kube

Documentation

Index

• Constants
• func NewRunnableJob(clientset kubernetes.Interface, spec *batch.Job) runner.Runnable
• type CRManager
  • func NewCRManager(clientset kubernetes.Interface, ...) CRManager
• type Kind
  • func KindFromResource(resource string) (Kind, error)
• type Object
  • func ObjectFromLabelsSet(set labels.Set) (Object, error)
• type ScannerOpts

Constants

const (
	NamespaceStarboard = "starboard"
	// ServiceAccountPolaris the name of the ServiceAccount used to run Polaris scan Jobs.
	ServiceAccountPolaris = "polaris"
	ConfigMapPolaris      = "polaris"
)

const (
	// TODO I'm wondering if we should rename starboard.resource.* labels to starboard.object.*
	// TODO In Kubernetes API terminology a resource is usually lowercase, plural word (e.g. pods) identifying a set of
	// TODO HTTP endpoints (paths) exposing the CRUD semantics of a certain object type in the system
	LabelResourceKind      = "starboard.resource.kind"
	LabelResourceName      = "starboard.resource.name"
	LabelResourceNamespace = "starboard.resource.namespace"

	LabelContainerName = "starboard.container.name"

	LabelScannerName   = "starboard.scanner.name"
	LabelScannerVendor = "starboard.scanner.vendor"

	LabelHistoryLatest = "starboard.history.latest"
)

const (
	AnnotationHistoryLimit = "starboard.history.limit"
)

Functions

func NewRunnableJob

func NewRunnableJob(clientset kubernetes.Interface, spec *batch.Job) runner.Runnable

NewRunnableJob constructs a new Runnable task which runs a Kubernetes Job with the given spec and waits for the completion or failure.

Types

type CRManager

type CRManager interface {
	Init(ctx context.Context) error
	Cleanup(ctx context.Context) error
}

TODO This is no longer CRManager as we're creating other resources, such as ClusterRoles and ConfigMaps CRManager defined methods for managing Kubernetes custom resources.

func NewCRManager

func NewCRManager(clientset kubernetes.Interface, clientsetext extapi.ApiextensionsV1beta1Interface) CRManager

NewCRManager constructs a CRManager with the given Kubernetes interface.

type Kind

type Kind string

Kind represents the type of a Kubernetes Object.

const (
	KindUnknown Kind = "Unknown"

	KindNode Kind = "Node"

	KindPod                   Kind = "Pod"
	KindReplicaSet            Kind = "ReplicaSet"
	KindReplicationController Kind = "ReplicationController"
	KindDeployment            Kind = "Deployment"
	KindStatefulSet           Kind = "StatefulSet"
	KindDaemonSet             Kind = "DaemonSet"
	KindCronJob               Kind = "CronJob"
	KindJob                   Kind = "Job"
)

func KindFromResource

func KindFromResource(resource string) (Kind, error)

type Object

type Object struct {
	Kind      Kind
	Name      string
	Namespace string
}

Object is a simplified representation a Kubernetes object. Each object has kind, which designates the type of the entity it represents. Objects have names and many of them live in namespaces.

func ObjectFromLabelsSet

func ObjectFromLabelsSet(set labels.Set) (Object, error)

type ScannerOpts

type ScannerOpts struct {
	ScanJobTimeout time.Duration
	DeleteScanJob  bool
}

ScannerOpts holds configuration of the vulnerability Scanner.