drift

Documentation

Index

• type DetectIamDriftCommand
  • func (c *DetectIamDriftCommand) Desc() string
  • func (c *DetectIamDriftCommand) Flags() *cli.FlagSet
  • func (c *DetectIamDriftCommand) Help() string
  • func (c *DetectIamDriftCommand) Run(ctx context.Context, args []string) error
• type GitHubDriftIssueService
  • func NewGitHubDriftIssueService(gh github.GitHub, owner, repo, issueTitle, issueBody string) *GitHubDriftIssueService
  • func (s *GitHubDriftIssueService) CloseIssues(ctx context.Context, labels []string) error
  • func (s *GitHubDriftIssueService) CreateOrUpdateIssue(ctx context.Context, assignees, labels []string, message string) error
• type IAMDrift
• type IAMDriftDetector
  • func NewIAMDriftDetector(ctx context.Context, organizationID string, maxConcurrentRequests int64) (*IAMDriftDetector, error)
  • func (d *IAMDriftDetector) DetectDrift(ctx context.Context, bucketQuery string, driftignoreFile string) (*IAMDrift, error)
  • func (d *IAMDriftDetector) URI(i *assetinventory.AssetIAM) string

Types

type DetectIamDriftCommand

type DetectIamDriftCommand struct {
	cli.BaseCommand

	flags.GitHubFlags
	driftflags.DriftIssueFlags
	// contains filtered or unexported fields
}

DetectIamDriftCommand is a subcommand for Guardian that enables detecting IAM drift.

func (*DetectIamDriftCommand) Desc

func (c *DetectIamDriftCommand) Desc() string

func (*DetectIamDriftCommand) Flags

func (c *DetectIamDriftCommand) Flags() *cli.FlagSet

func (*DetectIamDriftCommand) Help

func (c *DetectIamDriftCommand) Help() string

func (*DetectIamDriftCommand) Run

func (c *DetectIamDriftCommand) Run(ctx context.Context, args []string) error

type GitHubDriftIssueService

type GitHubDriftIssueService struct {
	// contains filtered or unexported fields
}

func NewGitHubDriftIssueService

func NewGitHubDriftIssueService(gh github.GitHub, owner, repo, issueTitle, issueBody string) *GitHubDriftIssueService

func (*GitHubDriftIssueService) CloseIssues

func (s *GitHubDriftIssueService) CloseIssues(ctx context.Context, labels []string) error

func (*GitHubDriftIssueService) CreateOrUpdateIssue

func (s *GitHubDriftIssueService) CreateOrUpdateIssue(ctx context.Context, assignees, labels []string, message string) error

type IAMDrift

type IAMDrift struct {
	ClickOpsChanges         []string
	MissingTerraformChanges []string
}

IAMDrift represents the detected iam drift in a gcp org.

type IAMDriftDetector

type IAMDriftDetector struct {
	// contains filtered or unexported fields
}

func NewIAMDriftDetector

func NewIAMDriftDetector(ctx context.Context, organizationID string, maxConcurrentRequests int64) (*IAMDriftDetector, error)

func (*IAMDriftDetector) DetectDrift

func (d *IAMDriftDetector) DetectDrift(
	ctx context.Context,
	bucketQuery string,
	driftignoreFile string,
) (*IAMDrift, error)

DetectDrift compares the actual GCP IAM against the IAM in your Terraform state files.

func (*IAMDriftDetector) URI

func (d *IAMDriftDetector) URI(i *assetinventory.AssetIAM) string

URI returns a canonical string identifier for the IAM entity. This is used for diffing and as output to the user.