

func (*CLUSSnifferRequest) GetFileSizeInMB

func (m *CLUSSnifferRequest) GetFileSizeInMB() uint32

func (*CLUSSnifferRequest) GetFilter

func (m *CLUSSnifferRequest) GetFilter() string

func (*CLUSSnifferRequest) GetID

func (m *CLUSSnifferRequest) GetID() string

func (*CLUSSnifferRequest) GetWorkloadID

func (m *CLUSSnifferRequest) GetWorkloadID() string

func (*CLUSSnifferRequest) ProtoMessage

func (*CLUSSnifferRequest) ProtoMessage()

func (*CLUSSnifferRequest) Reset

func (m *CLUSSnifferRequest) Reset()

func (*CLUSSnifferRequest) String

func (m *CLUSSnifferRequest) String() string

type CLUSSnifferResponse

type CLUSSnifferResponse struct {
	ID string `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
}

func (*CLUSSnifferResponse) Descriptor

func (*CLUSSnifferResponse) Descriptor() ([]byte, []int)

func (*CLUSSnifferResponse) GetID

func (m *CLUSSnifferResponse) GetID() string

func (*CLUSSnifferResponse) ProtoMessage

func (*CLUSSnifferResponse) ProtoMessage()

func (*CLUSSnifferResponse) Reset

func (m *CLUSSnifferResponse) Reset()

func (*CLUSSnifferResponse) String

func (m *CLUSSnifferResponse) String() string

type CLUSSpecSubnet

type CLUSSpecSubnet struct {
	Subnet net.IPNet `json:"subnet"`
	Scope  string    `json:"scope"`
	IpType string    `json:"iptype"`
}

type CLUSStats

type CLUSStats struct {
	ReadAt   int64      `protobuf:"varint,1,opt,name=ReadAt" json:"ReadAt,omitempty"`
	Interval uint32     `protobuf:"varint,2,opt,name=Interval" json:"Interval,omitempty"`
	Total    *CLUSMetry `protobuf:"bytes,3,opt,name=Total" json:"Total,omitempty"`
	Span1    *CLUSMetry `protobuf:"bytes,4,opt,name=Span1" json:"Span1,omitempty"`
	Span12   *CLUSMetry `protobuf:"bytes,5,opt,name=Span12" json:"Span12,omitempty"`
	Span60   *CLUSMetry `protobuf:"bytes,6,opt,name=Span60" json:"Span60,omitempty"`
}

func (*CLUSStats) Descriptor

func (*CLUSStats) Descriptor() ([]byte, []int)

func (*CLUSStats) GetInterval

func (m *CLUSStats) GetInterval() uint32

func (*CLUSStats) GetReadAt

func (m *CLUSStats) GetReadAt() int64

func (*CLUSStats) GetSpan1

func (m *CLUSStats) GetSpan1() *CLUSMetry

func (*CLUSStats) GetSpan12

func (m *CLUSStats) GetSpan12() *CLUSMetry

func (*CLUSStats) GetSpan60

func (m *CLUSStats) GetSpan60() *CLUSMetry

func (*CLUSStats) GetTotal

func (m *CLUSStats) GetTotal() *CLUSMetry

func (*CLUSStats) ProtoMessage

func (*CLUSStats) ProtoMessage()

func (*CLUSStats) Reset

func (m *CLUSStats) Reset()

func (*CLUSStats) String

func (m *CLUSStats) String() string

type CLUSStoreWatcherInfo

type CLUSStoreWatcherInfo struct {
	CtrlerID string             `protobuf:"bytes,1,opt,name=CtrlerID" json:"CtrlerID,omitempty"`
	Key      string             `protobuf:"bytes,2,opt,name=Key" json:"Key,omitempty"`
	Action   StoreWatcherAction `protobuf:"varint,3,opt,name=Action,enum=share.StoreWatcherAction" json:"Action,omitempty"`
}

func (*CLUSStoreWatcherInfo) Descriptor

func (*CLUSStoreWatcherInfo) Descriptor() ([]byte, []int)

func (*CLUSStoreWatcherInfo) GetAction

func (*CLUSStoreWatcherInfo) GetCtrlerID

func (m *CLUSStoreWatcherInfo) GetCtrlerID() string

func (*CLUSStoreWatcherInfo) GetKey

func (m *CLUSStoreWatcherInfo) GetKey() string

func (*CLUSStoreWatcherInfo) ProtoMessage

func (*CLUSStoreWatcherInfo) ProtoMessage()

func (*CLUSStoreWatcherInfo) Reset

func (m *CLUSStoreWatcherInfo) Reset()

func (*CLUSStoreWatcherInfo) String

func (m *CLUSStoreWatcherInfo) String() string

type CLUSSubnet

type CLUSSubnet struct {
	Subnet net.IPNet `json:"subnet"`
	Scope  string    `json:"scope"`
}

type CLUSSyncReply

type CLUSSyncReply struct {
	Category string `protobuf:"bytes,1,opt,name=Category" json:"Category,omitempty"`
	Data     []byte `protobuf:"bytes,2,opt,name=Data,proto3" json:"Data,omitempty"`
}

func (*CLUSSyncReply) Descriptor

func (*CLUSSyncReply) Descriptor() ([]byte, []int)

func (*CLUSSyncReply) GetCategory

func (m *CLUSSyncReply) GetCategory() string

func (*CLUSSyncReply) GetData

func (m *CLUSSyncReply) GetData() []byte

func (*CLUSSyncReply) ProtoMessage

func (*CLUSSyncReply) ProtoMessage()

func (*CLUSSyncReply) Reset

func (m *CLUSSyncReply) Reset()

func (*CLUSSyncReply) String

func (m *CLUSSyncReply) String() string

type CLUSSyncRequest

type CLUSSyncRequest struct {
	Category string `protobuf:"bytes,1,opt,name=Category" json:"Category,omitempty"`
	From     string `protobuf:"bytes,2,opt,name=From" json:"From,omitempty"`
}

func (*CLUSSyncRequest) Descriptor

func (*CLUSSyncRequest) Descriptor() ([]byte, []int)

func (*CLUSSyncRequest) GetCategory

func (m *CLUSSyncRequest) GetCategory() string

func (*CLUSSyncRequest) GetFrom

func (m *CLUSSyncRequest) GetFrom() string

func (*CLUSSyncRequest) ProtoMessage

func (*CLUSSyncRequest) ProtoMessage()

func (*CLUSSyncRequest) Reset

func (m *CLUSSyncRequest) Reset()

func (*CLUSSyncRequest) String

func (m *CLUSSyncRequest) String() string

type CLUSSyslogConfig

type CLUSSyslogConfig struct {
	SyslogIP         net.IP   `json:"syslog_ip"`
	SyslogServer     string   `json:"syslog_server"`
	SyslogIPProto    uint8    `json:"syslog_ip_proto"`
	SyslogPort       uint16   `json:"syslog_port"`
	SyslogLevel      string   `json:"syslog_level"`
	SyslogEnable     bool     `json:"syslog_enable"`
	SyslogCategories []string `json:"syslog_categories"`
	SyslogInJSON     bool     `json:"syslog_in_json"`
}

type CLUSSystemConfig

type CLUSSystemConfig struct {
	NewServicePolicyMode      string `json:"new_service_policy_mode"`
	NewServiceProfileBaseline string `json:"new_service_profile_baseline"`
	UnusedGroupAging          uint8  `json:"unused_group_aging"`
	CLUSSyslogConfig
	SingleCVEPerSyslog   bool                 `json:"single_cve_per_syslog"`
	AuthOrder            []string             `json:"auth_order"`
	AuthByPlatform       bool                 `json:"auth_by_platform"`
	InternalSubnets      []string             `json:"configured_internal_subnets,omitempty"`
	WebhookEnable_UNUSED bool                 `json:"webhook_enable"`
	WebhookUrl_UNUSED    string               `json:"webhook_url"`
	Webhooks             []CLUSWebhook        `json:"webhooks"`
	ClusterName          string               `json:"cluster_name"`
	ControllerDebug      []string             `json:"controller_debug"`
	TapProxymesh         bool                 `json:"tap_proxymesh"`
	RegistryHttpProxy    CLUSProxy            `json:"registry_http_proxy"`
	RegistryHttpsProxy   CLUSProxy            `json:"registry_https_proxy"`
	IBMSAConfigNV        CLUSIBMSAConfigNV    `json:"ibmsa_config_nv"`
	IBMSAConfig          CLUSIBMSAConfig      `json:"ibmsa_config"`
	IBMSAOnboardData     CLUSIBMSAOnboardData `json:"ibmsa_onboard_data"`
	XffEnabled           bool                 `json:"xff_enabled"`
	CfgType              TCfgType             `json:"cfg_type"`
}

func (*CLUSSystemConfig) GetDomain

func (o *CLUSSystemConfig) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSSystemUsageReport

type CLUSSystemUsageReport struct {
	Signature      string    `json:"signature"`
	ReportedAt     time.Time `json:"reported"`
	Platform       string    `json:"platform"`
	Hosts          int       `json:"hosts"`
	CPUCores       int       `json:"cores"`
	Controllers    int       `json:"controllers"`
	Agents         int       `json:"enforcers"`
	Scanners       int       `json:"scanners"`
	CVEDBVersion   string    `json:"cvedb_version"`
	Registries     int       `json:"registries"`
	Domains        int       `json:"domains"`
	RunningPods    int       `json:"running_pods"`
	Groups         int       `json:"groups"`
	MonitorGroups  int       `json:"moinitor_groups"`
	ProtectGroups  int       `json:"protect_groups"`
	PolicyRules    int       `json:"policy_rules"`
	AdmCtrlRules   int       `json:"adm_ctrl_rules"`
	RespRules      int       `json:"response_rules"`
	CRDRules       int       `json:"crd_rules"`
	Clusters       int       `json:"clusters"`
	SLessProjs     int       `json:"sl_projs"`
	InstallationID string    `json:"installation_id"`
}

