polaris

Documentation

Index

• Variables
• type Check
• type ClusterInfo
• type ContainerResult
• type Converter
  • func NewConverter(clock ext.Clock) Converter
• type PodResult
• type Report
• type Result
• type Scanner
  • func NewScanner(config *rest.Config) (*Scanner, error)
  • func (s *Scanner) Scan() (reports []sec.ConfigAudit, err error)
• type Writer

Variables

var DefaultConverter = NewConverter(ext.NewSystemClock())

Types

type Check

type Check struct {
	ID       string `json:"ID"`
	Message  string `json:"Message"`
	Success  bool   `json:"Success"`
	Severity string `json:"Severity"`
	Category string `json:"Category"`
}

type ClusterInfo

type ClusterInfo struct {
	Version     string `json:"Version"`
	Nodes       int    `json:"Nodes"`
	Pods        int    `json:"Pods"`
	Namespaces  int    `json:"Namespaces"`
	Controllers int    `json:"Controllers"`
}

type ContainerResult

type ContainerResult struct {
	Name    string           `json:"Name"`
	Results map[string]Check `json:"Results"`
}

type Converter

type Converter interface {
	Convert(reader io.Reader) ([]sec.ConfigAudit, error)
}

func NewConverter

func NewConverter(clock ext.Clock) Converter

type PodResult

type PodResult struct {
	Name             string            `json:"Name"`
	Results          map[string]Check  `json:"Results"`
	ContainerResults []ContainerResult `json:"ContainerResults"`
}

type Report

type Report struct {
	PolarisOutputVersion string       `json:"PolarisOutputVersion"`
	SourceType           string       `json:"SourceType"`
	ClusterInfo          *ClusterInfo `json:"ClusterInfo"`
	Results              []Result     `json:"Results"`
}

type Result

type Result struct {
	Name      string    `json:"Name"`
	Namespace string    `json:"Namespace"`
	Kind      string    `json:"Kind"`
	PodResult PodResult `json:"PodResult"`
}

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

func NewScanner

func NewScanner(config *rest.Config) (*Scanner, error)

func (*Scanner) Scan

func (s *Scanner) Scan() (reports []sec.ConfigAudit, err error)

type Writer

type Writer interface {
	Write(report sec.ConfigAudit) (err error)
	WriteAll(reports []sec.ConfigAudit) (err error)
}

Write is the interface that wraps basic methods for persisting ConfigAudit reports.

Write persists the given ConfigAudit report.

WriteAll persists the given slice of ConfigAudit reports.