server

Documentation

Index

• type Controls
• type Server
  • func NewMonitorServer(socketAddress string, stopchan chan struct{}, enforcerID string, ...) *Server
  • func (s *Server) CNIContainerEvent(ctx context.Context, req *monitorpb.CNIContainerEventRequest) (*monitorpb.ContainerEventResponse, error)
  • func (s *Server) CniPluginInstalled(context.Context, *empty.Empty) (*empty.Empty, error)
  • func (s *Server) Register(name string, monitor external.ReceiveEvents) error
  • func (s *Server) RunCContainerEvent(ctx context.Context, req *monitorpb.RunCContainerEventRequest) (*monitorpb.ContainerEventResponse, error)
  • func (s *Server) RuncProxyStarted(context.Context, *empty.Empty) (*empty.Empty, error)
  • func (s *Server) SenderName() string
  • func (s *Server) Start(ctx context.Context) (err error)
  • func (s *Server) Stop() error

Types

type Controls

type Controls interface {
	Start(context.Context) error
	Stop() error
}

Controls is the controlling interface for starting/stopping the server

type Server

type Server struct {
	// contains filtered or unexported fields
}

Server is the grpcMonitorServer server

func NewMonitorServer

func NewMonitorServer(
	socketAddress string,
	stopchan chan struct{},
	enforcerID string,
	runcWaitGrp *sync.WaitGroup,
) *Server

NewMonitorServer creates a gRPC server for the twistlock defender integration

func (*Server) CNIContainerEvent

func (s *Server) CNIContainerEvent(ctx context.Context, req *monitorpb.CNIContainerEventRequest) (*monitorpb.ContainerEventResponse, error)

CNIContainerEvent handles container event requests

func (*Server) CniPluginInstalled

func (s *Server) CniPluginInstalled(context.Context, *empty.Empty) (*empty.Empty, error)

CniPluginInstalled gets sent by the defender once when the defender has started the runc-proxy.

func (*Server) Register

func (s *Server) Register(name string, monitor external.ReceiveEvents) error

Register will register the given `monitor` for receiving events under `name`. Multiple calls to this function for the same `name` must update the internal state of the implementor to now send events to the newly regitered monitor of this name. Only one registration of a monitor of the same name is allowed.

func (*Server) RunCContainerEvent

func (s *Server) RunCContainerEvent(ctx context.Context, req *monitorpb.RunCContainerEventRequest) (*monitorpb.ContainerEventResponse, error)

RunCContainerEvent handles container event requests

func (*Server) RuncProxyStarted

func (s *Server) RuncProxyStarted(context.Context, *empty.Empty) (*empty.Empty, error)

RuncProxyStarted gets sent by the defender once when the defender has started the runc-proxy.

func (*Server) SenderName

func (s *Server) SenderName() string

SenderName must return a globally unique name of the implementor.

func (*Server) Start

func (s *Server) Start(ctx context.Context) (err error)

Start the grpcMonitorServer gRPC server

func (*Server) Stop

func (s *Server) Stop() error

Stop stops the Monitor' gRPC server (does not stop enforcer)