type CLUSThreatLog

type CLUSThreatLog struct {
	ID           string    `json:"id"`
	ThreatID     uint32    `json:"threat_id"`
	Severity     uint8     `json:"severity"`
	Action       uint8     `json:"action"`
	CapLen       uint16    `json:"cap_len"`
	Count        uint32    `json:"count"`
	HostID       string    `json:"host_id"`
	HostName     string    `json:"host_name"`
	AgentID      string    `json:"agent_id"`
	AgentName    string    `json:"agent_name"`
	WorkloadID   string    `json:"workload_id"`
	WorkloadName string    `json:"workload_name"`
	ReportedAt   time.Time `json:"reported_at"`
	SrcIP        net.IP    `json:"src_ip"`
	DstIP        net.IP    `json:"dst_ip"`
	EtherType    uint16    `json:"ether_type"`
	SrcPort      uint16    `json:"src_port"`
	DstPort      uint16    `json:"dst_port"`
	IPProto      uint8     `json:"ip_proto"`
	ICMPCode     uint8     `json:"icmp_code"`
	ICMPType     uint8     `json:"icmp_type"`
	LocalPeer    bool      `json:"local_peer"` // Local host connection
	PktIngress   bool      `json:"pkt_ingress"`
	SessIngress  bool      `json:"sess_ingress"`
	Tap          bool      `json:"tap"`
	Application  uint32    `json:"application"`
	Msg          string    `json:"message"`
	Packet       string    `json:"packet"`
}

type CLUSUser

type CLUSUser struct {
	Fullname         string              `json:"fullname"`
	Username         string              `json:"username"`
	PasswordHash     string              `json:"password_hash"`
	PwdResetTime     time.Time           `json:"pwd_reset_time"`
	PwdHashHistory   []string            `json:"pwd_hash_history"` // not including the current password's hash
	Domain           string              `json:"domain"`           // This is not used. Other 'domain' maps to namespace, this is not.
	Server           string              `json:"server"`
	EMail            string              `json:"email"`
	Role             string              `json:"role"`
	RoleOverride     bool                `json:"role_oride"` // Used for shadow user
	Timeout          uint32              `json:"timeout"`
	Locale           string              `json:"locale"`
	RoleDomains      map[string][]string `json:"role_domains"`
	LastLoginAt      time.Time           `json:"last_login_at"`
	LoginCount       uint32              `json:"login_count"`
	FailedLoginCount uint32              `json:"failed_login_count"` // failed consecutive login failure. reset to 0 after a successful login
	BlockLoginSince  time.Time           `json:"block_login_since"`  // reset to 0 after a successful login
}

func (*CLUSUser) GetDomain

func (o *CLUSUser) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSUserRole

type CLUSUserRole struct {
	Name        string                `json:"name"`
	Comment     string                `json:"comment"`
	Reserved    bool                  `json:"reserved"` // true for pre-defined non-hidden roles: fedAdmin/admin/reader
	Permissions []*CLUSRolePermission `json:"permissions"`
}

func (*CLUSUserRole) GetDomain

func (o *CLUSUserRole) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSUserRoleInternal

type CLUSUserRoleInternal struct {
	Name         string `json:"name"`
	Comment      string `json:"comment"`
	Reserved     bool   `json:"reserved"`      // true for pre-defined non-hidden roles: fedAdmin/admin/reader
	ReadPermits  uint64 `json:"read_permits"`  // sum of all  read permissions of this role
	WritePermits uint64 `json:"write_permits"` // sum of all write permissions of this role
}

type CLUSVolume

type CLUSVolume struct {
	Bytes    uint64 `json:"bytes"`
	Sessions uint32 `json:"sessions"`
}

type CLUSVulnerabilityProfile

type CLUSVulnerabilityProfile struct {
	Name    string                           `json:"name"`
	Entries []*CLUSVulnerabilityProfileEntry `json:"entries"`
}

func (*CLUSVulnerabilityProfile) GetDomain

type CLUSVulnerabilityProfileEntry

type CLUSVulnerabilityProfileEntry struct {
	ID         uint32   `json:"id"`
	Name       string   `json:"name"`
	NameFilter string   `json:"name_f"`
	Comment    string   `json:"comment"`
	Days       uint     `json:"days"` // Only used for 'recent' vuln entries
	Domains    []string `json:"domains"`
	Images     []string `json:"images"`
}

type CLUSWafCriteriaEntry

type CLUSWafCriteriaEntry struct {
	Key     string `json:"key"`
	Value   string `json:"value"`
	Op      string `json:"op"`
	Context string `json:"context,omitempty"`
}

waf

type CLUSWafGroup

type CLUSWafGroup struct {
	Name    string            `json:"name"`
	Status  bool              `json:"status"`
	Sensors []*CLUSWafSetting `json:"sensors"`
	CfgType TCfgType          `json:"cfg_type"`
}

func (*CLUSWafGroup) GetDomain

func (o *CLUSWafGroup) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWafRule

type CLUSWafRule struct {
	Name     string                 `json:"name"` // internal waf rule name
	ID       uint32                 `json:"id"`
	Patterns []CLUSWafCriteriaEntry `json:"patterns"`
	CfgType  TCfgType               `json:"cfg_type"`
}

func (*CLUSWafRule) GetDomain

func (o *CLUSWafRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWafSensor

type CLUSWafSensor struct {
	Name          string                    `json:"name"`
	Groups        map[string]string         `json:"groups,omitempty"`          // group to action mapping, only for memory cache. it's always empty in kv
	RuleListNames map[string]string         `json:"rule_list_names,omitempty"` // key, value: internal waf rule name; for non-default sensors
	RuleList      map[string]*CLUSWafRule   `json:"rule_list,omitempty"`       // key: internal waf rule name; for default sensor only
	PreRuleList   map[string][]*CLUSWafRule `json:"pre_rule_list,omitempty"`
	Comment       string                    `json:"comment,omitempty"`
	Predefine     bool                      `json:"predefine,omitempty"`
	CfgType       TCfgType                  `json:"cfg_type"`
}

func (*CLUSWafSensor) GetDomain

func (o *CLUSWafSensor) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWafSetting

type CLUSWafSetting struct {
	Name   string `json:"name"` // unique sensor name
	Action string `json:"action"`
}

type CLUSWafWorkloadRule

type CLUSWafWorkloadRule struct {
	WorkloadId    string            `json:"workload_id"`
	PolicyMode    string            `json:"mode,omitempty"`
	RuleListNames []*CLUSWafSetting `json:"rule_list_names"`
	RuleIds       []uint32          `json:"rule_ids"`
	RuleType      string            `json:"ruletype"`
}

type CLUSWebhook

type CLUSWebhook struct {
	Name    string   `json:"name"`
	Url     string   `json:"url"`
	Enable  bool     `json:"enable"`
	Type    string   `json:"type"`
	CfgType TCfgType `json:"cfg_type"`
}

func (*CLUSWebhook) GetDomain

func (o *CLUSWebhook) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWorkload

type CLUSWorkload struct {
	ID           string                    `json:"id"`
	Name         string                    `json:"name"`
	AgentID      string                    `json:"agent_id"`
	SelfHostname string                    `json:"self_hostname"`
	HostName     string                    `json:"host_name"`
	HostID       string                    `json:"host_id"`
	Image        string                    `json:"image"`
	ImageID      string                    `json:"image_id"`
	Privileged   bool                      `json:"privileged"`
	RunAsRoot    bool                      `json:"run_as_root"`
	NetworkMode  string                    `json:"network_mode"`
	ShareNetNS   string                    `json:"share_netns"`
	Service      string                    `json:"service"`
	Domain       string                    `json:"domain"`
	Author       string                    `json:"author"`
	PlatformRole string                    `json:"platform_role"`
	CreatedAt    time.Time                 `json:"created_at"`
	StartedAt    time.Time                 `json:"started_at"`
	FinishedAt   time.Time                 `json:"finished_at"`
	Running      bool                      `json:"running"`
	CapIntcp     bool                      `json:"cap_intcp"`
	CapSniff     bool                      `json:"cap_sniff"`
	Inline       bool                      `json:"inline"`
	Quarantine   bool                      `json:"quarantine"`
	SecuredAt    time.Time                 `json:"secured_at"`
	ExitCode     int                       `json:"exit_code"`
	Pid          int                       `json:"pid"`
	Ifaces       map[string][]CLUSIPAddr   `json:"interfaces"`
	Ports        map[string]CLUSMappedPort `json:"ports"`
	Labels       map[string]string         `json:"labels"`
	Apps         map[string]CLUSApp        `json:"apps"`
	MemoryLimit  int64                     `json:"memory_limit"`
	CPUs         string                    `json:"cpus"`
	ProxyMesh    bool                      `json:"proxymesh"`
	Sidecar      bool                      `json:"sidecar"`
}

func (*CLUSWorkload) GetDomain

func (o *CLUSWorkload) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWorkloadAddr

type CLUSWorkloadAddr struct {
	WlID         string        `json:"workload_id"`
	PolicyMode   string        `json:"mode,omitempty"`
	LocalIP      []net.IP      `json:"local_ip,omitempty"`
	GlobalIP     []net.IP      `json:"global_ip,omitempty"`
	NatIP        []net.IP      `json:"nat_ip,omitempty"`
	LocalPortApp []CLUSPortApp `json:"local_port_app,omitempty"`
	NatPortApp   []CLUSPortApp `json:"nat_port_app,omitempty"`
}

type CLUSWorkloadConfig

type CLUSWorkloadConfig struct {
	Wire       string `json:"wire,omitempty"`
	Quarantine bool   `json:"quarantine,omitempty"`
	QuarReason string `json:"quarantine_reason,omitempty"`
}

type CLUSWorkloadDlpRules

type CLUSWorkloadDlpRules struct {
	DlpRuleList []*CLUSDlpRule         `json:"dlp_rule_list"`
	DlpWlRules  []*CLUSDlpWorkloadRule `json:"dlp_wl_rules"`
}

type CLUSWorkloadIntercept

type CLUSWorkloadIntercept struct {
	ID         string                       `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
	Inline     bool                         `protobuf:"varint,2,opt,name=Inline" json:"Inline,omitempty"`
	Quarantine bool                         `protobuf:"varint,3,opt,name=Quarantine" json:"Quarantine,omitempty"`
	Ports      []*CLUSWorkloadInterceptPort `protobuf:"bytes,4,rep,name=Ports" json:"Ports,omitempty"`
}

func (*CLUSWorkloadIntercept) Descriptor

func (*CLUSWorkloadIntercept) Descriptor() ([]byte, []int)

func (*CLUSWorkloadIntercept) GetID

func (m *CLUSWorkloadIntercept) GetID() string

func (*CLUSWorkloadIntercept) GetInline

func (m *CLUSWorkloadIntercept) GetInline() bool

func (*CLUSWorkloadIntercept) GetPorts

func (*CLUSWorkloadIntercept) GetQuarantine

func (m *CLUSWorkloadIntercept) GetQuarantine() bool

func (*CLUSWorkloadIntercept) ProtoMessage

func (*CLUSWorkloadIntercept) ProtoMessage()

func (*CLUSWorkloadIntercept) Reset

func (m *CLUSWorkloadIntercept) Reset()

