idpool

Documentation

Overview

Package idpool manages a pool of IDs for use by adapters.

Index

• Constants
• Variables
• func IsIdSupportedBy(id, securityEngine string) bool

Constants

const (
	SwDeploymentTools         = "swDeploymentTools"
	UnAuthorizedSaTokenAccess = "unAuthorizedSaTokenAccess"
	DNSManipulation           = "dnsManipulation"
	EscapeToHost              = "escapeToHost"
	DisallowChRoot            = "disallowChRoot"
	DisallowCapabilities      = "disallowCapabilities"
	ExploitPFA                = "preventExecutionFromTempOrLogsFolders"
	CocoWorkload              = "cocoWorkload"
	EnsureTLS                 = "ensureTLS"
	DenyENAccess              = "denyExternalNetworkAccess"
)

Variables

var KaIDPolicies = map[string][]string{
	EscapeToHost: {
		DisallowChRoot,
		DisallowCapabilities,
		SwDeploymentTools,
	},
}

list of policies which satisfies the given ID by Kubearmor

var KaIds = []string{
	SwDeploymentTools, UnAuthorizedSaTokenAccess, DNSManipulation, EscapeToHost, ExploitPFA,
}

KaIds are IDs supported by KubeArmor.

var KyvIds = []string{
	EscapeToHost,
	CocoWorkload,
}

KyvIds are IDs supported by Kyverno.

var NetPolIDs = []string{
	DNSManipulation,
	DenyENAccess,
}

NetPolIDs are IDs supported by Network Policy adapter.

Functions

func IsIdSupportedBy

func IsIdSupportedBy(id, securityEngine string) bool

IsIdSupportedBy determines whether a given ID is supported by a security engine.