func (*CLUSWorkloadIntercept) String

func (m *CLUSWorkloadIntercept) String() string

type CLUSWorkloadInterceptPort

type CLUSWorkloadInterceptPort struct {
	Port          string `protobuf:"bytes,1,opt,name=Port" json:"Port,omitempty"`
	Peer          string `protobuf:"bytes,2,opt,name=Peer" json:"Peer,omitempty"`
	MAC           []byte `protobuf:"bytes,3,opt,name=MAC,proto3" json:"MAC,omitempty"`
	UCMAC         []byte `protobuf:"bytes,4,opt,name=UCMAC,proto3" json:"UCMAC,omitempty"`
	BCMAC         []byte `protobuf:"bytes,5,opt,name=BCMAC,proto3" json:"BCMAC,omitempty"`
	InPort        string `protobuf:"bytes,6,opt,name=InPort" json:"InPort,omitempty"`
	ExPort        string `protobuf:"bytes,7,opt,name=ExPort" json:"ExPort,omitempty"`
	InPortRules   string `protobuf:"bytes,8,opt,name=InPortRules" json:"InPortRules,omitempty"`
	ExPortRules   string `protobuf:"bytes,9,opt,name=ExPortRules" json:"ExPortRules,omitempty"`
	EnforcerRules string `protobuf:"bytes,10,opt,name=EnforcerRules" json:"EnforcerRules,omitempty"`
}

func (*CLUSWorkloadInterceptPort) Descriptor

func (*CLUSWorkloadInterceptPort) Descriptor() ([]byte, []int)

func (*CLUSWorkloadInterceptPort) GetBCMAC

func (m *CLUSWorkloadInterceptPort) GetBCMAC() []byte

func (*CLUSWorkloadInterceptPort) GetEnforcerRules

func (m *CLUSWorkloadInterceptPort) GetEnforcerRules() string

func (*CLUSWorkloadInterceptPort) GetExPort

func (m *CLUSWorkloadInterceptPort) GetExPort() string

func (*CLUSWorkloadInterceptPort) GetExPortRules

func (m *CLUSWorkloadInterceptPort) GetExPortRules() string

func (*CLUSWorkloadInterceptPort) GetInPort

func (m *CLUSWorkloadInterceptPort) GetInPort() string

func (*CLUSWorkloadInterceptPort) GetInPortRules

func (m *CLUSWorkloadInterceptPort) GetInPortRules() string

func (*CLUSWorkloadInterceptPort) GetMAC

func (m *CLUSWorkloadInterceptPort) GetMAC() []byte

func (*CLUSWorkloadInterceptPort) GetPeer

func (m *CLUSWorkloadInterceptPort) GetPeer() string

func (*CLUSWorkloadInterceptPort) GetPort

func (m *CLUSWorkloadInterceptPort) GetPort() string

func (*CLUSWorkloadInterceptPort) GetUCMAC

func (m *CLUSWorkloadInterceptPort) GetUCMAC() []byte

func (*CLUSWorkloadInterceptPort) ProtoMessage

func (*CLUSWorkloadInterceptPort) ProtoMessage()

func (*CLUSWorkloadInterceptPort) Reset

func (m *CLUSWorkloadInterceptPort) Reset()

func (*CLUSWorkloadInterceptPort) String

func (m *CLUSWorkloadInterceptPort) String() string

type CLUSWorkloadScanDummy

type CLUSWorkloadScanDummy struct {
	Domain string `json:"domain"`
}

func (*CLUSWorkloadScanDummy) GetDomain

func (o *CLUSWorkloadScanDummy) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type CLUSWorkloadWafRules

type CLUSWorkloadWafRules struct {
	WafRuleList []*CLUSWafRule         `json:"waf_rule_list"`
	WafWlRules  []*CLUSWafWorkloadRule `json:"waf_wl_rules"`
}

type CLUSX509Cert

type CLUSX509Cert struct {
	CN   string `json:"cn"`
	Key  string `json:"key,cloak"`
	Cert string `json:"cert,cloak"`
}

func (*CLUSX509Cert) IsEmpty

func (c *CLUSX509Cert) IsEmpty() bool

type ContainerStats

type ContainerStats struct {
	PrevCPU       uint64
	PrevCPUSystem uint64
	ReadAt        time.Time
	CurSlot       uint
	Cpu           [ContainerStatsSlots]float64
	Memory        [ContainerStatsSlots]uint64
}

type ControllerAgentServiceClient

type ControllerAgentServiceClient interface {
	RequestAdmission(ctx context.Context, in *CLUSAdmissionRequest, opts ...grpc.CallOption) (*CLUSAdmissionResponse, error)
	ReportProcProfile(ctx context.Context, in *CLUSProcProfileArray, opts ...grpc.CallOption) (*CLUSReportResponse, error)
	ReportFileAccessRule(ctx context.Context, in *CLUSFileAccessRuleArray, opts ...grpc.CallOption) (*CLUSReportResponse, error)
	ReportConnections(ctx context.Context, in *CLUSConnectionArray, opts ...grpc.CallOption) (*CLUSReportResponse, error)
}

func NewControllerAgentServiceClient

func NewControllerAgentServiceClient(cc *grpc.ClientConn) ControllerAgentServiceClient

type ControllerAgentServiceServer

type ControllerAgentServiceServer interface {
	RequestAdmission(context.Context, *CLUSAdmissionRequest) (*CLUSAdmissionResponse, error)
	ReportProcProfile(context.Context, *CLUSProcProfileArray) (*CLUSReportResponse, error)
	ReportFileAccessRule(context.Context, *CLUSFileAccessRuleArray) (*CLUSReportResponse, error)
	ReportConnections(context.Context, *CLUSConnectionArray) (*CLUSReportResponse, error)
}

type ControllerCapServiceClient

type ControllerCapServiceClient interface {
	IsGRPCCompressed(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSBoolean, error)
}

func NewControllerCapServiceClient

func NewControllerCapServiceClient(cc *grpc.ClientConn) ControllerCapServiceClient

type ControllerCapServiceServer

type ControllerCapServiceServer interface {
	IsGRPCCompressed(context.Context, *RPCVoid) (*CLUSBoolean, error)
}

type ControllerCtrlServiceClient

type ControllerCtrlServiceClient interface {
	ReqSync(ctx context.Context, in *CLUSSyncRequest, opts ...grpc.CallOption) (*CLUSSyncReply, error)
	ReqSyncStream(ctx context.Context, in *CLUSSyncRequest, opts ...grpc.CallOption) (ControllerCtrlService_ReqSyncStreamClient, error)
	ReportConnections(ctx context.Context, in *CLUSConnectionArray, opts ...grpc.CallOption) (*RPCVoid, error)
	GetControllerCounter(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSControllerCounter, error)
	DeleteConversation(ctx context.Context, in *CLUSGraphOps, opts ...grpc.CallOption) (*RPCVoid, error)
	DeleteEndpoint(ctx context.Context, in *CLUSGraphOps, opts ...grpc.CallOption) (*RPCVoid, error)
	SetEndpointAlias(ctx context.Context, in *CLUSGraphOps, opts ...grpc.CallOption) (*RPCVoid, error)
	CheckPolicySyncStatus(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSPolicySyncStatus, error)
	TriggerSync(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*RPCVoid, error)
	ProfilingCmd(ctx context.Context, in *CLUSProfilingRequest, opts ...grpc.CallOption) (*RPCVoid, error)
	TriggerSyncLearnedPolicy(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*RPCVoid, error)
	PauseResumeStoreWatcher(ctx context.Context, in *CLUSStoreWatcherInfo, opts ...grpc.CallOption) (*RPCVoid, error)
	KickLoginSessions(ctx context.Context, in *CLUSKickLoginSessionsRequest, opts ...grpc.CallOption) (*RPCVoid, error)
	GetStats(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSStats, error)
	ResetLoginTokenTimer(ctx context.Context, in *CLUSLoginTokenInfo, opts ...grpc.CallOption) (*RPCVoid, error)
}

func NewControllerCtrlServiceClient

func NewControllerCtrlServiceClient(cc *grpc.ClientConn) ControllerCtrlServiceClient

type ControllerCtrlServiceServer

type ControllerCtrlServiceServer interface {
	ReqSync(context.Context, *CLUSSyncRequest) (*CLUSSyncReply, error)
	ReqSyncStream(*CLUSSyncRequest, ControllerCtrlService_ReqSyncStreamServer) error
	ReportConnections(context.Context, *CLUSConnectionArray) (*RPCVoid, error)
	GetControllerCounter(context.Context, *RPCVoid) (*CLUSControllerCounter, error)
	DeleteConversation(context.Context, *CLUSGraphOps) (*RPCVoid, error)
	DeleteEndpoint(context.Context, *CLUSGraphOps) (*RPCVoid, error)
	SetEndpointAlias(context.Context, *CLUSGraphOps) (*RPCVoid, error)
	CheckPolicySyncStatus(context.Context, *RPCVoid) (*CLUSPolicySyncStatus, error)
	TriggerSync(context.Context, *RPCVoid) (*RPCVoid, error)
	ProfilingCmd(context.Context, *CLUSProfilingRequest) (*RPCVoid, error)
	TriggerSyncLearnedPolicy(context.Context, *RPCVoid) (*RPCVoid, error)
	PauseResumeStoreWatcher(context.Context, *CLUSStoreWatcherInfo) (*RPCVoid, error)
	KickLoginSessions(context.Context, *CLUSKickLoginSessionsRequest) (*RPCVoid, error)
	GetStats(context.Context, *RPCVoid) (*CLUSStats, error)
	ResetLoginTokenTimer(context.Context, *CLUSLoginTokenInfo) (*RPCVoid, error)
}

type ControllerCtrlService_ReqSyncStreamClient

type ControllerCtrlService_ReqSyncStreamClient interface {
	Recv() (*CLUSSyncReply, error)
	grpc.ClientStream
}

type ControllerCtrlService_ReqSyncStreamServer

type ControllerCtrlService_ReqSyncStreamServer interface {
	Send(*CLUSSyncReply) error
	grpc.ServerStream
}

type ControllerScanServiceClient

type ControllerScanServiceClient interface {
	ScannerRegister(ctx context.Context, in *ScannerRegisterData, opts ...grpc.CallOption) (*RPCVoid, error)
	ScannerRegisterStream(ctx context.Context, opts ...grpc.CallOption) (ControllerScanService_ScannerRegisterStreamClient, error)
	ScannerDeregister(ctx context.Context, in *ScannerDeregisterData, opts ...grpc.CallOption) (*RPCVoid, error)
	SubmitScanResult(ctx context.Context, in *ScanResult, opts ...grpc.CallOption) (*RPCVoid, error)
}

func NewControllerScanServiceClient

func NewControllerScanServiceClient(cc *grpc.ClientConn) ControllerScanServiceClient

type ControllerScanServiceServer

type ControllerScanServiceServer interface {
	ScannerRegister(context.Context, *ScannerRegisterData) (*RPCVoid, error)
	ScannerRegisterStream(ControllerScanService_ScannerRegisterStreamServer) error
	ScannerDeregister(context.Context, *ScannerDeregisterData) (*RPCVoid, error)
	SubmitScanResult(context.Context, *ScanResult) (*RPCVoid, error)
}

type ControllerScanService_ScannerRegisterStreamClient

type ControllerScanService_ScannerRegisterStreamClient interface {
	Send(*ScannerRegisterData) error
	CloseAndRecv() (*RPCVoid, error)
	grpc.ClientStream
}

type ControllerScanService_ScannerRegisterStreamServer

type ControllerScanService_ScannerRegisterStreamServer interface {
	SendAndClose(*RPCVoid) error
	Recv() (*ScannerRegisterData, error)
	grpc.ServerStream
}

type ControllerUpgradeServiceClient

type ControllerUpgradeServiceClient interface {
	UpgradeScannerDB(ctx context.Context, opts ...grpc.CallOption) (ControllerUpgradeService_UpgradeScannerDBClient, error)
	SupportRegularDB(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSBoolean, error)
	SupportUpgradeDB(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSBoolean, error)
}

func NewControllerUpgradeServiceClient

func NewControllerUpgradeServiceClient(cc *grpc.ClientConn) ControllerUpgradeServiceClient

type ControllerUpgradeServiceServer

type ControllerUpgradeServiceServer interface {
	UpgradeScannerDB(ControllerUpgradeService_UpgradeScannerDBServer) error
	SupportRegularDB(context.Context, *RPCVoid) (*CLUSBoolean, error)
	SupportUpgradeDB(context.Context, *RPCVoid) (*CLUSBoolean, error)
}

type ControllerUpgradeService_UpgradeScannerDBClient

type ControllerUpgradeService_UpgradeScannerDBClient interface {
	Send(*CLUSFilePacket) error
	CloseAndRecv() (*RPCVoid, error)
	grpc.ClientStream
}

type ControllerUpgradeService_UpgradeScannerDBServer

type ControllerUpgradeService_UpgradeScannerDBServer interface {
	SendAndClose(*RPCVoid) error
	Recv() (*CLUSFilePacket, error)
	grpc.ServerStream
}

type EnforcerCapServiceClient

type EnforcerCapServiceClient interface {
	IsGRPCCompressed(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSBoolean, error)
}

func NewEnforcerCapServiceClient

func NewEnforcerCapServiceClient(cc *grpc.ClientConn) EnforcerCapServiceClient

type EnforcerCapServiceServer

type EnforcerCapServiceServer interface {
	IsGRPCCompressed(context.Context, *RPCVoid) (*CLUSBoolean, error)
}

type EnforcerScanServiceClient

type EnforcerScanServiceClient interface {
	ScanGetFiles(ctx context.Context, in *ScanRunningRequest, opts ...grpc.CallOption) (*ScanData, error)
}

func NewEnforcerScanServiceClient

func NewEnforcerScanServiceClient(cc *grpc.ClientConn) EnforcerScanServiceClient

type EnforcerScanServiceServer

type EnforcerScanServiceServer interface {
	ScanGetFiles(context.Context, *ScanRunningRequest) (*ScanData, error)
}

type EnforcerServiceClient

type EnforcerServiceClient interface {
	Kick(ctx context.Context, in *CLUSKick, opts ...grpc.CallOption) (*RPCVoid, error)
	GetSessionList(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (EnforcerService_GetSessionListClient, error)
	ClearSession(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*RPCVoid, error)
	GetStats(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSStats, error)
	GetSessionCounter(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSSessionCounter, error)
	GetDatapathCounter(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSDatapathCounter, error)
	GetDerivedPolicyRules(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedPolicyRuleMap, error)
	ProbeSummary(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSProbeSummary, error)
	ProbeProcessMap(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSProbeProcessArray, error)
	ProbeContainerMap(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*CLUSProbeContainerArray, error)
	SnifferCmd(ctx context.Context, in *CLUSSnifferRequest, opts ...grpc.CallOption) (*CLUSSnifferResponse, error)
	GetSniffers(ctx context.Context, in *CLUSSnifferFilter, opts ...grpc.CallOption) (*CLUSSnifferArray, error)
	GetSnifferPcap(ctx context.Context, in *CLUSSnifferDownload, opts ...grpc.CallOption) (EnforcerService_GetSnifferPcapClient, error)
	GetContainerLogs(ctx context.Context, in *CLUSContainerLogReq, opts ...grpc.CallOption) (EnforcerService_GetContainerLogsClient, error)
	RunDockerBench(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*RPCVoid, error)
	RunKubernetesBench(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*RPCVoid, error)
	GetFileMonitorFile(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSFileMonitorFileArray, error)
	GetProcess(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSProcessArray, error)
	GetProcessHistory(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSProcessArray, error)
	GetDerivedDlpRules(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedDlpRuleMap, error)
	GetDerivedDlpRuleEntries(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedDlpRuleEntryArray, error)
	GetDerivedDlpRuleMacs(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedDlpRuleMacArray, error)
	GetDerivedWorkloadProcessRule(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedProcessRuleArray, error)
	GetDerivedWorkloadFileRule(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSDerivedFileRuleArray, error)
	GetContainerIntercept(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (*CLUSWorkloadIntercept, error)
	GetMeterList(ctx context.Context, in *CLUSFilter, opts ...grpc.CallOption) (EnforcerService_GetMeterListClient, error)
	ProfilingCmd(ctx context.Context, in *CLUSProfilingRequest, opts ...grpc.CallOption) (*RPCVoid, error)
}

func NewEnforcerServiceClient

func NewEnforcerServiceClient(cc *grpc.ClientConn) EnforcerServiceClient

type EnforcerServiceServer

type EnforcerServiceServer interface {
	Kick(context.Context, *CLUSKick) (*RPCVoid, error)
	GetSessionList(*CLUSFilter, EnforcerService_GetSessionListServer) error
	ClearSession(context.Context, *CLUSFilter) (*RPCVoid, error)
	GetStats(context.Context, *CLUSFilter) (*CLUSStats, error)
	GetSessionCounter(context.Context, *RPCVoid) (*CLUSSessionCounter, error)
	GetDatapathCounter(context.Context, *RPCVoid) (*CLUSDatapathCounter, error)
	GetDerivedPolicyRules(context.Context, *CLUSFilter) (*CLUSDerivedPolicyRuleMap, error)
	ProbeSummary(context.Context, *RPCVoid) (*CLUSProbeSummary, error)
	ProbeProcessMap(context.Context, *RPCVoid) (*CLUSProbeProcessArray, error)
	ProbeContainerMap(context.Context, *RPCVoid) (*CLUSProbeContainerArray, error)
	SnifferCmd(context.Context, *CLUSSnifferRequest) (*CLUSSnifferResponse, error)
	GetSniffers(context.Context, *CLUSSnifferFilter) (*CLUSSnifferArray, error)
	GetSnifferPcap(*CLUSSnifferDownload, EnforcerService_GetSnifferPcapServer) error
	GetContainerLogs(*CLUSContainerLogReq, EnforcerService_GetContainerLogsServer) error
	RunDockerBench(context.Context, *RPCVoid) (*RPCVoid, error)
	RunKubernetesBench(context.Context, *RPCVoid) (*RPCVoid, error)
	GetFileMonitorFile(context.Context, *CLUSFilter) (*CLUSFileMonitorFileArray, error)
	GetProcess(context.Context, *CLUSFilter) (*CLUSProcessArray, error)
	GetProcessHistory(context.Context, *CLUSFilter) (*CLUSProcessArray, error)
	GetDerivedDlpRules(context.Context, *CLUSFilter) (*CLUSDerivedDlpRuleMap, error)
	GetDerivedDlpRuleEntries(context.Context, *CLUSFilter) (*CLUSDerivedDlpRuleEntryArray, error)
	GetDerivedDlpRuleMacs(context.Context, *CLUSFilter) (*CLUSDerivedDlpRuleMacArray, error)
	GetDerivedWorkloadProcessRule(context.Context, *CLUSFilter) (*CLUSDerivedProcessRuleArray, error)
	GetDerivedWorkloadFileRule(context.Context, *CLUSFilter) (*CLUSDerivedFileRuleArray, error)
	GetContainerIntercept(context.Context, *CLUSFilter) (*CLUSWorkloadIntercept, error)
	GetMeterList(*CLUSFilter, EnforcerService_GetMeterListServer) error
	ProfilingCmd(context.Context, *CLUSProfilingRequest) (*RPCVoid, error)
}

type EnforcerService_GetContainerLogsClient

type EnforcerService_GetContainerLogsClient interface {
	Recv() (*CLUSContainerLogRes, error)
	grpc.ClientStream
}

type EnforcerService_GetContainerLogsServer

type EnforcerService_GetContainerLogsServer interface {
	Send(*CLUSContainerLogRes) error
	grpc.ServerStream
}

type EnforcerService_GetMeterListClient

type EnforcerService_GetMeterListClient interface {
	Recv() (*CLUSMeterArray, error)
	grpc.ClientStream
}

type EnforcerService_GetMeterListServer

type EnforcerService_GetMeterListServer interface {
	Send(*CLUSMeterArray) error
	grpc.ServerStream
}

type EnforcerService_GetSessionListClient

type EnforcerService_GetSessionListClient interface {
	Recv() (*CLUSSessionArray, error)
	grpc.ClientStream
}

type EnforcerService_GetSessionListServer

type EnforcerService_GetSessionListServer interface {
	Send(*CLUSSessionArray) error
	grpc.ServerStream
}

type EnforcerService_GetSnifferPcapClient

type EnforcerService_GetSnifferPcapClient interface {
	Recv() (*CLUSSnifferPcap, error)
	grpc.ClientStream
}

type EnforcerService_GetSnifferPcapServer

type EnforcerService_GetSnifferPcapServer interface {
	Send(*CLUSSnifferPcap) error
	grpc.ServerStream
}

type GetAccessObjectFunc

type GetAccessObjectFunc func(string) AccessObject

type GroupRoleMapping

type GroupRoleMapping struct {
	Group       string              `json:"group"`                  // mapped group
	GlobalRole  string              `json:"global_role"`            // group's mapped role on global domain
	RoleDomains map[string][]string `json:"role_domains,omitempty"` // group's mapped role -> domains
}

type KickLoginSessionsType

type KickLoginSessionsType int32
const (
	KickLoginSessionsType_KickByServer KickLoginSessionsType = 0
	KickLoginSessionsType_KickByFed    KickLoginSessionsType = 1
	KickLoginSessionsType_KickByUser   KickLoginSessionsType = 2
)

func (KickLoginSessionsType) EnumDescriptor

func (KickLoginSessionsType) EnumDescriptor() ([]byte, []int)

func (KickLoginSessionsType) String

func (x KickLoginSessionsType) String() string

type ProbeContainerStart

type ProbeContainerStart struct {
	Id          string
	RootPid_alt int
}

type ProcRule

type ProcRule struct {
	Active int                     `json:"active"`
	Group  string                  `json:"group"`
	Rule   CLUSProcessProfileEntry `json:"rule"`
}

func (*ProcRule) GetDomain

func (o *ProcRule) GetDomain(f GetAccessObjectFunc) ([]string, []string)

type ProcRuleMap

type ProcRuleMap struct {
	RuleMap map[string]*ProcRule `json:"rulemap"`
}

type ProfilingCmd

type ProfilingCmd int32
const (
	ProfilingCmd_StartProfiling ProfilingCmd = 0
	ProfilingCmd_StopProfiling  ProfilingCmd = 1
)

func (ProfilingCmd) EnumDescriptor

func (ProfilingCmd) EnumDescriptor() ([]byte, []int)

func (ProfilingCmd) String

func (x ProfilingCmd) String() string

type ProfilingMethod

type ProfilingMethod int32
const (
	ProfilingMethod_CPU    ProfilingMethod = 0
	ProfilingMethod_Memory ProfilingMethod = 1
)

func (ProfilingMethod) EnumDescriptor

func (ProfilingMethod) EnumDescriptor() ([]byte, []int)

func (ProfilingMethod) String

func (x ProfilingMethod) String() string

type RPCVoid

type RPCVoid struct {
}

func (*RPCVoid) Descriptor

func (*RPCVoid) Descriptor() ([]byte, []int)

func (*RPCVoid) ProtoMessage

func (*RPCVoid) ProtoMessage()

func (*RPCVoid) Reset

func (m *RPCVoid) Reset()

func (*RPCVoid) String

func (m *RPCVoid) String() string

type ReportRespAction

type ReportRespAction int32
const (
	ReportRespAction_Done   ReportRespAction = 0
	ReportRespAction_Resend ReportRespAction = 1
)

func (ReportRespAction) EnumDescriptor

func (ReportRespAction) EnumDescriptor() ([]byte, []int)

func (ReportRespAction) String

func (x ReportRespAction) String() string

type ScanAppPackage

type ScanAppPackage struct {
	AppName    string `protobuf:"bytes,1,opt,name=AppName" json:"AppName,omitempty"`
	ModuleName string `protobuf:"bytes,2,opt,name=ModuleName" json:"ModuleName,omitempty"`
	Version    string `protobuf:"bytes,3,opt,name=Version" json:"Version,omitempty"`
	FileName   string `protobuf:"bytes,4,opt,name=FileName" json:"FileName,omitempty"`
}

func (*ScanAppPackage) Descriptor

func (*ScanAppPackage) Descriptor() ([]byte, []int)

func (*ScanAppPackage) GetAppName

func (m *ScanAppPackage) GetAppName() string

func (*ScanAppPackage) GetFileName

func (m *ScanAppPackage) GetFileName() string

func (*ScanAppPackage) GetModuleName

func (m *ScanAppPackage) GetModuleName() string

func (*ScanAppPackage) GetVersion

func (m *ScanAppPackage) GetVersion() string

func (*ScanAppPackage) ProtoMessage

func (*ScanAppPackage) ProtoMessage()

func (*ScanAppPackage) Reset

func (m *ScanAppPackage) Reset()

func (*ScanAppPackage) String

func (m *ScanAppPackage) String() string

type ScanAppRequest

type ScanAppRequest struct {
	Packages []*ScanAppPackage `protobuf:"bytes,1,rep,name=Packages" json:"Packages,omitempty"`
}

func (*ScanAppRequest) Descriptor

func (*ScanAppRequest) Descriptor() ([]byte, []int)

func (*ScanAppRequest) GetPackages

func (m *ScanAppRequest) GetPackages() []*ScanAppPackage

func (*ScanAppRequest) ProtoMessage

func (*ScanAppRequest) ProtoMessage()

func (*ScanAppRequest) Reset

func (m *ScanAppRequest) Reset()

func (*ScanAppRequest) String

func (m *ScanAppRequest) String() string

type ScanAwsLambdaRequest

type ScanAwsLambdaRequest struct {
	ResType     string `protobuf:"bytes,1,opt,name=ResType" json:"ResType,omitempty"`
	FuncName    string `protobuf:"bytes,2,opt,name=FuncName" json:"FuncName,omitempty"`
	Region      string `protobuf:"bytes,3,opt,name=Region" json:"Region,omitempty"`
	FuncLink    string `protobuf:"bytes,4,opt,name=FuncLink" json:"FuncLink,omitempty"`
	ScanSecrets bool   `protobuf:"varint,5,opt,name=ScanSecrets" json:"ScanSecrets,omitempty"`
}

func (*ScanAwsLambdaRequest) Descriptor

func (*ScanAwsLambdaRequest) Descriptor() ([]byte, []int)
func (m *ScanAwsLambdaRequest) GetFuncLink() string

func (*ScanAwsLambdaRequest) GetFuncName

func (m *ScanAwsLambdaRequest) GetFuncName() string

func (*ScanAwsLambdaRequest) GetRegion

func (m *ScanAwsLambdaRequest) GetRegion() string

func (*ScanAwsLambdaRequest) GetResType

func (m *ScanAwsLambdaRequest) GetResType() string

func (*ScanAwsLambdaRequest) GetScanSecrets

func (m *ScanAwsLambdaRequest) GetScanSecrets() bool

func (*ScanAwsLambdaRequest) ProtoMessage

func (*ScanAwsLambdaRequest) ProtoMessage()

func (*ScanAwsLambdaRequest) Reset

func (m *ScanAwsLambdaRequest) Reset()

func (*ScanAwsLambdaRequest) String

func (m *ScanAwsLambdaRequest) String() string

type ScanData

type ScanData struct {
	Error  ScanErrorCode `protobuf:"varint,1,opt,name=Error,enum=share.ScanErrorCode" json:"Error,omitempty"`
	Buffer []byte        `protobuf:"bytes,2,opt,name=Buffer,proto3" json:"Buffer,omitempty"`
}

func (*ScanData) Descriptor

func (*ScanData) Descriptor() ([]byte, []int)

func (*ScanData) GetBuffer

func (m *ScanData) GetBuffer() []byte

func (*ScanData) GetError

func (m *ScanData) GetError() ScanErrorCode

func (*ScanData) ProtoMessage

func (*ScanData) ProtoMessage()

func (*ScanData) Reset

func (m *ScanData) Reset()

func (*ScanData) String

func (m *ScanData) String() string

type ScanErrorCode

type ScanErrorCode int32
const (
	ScanErrorCode_ScanErrNone                ScanErrorCode = 0
	ScanErrorCode_ScanErrNetwork             ScanErrorCode = 1
	ScanErrorCode_ScanErrNotSupport          ScanErrorCode = 2
	ScanErrorCode_ScanErrSizeOverLimit       ScanErrorCode = 3
	ScanErrorCode_ScanErrPackage             ScanErrorCode = 4
	ScanErrorCode_ScanErrDatabase            ScanErrorCode = 5
	ScanErrorCode_ScanErrTimeout             ScanErrorCode = 6
	ScanErrorCode_ScanErrInProgress          ScanErrorCode = 7
	ScanErrorCode_ScanErrRegistryAPI         ScanErrorCode = 8
	ScanErrorCode_ScanErrFileSystem          ScanErrorCode = 9
	ScanErrorCode_ScanErrContainerAPI        ScanErrorCode = 10
	ScanErrorCode_ScanErrXrayAPI             ScanErrorCode = 11
	ScanErrorCode_ScanErrContainerExit       ScanErrorCode = 12
	ScanErrorCode_ScanErrAuthentication      ScanErrorCode = 13
	ScanErrorCode_ScanErrCertificate         ScanErrorCode = 14
	ScanErrorCode_ScanErrCanceled            ScanErrorCode = 15
	ScanErrorCode_ScanErrDriverAPINotSupport ScanErrorCode = 16
	ScanErrorCode_ScanErrImageNotFound       ScanErrorCode = 17
	ScanErrorCode_ScanErrAwsDownloadErr      ScanErrorCode = 18
	ScanErrorCode_ScanErrArgument            ScanErrorCode = 19
)

func (ScanErrorCode) EnumDescriptor

func (ScanErrorCode) EnumDescriptor() ([]byte, []int)

func (ScanErrorCode) String

func (x ScanErrorCode) String() string

type ScanImageRequest

type ScanImageRequest struct {
	Registry    string `protobuf:"bytes,1,opt,name=Registry" json:"Registry,omitempty"`
	Username    string `protobuf:"bytes,2,opt,name=Username" json:"Username,omitempty"`
	Password    string `protobuf:"bytes,3,opt,name=Password" json:"Password,omitempty"`
	Repository  string `protobuf:"bytes,4,opt,name=Repository" json:"Repository,omitempty"`
	Tag         string `protobuf:"bytes,5,opt,name=Tag" json:"Tag,omitempty"`
	Proxy       string `protobuf:"bytes,6,opt,name=Proxy" json:"Proxy,omitempty"`
	ScanLayers  bool   `protobuf:"varint,7,opt,name=ScanLayers" json:"ScanLayers,omitempty"`
	ScanSecrets bool   `protobuf:"varint,8,opt,name=ScanSecrets" json:"ScanSecrets,omitempty"`
	BaseImage   string `protobuf:"bytes,9,opt,name=BaseImage" json:"BaseImage,omitempty"`
}

func (*ScanImageRequest) Descriptor

func (*ScanImageRequest) Descriptor() ([]byte, []int)

func (*ScanImageRequest) GetBaseImage

func (m *ScanImageRequest) GetBaseImage() string

func (*ScanImageRequest) GetPassword

func (m *ScanImageRequest) GetPassword() string

func (*ScanImageRequest) GetProxy

func (m *ScanImageRequest) GetProxy() string

func (*ScanImageRequest) GetRegistry

func (m *ScanImageRequest) GetRegistry() string

func (*ScanImageRequest) GetRepository

func (m *ScanImageRequest) GetRepository() string

func (*ScanImageRequest) GetScanLayers

func (m *ScanImageRequest) GetScanLayers() bool

func (*ScanImageRequest) GetScanSecrets

func (m *ScanImageRequest) GetScanSecrets() bool

func (*ScanImageRequest) GetTag

func (m *ScanImageRequest) GetTag() string

func (*ScanImageRequest) GetUsername

func (m *ScanImageRequest) GetUsername() string

func (*ScanImageRequest) ProtoMessage

func (*ScanImageRequest) ProtoMessage()

func (*ScanImageRequest) Reset

func (m *ScanImageRequest) Reset()

func (*ScanImageRequest) String

func (m *ScanImageRequest) String() string

type ScanLayerResult

type ScanLayerResult struct {
	Digest  string               `protobuf:"bytes,1,opt,name=Digest" json:"Digest,omitempty"`
	Vuls    []*ScanVulnerability `protobuf:"bytes,2,rep,name=Vuls" json:"Vuls,omitempty"`
	Cmds    string               `protobuf:"bytes,3,opt,name=Cmds" json:"Cmds,omitempty"`
	Size    int64                `protobuf:"varint,4,opt,name=Size" json:"Size,omitempty"`
	Secrets *ScanSecretResult    `protobuf:"bytes,5,opt,name=Secrets" json:"Secrets,omitempty"`
}

func (*ScanLayerResult) Descriptor

func (*ScanLayerResult) Descriptor() ([]byte, []int)

func (*ScanLayerResult) GetCmds

func (m *ScanLayerResult) GetCmds() string

func (*ScanLayerResult) GetDigest

func (m *ScanLayerResult) GetDigest() string

func (*ScanLayerResult) GetSecrets

func (m *ScanLayerResult) GetSecrets() *ScanSecretResult

func (*ScanLayerResult) GetSize

func (m *ScanLayerResult) GetSize() int64

func (*ScanLayerResult) GetVuls

func (m *ScanLayerResult) GetVuls() []*ScanVulnerability

func (*ScanLayerResult) ProtoMessage

func (*ScanLayerResult) ProtoMessage()

func (*ScanLayerResult) Reset

func (m *ScanLayerResult) Reset()

func (*ScanLayerResult) String

func (m *ScanLayerResult) String() string

type ScanModule

type ScanModule struct {
	Name    string           `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Version string           `protobuf:"bytes,2,opt,name=Version" json:"Version,omitempty"`
	Source  string           `protobuf:"bytes,3,opt,name=Source" json:"Source,omitempty"`
	Vuls    []*ScanModuleVul `protobuf:"bytes,4,rep,name=Vuls" json:"Vuls,omitempty"`
	CPEs    []string         `protobuf:"bytes,5,rep,name=CPEs" json:"CPEs,omitempty"`
}

func (*ScanModule) Descriptor

func (*ScanModule) Descriptor() ([]byte, []int)

func (*ScanModule) GetCPEs

func (m *ScanModule) GetCPEs() []string

func (*ScanModule) GetName

func (m *ScanModule) GetName() string

func (*ScanModule) GetSource

func (m *ScanModule) GetSource() string

func (*ScanModule) GetVersion

func (m *ScanModule) GetVersion() string

func (*ScanModule) GetVuls

func (m *ScanModule) GetVuls() []*ScanModuleVul

func (*ScanModule) ProtoMessage

func (*ScanModule) ProtoMessage()

func (*ScanModule) Reset

func (m *ScanModule) Reset()

func (*ScanModule) String

func (m *ScanModule) String() string

type ScanModuleVul

type ScanModuleVul struct {
	Name   string        `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Status ScanVulStatus `protobuf:"varint,2,opt,name=Status,enum=share.ScanVulStatus" json:"Status,omitempty"`
}

func (*ScanModuleVul) Descriptor

func (*ScanModuleVul) Descriptor() ([]byte, []int)

func (*ScanModuleVul) GetName

func (m *ScanModuleVul) GetName() string

func (*ScanModuleVul) GetStatus

func (m *ScanModuleVul) GetStatus() ScanVulStatus

func (*ScanModuleVul) ProtoMessage

func (*ScanModuleVul) ProtoMessage()

func (*ScanModuleVul) Reset

func (m *ScanModuleVul) Reset()

func (*ScanModuleVul) String

func (m *ScanModuleVul) String() string

type ScanObjectType

type ScanObjectType int32
const (
	ScanObjectType_CONTAINER  ScanObjectType = 0
	ScanObjectType_HOST       ScanObjectType = 1
	ScanObjectType_IMAGE      ScanObjectType = 2
	ScanObjectType_PLATFORM   ScanObjectType = 3
	ScanObjectType_SERVERLESS ScanObjectType = 4
)

func (ScanObjectType) EnumDescriptor

func (ScanObjectType) EnumDescriptor() ([]byte, []int)

func (ScanObjectType) String

func (x ScanObjectType) String() string

type ScanProvider

type ScanProvider int32
const (
	ScanProvider_Neuvector ScanProvider = 0
	ScanProvider_JFrogXray ScanProvider = 1
)

func (ScanProvider) EnumDescriptor

func (ScanProvider) EnumDescriptor() ([]byte, []int)

func (ScanProvider) String

func (x ScanProvider) String() string

type ScanResult

type ScanResult struct {
	Version         string               `protobuf:"bytes,1,opt,name=Version" json:"Version,omitempty"`
	Error           ScanErrorCode        `protobuf:"varint,2,opt,name=Error,enum=share.ScanErrorCode" json:"Error,omitempty"`
	Namespace       string               `protobuf:"bytes,3,opt,name=Namespace" json:"Namespace,omitempty"`
	Vuls            []*ScanVulnerability `protobuf:"bytes,4,rep,name=Vuls" json:"Vuls,omitempty"`
	ContainerID     string               `protobuf:"bytes,5,opt,name=ContainerID" json:"ContainerID,omitempty"`
	HostID          string               `protobuf:"bytes,6,opt,name=HostID" json:"HostID,omitempty"`
	Registry        string               `protobuf:"bytes,7,opt,name=Registry" json:"Registry,omitempty"`
	Repository      string               `protobuf:"bytes,8,opt,name=Repository" json:"Repository,omitempty"`
	Tag             string               `protobuf:"bytes,9,opt,name=Tag" json:"Tag,omitempty"`
	Digest          string               `protobuf:"bytes,10,opt,name=Digest" json:"Digest,omitempty"`
	ImageID         string               `protobuf:"bytes,11,opt,name=ImageID" json:"ImageID,omitempty"`
	Layers          []*ScanLayerResult   `protobuf:"bytes,12,rep,name=Layers" json:"Layers,omitempty"`
	Envs            []string             `protobuf:"bytes,13,rep,name=Envs" json:"Envs,omitempty"`
	Labels          map[string]string    `` /* 133-byte string literal not displayed */
	Platform        string               `protobuf:"bytes,15,opt,name=Platform" json:"Platform,omitempty"`
	PlatformVersion string               `protobuf:"bytes,16,opt,name=PlatformVersion" json:"PlatformVersion,omitempty"`
	Author          string               `protobuf:"bytes,17,opt,name=Author" json:"Author,omitempty"`
	CVEDBCreateTime string               `protobuf:"bytes,18,opt,name=CVEDBCreateTime" json:"CVEDBCreateTime,omitempty"`
	Modules         []*ScanModule        `protobuf:"bytes,19,rep,name=Modules" json:"Modules,omitempty"`
	Secrets         *ScanSecretResult    `protobuf:"bytes,20,opt,name=Secrets" json:"Secrets,omitempty"`
	Cmds            []string             `protobuf:"bytes,21,rep,name=Cmds" json:"Cmds,omitempty"`
	SetIdPerms      []*ScanSetIdPermLog  `protobuf:"bytes,22,rep,name=SetIdPerms" json:"SetIdPerms,omitempty"`
	Provider        ScanProvider         `protobuf:"varint,23,opt,name=Provider,enum=share.ScanProvider" json:"Provider,omitempty"`
	Size            int64                `protobuf:"varint,24,opt,name=Size" json:"Size,omitempty"`
}

func (*ScanResult) Descriptor

func (*ScanResult) Descriptor() ([]byte, []int)

func (*ScanResult) GetAuthor

func (m *ScanResult) GetAuthor() string

func (*ScanResult) GetCVEDBCreateTime

func (m *ScanResult) GetCVEDBCreateTime() string

func (*ScanResult) GetCmds

func (m *ScanResult) GetCmds() []string

func (*ScanResult) GetContainerID

func (m *ScanResult) GetContainerID() string

func (*ScanResult) GetDigest

func (m *ScanResult) GetDigest() string

func (*ScanResult) GetEnvs

func (m *ScanResult) GetEnvs() []string

func (*ScanResult) GetError

func (m *ScanResult) GetError() ScanErrorCode

func (*ScanResult) GetHostID

func (m *ScanResult) GetHostID() string

func (*ScanResult) GetImageID

func (m *ScanResult) GetImageID() string

func (*ScanResult) GetLabels

func (m *ScanResult) GetLabels() map[string]string

func (*ScanResult) GetLayers

func (m *ScanResult) GetLayers() []*ScanLayerResult

func (*ScanResult) GetModules

func (m *ScanResult) GetModules() []*ScanModule

func (*ScanResult) GetNamespace

func (m *ScanResult) GetNamespace() string

func (*ScanResult) GetPlatform

func (m *ScanResult) GetPlatform() string

func (*ScanResult) GetPlatformVersion

func (m *ScanResult) GetPlatformVersion() string

func (*ScanResult) GetProvider

func (m *ScanResult) GetProvider() ScanProvider

func (*ScanResult) GetRegistry

func (m *ScanResult) GetRegistry() string

func (*ScanResult) GetRepository

func (m *ScanResult) GetRepository() string

func (*ScanResult) GetSecrets

func (m *ScanResult) GetSecrets() *ScanSecretResult

func (*ScanResult) GetSetIdPerms

func (m *ScanResult) GetSetIdPerms() []*ScanSetIdPermLog

func (*ScanResult) GetSize

func (m *ScanResult) GetSize() int64

func (*ScanResult) GetTag

func (m *ScanResult) GetTag() string

func (*ScanResult) GetVersion

func (m *ScanResult) GetVersion() string

func (*ScanResult) GetVuls

func (m *ScanResult) GetVuls() []*ScanVulnerability

func (*ScanResult) ProtoMessage

func (*ScanResult) ProtoMessage()

func (*ScanResult) Reset

func (m *ScanResult) Reset()

func (*ScanResult) String

func (m *ScanResult) String() string

type ScanRunningRequest

type ScanRunningRequest struct {
	Type             ScanObjectType `protobuf:"varint,1,opt,name=Type,enum=share.ScanObjectType" json:"Type,omitempty"`
	ID               string         `protobuf:"bytes,2,opt,name=ID" json:"ID,omitempty"`
	AgentID          string         `protobuf:"bytes,3,opt,name=AgentID" json:"AgentID,omitempty"`
	AgentRPCEndPoint string         `protobuf:"bytes,4,opt,name=AgentRPCEndPoint" json:"AgentRPCEndPoint,omitempty"`
}

func (*ScanRunningRequest) Descriptor

func (*ScanRunningRequest) Descriptor() ([]byte, []int)

func (*ScanRunningRequest) GetAgentID

func (m *ScanRunningRequest) GetAgentID() string

func (*ScanRunningRequest) GetAgentRPCEndPoint

func (m *ScanRunningRequest) GetAgentRPCEndPoint() string

func (*ScanRunningRequest) GetID

func (m *ScanRunningRequest) GetID() string

func (*ScanRunningRequest) GetType

func (m *ScanRunningRequest) GetType() ScanObjectType

func (*ScanRunningRequest) ProtoMessage

func (*ScanRunningRequest) ProtoMessage()

func (*ScanRunningRequest) Reset

func (m *ScanRunningRequest) Reset()

func (*ScanRunningRequest) String

func (m *ScanRunningRequest) String() string

type ScanSecretLog

type ScanSecretLog struct {
	Type       string `protobuf:"bytes,1,opt,name=Type" json:"Type,omitempty"`
	Text       string `protobuf:"bytes,2,opt,name=Text" json:"Text,omitempty"`
	File       string `protobuf:"bytes,3,opt,name=File" json:"File,omitempty"`
	RuleDesc   string `protobuf:"bytes,4,opt,name=RuleDesc" json:"RuleDesc,omitempty"`
	Suggestion string `protobuf:"bytes,5,opt,name=Suggestion" json:"Suggestion,omitempty"`
}

func (*ScanSecretLog) Descriptor

func (*ScanSecretLog) Descriptor() ([]byte, []int)

func (*ScanSecretLog) GetFile

func (m *ScanSecretLog) GetFile() string

func (*ScanSecretLog) GetRuleDesc

func (m *ScanSecretLog) GetRuleDesc() string

func (*ScanSecretLog) GetSuggestion

func (m *ScanSecretLog) GetSuggestion() string

func (*ScanSecretLog) GetText

func (m *ScanSecretLog) GetText() string

func (*ScanSecretLog) GetType

func (m *ScanSecretLog) GetType() string

func (*ScanSecretLog) ProtoMessage

func (*ScanSecretLog) ProtoMessage()

func (*ScanSecretLog) Reset

func (m *ScanSecretLog) Reset()

func (*ScanSecretLog) String

func (m *ScanSecretLog) String() string

type ScanSecretResult

type ScanSecretResult struct {
	Error ScanErrorCode    `protobuf:"varint,1,opt,name=Error,enum=share.ScanErrorCode" json:"Error,omitempty"`
	Logs  []*ScanSecretLog `protobuf:"bytes,2,rep,name=Logs" json:"Logs,omitempty"`
}

func (*ScanSecretResult) Descriptor

func (*ScanSecretResult) Descriptor() ([]byte, []int)

func (*ScanSecretResult) GetError

func (m *ScanSecretResult) GetError() ScanErrorCode

func (*ScanSecretResult) GetLogs

func (m *ScanSecretResult) GetLogs() []*ScanSecretLog

func (*ScanSecretResult) ProtoMessage

func (*ScanSecretResult) ProtoMessage()

func (*ScanSecretResult) Reset

func (m *ScanSecretResult) Reset()

func (*ScanSecretResult) String

func (m *ScanSecretResult) String() string

type ScanSetIdPermLog

type ScanSetIdPermLog struct {
	Type     string `protobuf:"bytes,1,opt,name=Type" json:"Type,omitempty"`
	File     string `protobuf:"bytes,2,opt,name=File" json:"File,omitempty"`
	Evidence string `protobuf:"bytes,3,opt,name=Evidence" json:"Evidence,omitempty"`
}

func (*ScanSetIdPermLog) Descriptor

func (*ScanSetIdPermLog) Descriptor() ([]byte, []int)

func (*ScanSetIdPermLog) GetEvidence

func (m *ScanSetIdPermLog) GetEvidence() string

func (*ScanSetIdPermLog) GetFile

func (m *ScanSetIdPermLog) GetFile() string

func (*ScanSetIdPermLog) GetType

func (m *ScanSetIdPermLog) GetType() string

func (*ScanSetIdPermLog) ProtoMessage

func (*ScanSetIdPermLog) ProtoMessage()

func (*ScanSetIdPermLog) Reset

func (m *ScanSetIdPermLog) Reset()

func (*ScanSetIdPermLog) String

func (m *ScanSetIdPermLog) String() string

type ScanVulStatus

type ScanVulStatus int32
const (
	ScanVulStatus_Unpatched  ScanVulStatus = 0
	ScanVulStatus_FixExists  ScanVulStatus = 1
	ScanVulStatus_WillNotFix ScanVulStatus = 2
	ScanVulStatus_Unaffected ScanVulStatus = 3
)

func (ScanVulStatus) EnumDescriptor

func (ScanVulStatus) EnumDescriptor() ([]byte, []int)

func (ScanVulStatus) String

func (x ScanVulStatus) String() string

type ScanVulnerability

type ScanVulnerability struct {
	Name             string   `protobuf:"bytes,1,opt,name=Name" json:"Name,omitempty"`
	Score            float32  `protobuf:"fixed32,2,opt,name=Score" json:"Score,omitempty"`
	Severity         string   `protobuf:"bytes,3,opt,name=Severity" json:"Severity,omitempty"`
	Description      string   `protobuf:"bytes,4,opt,name=Description" json:"Description,omitempty"`
	PackageName      string   `protobuf:"bytes,5,opt,name=PackageName" json:"PackageName,omitempty"`
	PackageVersion   string   `protobuf:"bytes,6,opt,name=PackageVersion" json:"PackageVersion,omitempty"`
	FixedVersion     string   `protobuf:"bytes,7,opt,name=FixedVersion" json:"FixedVersion,omitempty"`
	Link             string   `protobuf:"bytes,8,opt,name=Link" json:"Link,omitempty"`
	Vectors          string   `protobuf:"bytes,9,opt,name=Vectors" json:"Vectors,omitempty"`
	ScoreV3          float32  `protobuf:"fixed32,10,opt,name=ScoreV3" json:"ScoreV3,omitempty"`
	VectorsV3        string   `protobuf:"bytes,11,opt,name=VectorsV3" json:"VectorsV3,omitempty"`
	PublishedDate    string   `protobuf:"bytes,12,opt,name=PublishedDate" json:"PublishedDate,omitempty"`
	LastModifiedDate string   `protobuf:"bytes,13,opt,name=LastModifiedDate" json:"LastModifiedDate,omitempty"`
	CPEs             []string `protobuf:"bytes,14,rep,name=CPEs" json:"CPEs,omitempty"`
	CVEs             []string `protobuf:"bytes,15,rep,name=CVEs" json:"CVEs,omitempty"`
	FeedRating       string   `protobuf:"bytes,16,opt,name=FeedRating" json:"FeedRating,omitempty"`
	InBase           bool     `protobuf:"varint,17,opt,name=InBase" json:"InBase,omitempty"`
}

func (*ScanVulnerability) Descriptor

func (*ScanVulnerability) Descriptor() ([]byte, []int)

func (*ScanVulnerability) GetCPEs

func (m *ScanVulnerability) GetCPEs() []string

func (*ScanVulnerability) GetCVEs

func (m *ScanVulnerability) GetCVEs() []string

func (*ScanVulnerability) GetDescription

func (m *ScanVulnerability) GetDescription() string

func (*ScanVulnerability) GetFeedRating

func (m *ScanVulnerability) GetFeedRating() string

func (*ScanVulnerability) GetFixedVersion

func (m *ScanVulnerability) GetFixedVersion() string

func (*ScanVulnerability) GetInBase

func (m *ScanVulnerability) GetInBase() bool

func (*ScanVulnerability) GetLastModifiedDate

func (m *ScanVulnerability) GetLastModifiedDate() string
func (m *ScanVulnerability) GetLink() string

func (*ScanVulnerability) GetName

func (m *ScanVulnerability) GetName() string

func (*ScanVulnerability) GetPackageName

func (m *ScanVulnerability) GetPackageName() string

func (*ScanVulnerability) GetPackageVersion

func (m *ScanVulnerability) GetPackageVersion() string

func (*ScanVulnerability) GetPublishedDate

func (m *ScanVulnerability) GetPublishedDate() string

func (*ScanVulnerability) GetScore

func (m *ScanVulnerability) GetScore() float32

func (*ScanVulnerability) GetScoreV3

func (m *ScanVulnerability) GetScoreV3() float32

func (*ScanVulnerability) GetSeverity

func (m *ScanVulnerability) GetSeverity() string

func (*ScanVulnerability) GetVectors

func (m *ScanVulnerability) GetVectors() string

func (*ScanVulnerability) GetVectorsV3

func (m *ScanVulnerability) GetVectorsV3() string

func (*ScanVulnerability) ProtoMessage

func (*ScanVulnerability) ProtoMessage()

func (*ScanVulnerability) Reset

func (m *ScanVulnerability) Reset()

func (*ScanVulnerability) String

func (m *ScanVulnerability) String() string

type ScannerDeregisterData

type ScannerDeregisterData struct {
	ID string `protobuf:"bytes,1,opt,name=ID" json:"ID,omitempty"`
}

func (*ScannerDeregisterData) Descriptor

func (*ScannerDeregisterData) Descriptor() ([]byte, []int)

func (*ScannerDeregisterData) GetID

func (m *ScannerDeregisterData) GetID() string

func (*ScannerDeregisterData) ProtoMessage

func (*ScannerDeregisterData) ProtoMessage()

func (*ScannerDeregisterData) Reset

func (m *ScannerDeregisterData) Reset()

func (*ScannerDeregisterData) String

func (m *ScannerDeregisterData) String() string

type ScannerRegisterData

type ScannerRegisterData struct {
	CVEDBVersion    string                        `protobuf:"bytes,1,opt,name=CVEDBVersion" json:"CVEDBVersion,omitempty"`
	CVEDBCreateTime string                        `protobuf:"bytes,2,opt,name=CVEDBCreateTime" json:"CVEDBCreateTime,omitempty"`
	CVEDB           map[string]*ScanVulnerability `` /* 130-byte string literal not displayed */
	RPCServer       string                        `protobuf:"bytes,4,opt,name=RPCServer" json:"RPCServer,omitempty"`
	RPCServerPort   uint32                        `protobuf:"varint,5,opt,name=RPCServerPort" json:"RPCServerPort,omitempty"`
	ID              string                        `protobuf:"bytes,6,opt,name=ID" json:"ID,omitempty"`
}

func (*ScannerRegisterData) Descriptor

func (*ScannerRegisterData) Descriptor() ([]byte, []int)

func (*ScannerRegisterData) GetCVEDB

func (m *ScannerRegisterData) GetCVEDB() map[string]*ScanVulnerability

func (*ScannerRegisterData) GetCVEDBCreateTime

func (m *ScannerRegisterData) GetCVEDBCreateTime() string

func (*ScannerRegisterData) GetCVEDBVersion

func (m *ScannerRegisterData) GetCVEDBVersion() string

func (*ScannerRegisterData) GetID

func (m *ScannerRegisterData) GetID() string

func (*ScannerRegisterData) GetRPCServer

func (m *ScannerRegisterData) GetRPCServer() string

func (*ScannerRegisterData) GetRPCServerPort

func (m *ScannerRegisterData) GetRPCServerPort() uint32

func (*ScannerRegisterData) ProtoMessage

func (*ScannerRegisterData) ProtoMessage()

func (*ScannerRegisterData) Reset

func (m *ScannerRegisterData) Reset()

func (*ScannerRegisterData) String

func (m *ScannerRegisterData) String() string

type ScannerServiceClient

type ScannerServiceClient interface {
	ScanRunning(ctx context.Context, in *ScanRunningRequest, opts ...grpc.CallOption) (*ScanResult, error)
	ScanImageData(ctx context.Context, in *ScanData, opts ...grpc.CallOption) (*ScanResult, error)
	ScanImage(ctx context.Context, in *ScanImageRequest, opts ...grpc.CallOption) (*ScanResult, error)
	ScanAppPackage(ctx context.Context, in *ScanAppRequest, opts ...grpc.CallOption) (*ScanResult, error)
	Ping(ctx context.Context, in *RPCVoid, opts ...grpc.CallOption) (*RPCVoid, error)
	ScanAwsLambda(ctx context.Context, in *ScanAwsLambdaRequest, opts ...grpc.CallOption) (*ScanResult, error)
}

func NewScannerServiceClient

func NewScannerServiceClient(cc *grpc.ClientConn) ScannerServiceClient

type ScannerServiceServer

type ScannerServiceServer interface {
	ScanRunning(context.Context, *ScanRunningRequest) (*ScanResult, error)
	ScanImageData(context.Context, *ScanData) (*ScanResult, error)
	ScanImage(context.Context, *ScanImageRequest) (*ScanResult, error)
	ScanAppPackage(context.Context, *ScanAppRequest) (*ScanResult, error)
	Ping(context.Context, *RPCVoid) (*RPCVoid, error)
	ScanAwsLambda(context.Context, *ScanAwsLambdaRequest) (*ScanResult, error)
}

type SecretLog

type SecretLog struct {
	Text     string `json:"secret"`    // detected secret or signature
	Line     string `json:"line"`      // full line in the content
	File     string `json:"path"`      // file path
	RuleDesc string `json:"rule_desc"` // rule description
}

SecretLog provides the found secret raw data

type SnifferCmd

type SnifferCmd int32
const (
	SnifferCmd_StartSniffer  SnifferCmd = 0
	SnifferCmd_StopSniffer   SnifferCmd = 1
	SnifferCmd_RemoveSniffer SnifferCmd = 2
)

func (SnifferCmd) EnumDescriptor

func (SnifferCmd) EnumDescriptor() ([]byte, []int)

func (SnifferCmd) String

func (x SnifferCmd) String() string

type SnifferStatus

type SnifferStatus int32
const (
	SnifferStatus_Failed  SnifferStatus = 0
	SnifferStatus_Running SnifferStatus = 1
	SnifferStatus_Stopped SnifferStatus = 2
)

func (SnifferStatus) EnumDescriptor

func (SnifferStatus) EnumDescriptor() ([]byte, []int)

func (SnifferStatus) String

func (x SnifferStatus) String() string

type StoreWatcherAction

type StoreWatcherAction int32
const (
	StoreWatcherAction_PauseWatcher  StoreWatcherAction = 0
	StoreWatcherAction_ResumeWatcher StoreWatcherAction = 1
)

func (StoreWatcherAction) EnumDescriptor

func (StoreWatcherAction) EnumDescriptor() ([]byte, []int)

func (StoreWatcherAction) String

func (x StoreWatcherAction) String() string

type TCfgType

type TCfgType int

type TLogAudit

type TLogAudit uint
const (
	CLUSAuditComplianceContainerBenchViolation TLogAudit = iota
	CLUSAuditComplianceHostBenchViolation
	CLUSAuditAdmCtrlK8sReqAllowed   // for admission control
	CLUSAuditAdmCtrlK8sReqViolation // for admission control
	CLUSAuditAdmCtrlK8sReqDenied    // for admission control
	CLUSAuditComplianceHostCustomCheckViolation
	CLUSAuditComplianceContainerCustomCheckViolation
	CLUSAuditAwsLambdaScanWarning
	CLUSAuditAwsLambdaScanNormal
	CLUSAuditComplianceImageBenchViolation
	CLUSAuditComplianceContainerFileBenchViolation
)

type TLogEvent

type TLogEvent uint

This value is stored in the cluster, so should not change the order

const (
	CLUSEvWorkloadStart TLogEvent = iota
	CLUSEvWorkloadStop
	CLUSEvWorkloadRemove
	CLUSEvWorkloadSecured
	CLUSEvWorkloadUnsecured_UNUSED
	CLUSEvAgentStart
	CLUSEvAgentStop
	CLUSEvAgentJoin
	CLUSEvAgentDisconnect
	CLUSEvAgentConnect
	CLUSEvAgentKicked
	CLUSEvControllerStart
	CLUSEvControllerStop
	CLUSEvControllerJoin
	CLUSEvControllerDisconnect
	CLUSEvControllerConnect
	CLUSEvAuthLogin
	CLUSEvAuthLogout
	CLUSEvAuthTimeout
	CLUSEvAuthLoginFailed
	CLUSEvRESTWrite
	CLUSEvRESTRead
	CLUSEvScannerJoin
	CLUSEvScannerUpdate
	CLUSEvScannerLeave
	CLUSEvScanFail
	CLUSEvScanSucceed
	CLUSEvBenchDockerFail
	CLUSEvBenchKubeFail
	CLUSEvLicenseUpdate
	CLUSEvLicenseExpire
	CLUSEvLicenseRemove
	CLUSEvLicenseEnforcerLimitReached
	CLUSEvHostPrivilEscalate_UNUSED
	CLUSEvHostSuspiciousProcess_UNUSED
	CLUSEvContainerPrivilEscalate_UNUSED
	CLUSEvContainerSuspiciousProcess_UNUSED
	CLUSEvWorkloadQuarantined
	CLUSEvWorkloadUnquarantined
	CLUSEvAuthAccessDenied
	CLUSEvAdmCtrlK8sConfigured   // for admission control
	CLUSEvAdmCtrlK8sConfigFailed // for admission control
	CLUSEvInitCfgMapDone         // for initial Config
	CLUSEvInitCfgMapError        // for initial Config
	CLUSEvCrdImported            // for crd Config import
	CLUSEvCrdRemoved             // for crd Config remove due to k8s miss
	CLUSEvCrdErrDetected         // for remove error crd
	CLUSEvFedPromote             // for multi-clusters
	CLUSEvFedDemote              // for multi-clusters
	CLUSEvFedJoin                // for multi-clusters
	CLUSEvFedLeave               // for multi-clusters
	CLUSEvFedKick                // for multi-clusters
	CLUSEvFedPolicySync          // for multi-clusters
	CLUSEvImport
	CLUSEvImportFail
	CLUSEvExport
	CLUSEvExportFail
	CLUSEvControllerLeadLost
	CLUSEvControllerLeadElect
	CLUSEvCloudScanRet
	CLUSEvCloudScanAlert
	CLUSEvCloudScanFail
	CLUSEvGroupAutoRemove
	CLUSEvLicenseStatusInvalid
	CLUSEvLicenseStatusRevoked
	CLUSEvLicenseValidationError
	CLUSEvLicenseUsageReportError
	CLUSEvLicenseUsageServerError
	CLUSEvAuthLoginBlocked        // temporarily block user login (too many consecutive login failures)
	CLUSEvAuthLoginUnblocked      // unblock user login
	CLUSEvAuthUserPwdResetByAdmin // user password reset not by the owner user
	CLUSEvMemoryPressureAgent
	CLUSEvMemoryPressureController
)

type TLogIncident

type TLogIncident uint
const (
	CLUSIncidHostPrivilEscalate TLogIncident = iota
	CLUSIncidHostSuspiciousProcess
	CLUSIncidContainerPrivilEscalate
	CLUSIncidContainerSuspiciousProcess
	CLUSIncidHostFileAccessViolation
	CLUSIncidHostPackageUpdated
	CLUSIncidContainerFileAccessViolation
	CLUSIncidContainerPackageUpdated
	CLUSIncidHostTunnel
	CLUSIncidContainerTunnel
	CLUSIncidHostProcessViolation
	CLUSIncidContainerProcessViolation
)

type TReviewType

type TReviewType int

Import group

Directories

Path Synopsis
oidc
Package oidc implements OpenID Connect client logic for the golang.org/x/oauth2 package.
Package oidc implements OpenID Connect client logic for the golang.org/x/oauth2 package.
api
The fanotify package provides a simple fanotify api
The fanotify package provides a simple fanotify api
ns
sysinfo
Package sysinfo is a pure Go library providing Linux OS / kernel / hardware system information.
Package sysinfo is a pure Go library providing Linux OS / kernel / hardware system information.
sysinfo/cpuid
Package cpuid gives Go programs access to CPUID opcode.
Package cpuid gives Go programs access to CPUID opcode.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL