configauditreport

May 20, 2024

Changes in this version

type ConfigAuditConfig

+ GetUseEmbeddedRegoPolicies func() bool

Apr 4, 2023

Changes in this version

type ReportBuilder

+ func (b *ReportBuilder) AdditionalReportLabels(additionalReportLabels map[string]string) *ReportBuilder

Mar 5, 2023

Changes in this version

type ConfigAuditConfig

+ GetSeverity func() string

Oct 30, 2022

Changes in this version

type ReportBuilder

+ func (b *ReportBuilder) ReportTTL(ttl *time.Duration) *ReportBuilder

+ func (b *ReportBuilder) ResourceLabelsToInclude(resourceLabelsToInclude []string) *ReportBuilder

Jun 30, 2022

Changes in this version

+ type ConfigAuditConfig interface

+ GetSupportedConfigAuditKinds func() []string

+ GetUseBuiltinRegoPolicies func() bool

+ type PluginInMemory interface

+ Init func(ctx trivyoperator.PluginContext) error

+ NewConfigForConfigAudit func(ctx trivyoperator.PluginContext) (ConfigAuditConfig, error)

May 11, 2022

Changes in this version

+ func GetScanJobName(obj client.Object) string

+ type Plugin interface

+ ConfigHash func(ctx trivyoperator.PluginContext, kind kube.Kind) (string, error)

+ GetContainerName func() string

+ GetScanJobSpec func(ctx trivyoperator.PluginContext, obj client.Object) (corev1.PodSpec, []*corev1.Secret, error)

+ Init func(ctx trivyoperator.PluginContext) error

+ IsApplicable func(ctx trivyoperator.PluginContext, obj client.Object) (bool, string, error)

+ ParseConfigAuditReportData func(ctx trivyoperator.PluginContext, logsReader io.ReadCloser) (v1alpha1.ConfigAuditReportData, error)

+ SupportedKinds func() []kube.Kind

+ type ReadWriter interface

+ func NewReadWriter(client client.Client) ReadWriter

+ type Reader interface

+ FindClusterReportByOwner func(ctx context.Context, owner kube.ObjectRef) (*v1alpha1.ClusterConfigAuditReport, error)

+ FindReportByOwner func(ctx context.Context, owner kube.ObjectRef) (*v1alpha1.ConfigAuditReport, error)

+ FindReportByOwnerInHierarchy func(ctx context.Context, owner kube.ObjectRef) (*v1alpha1.ConfigAuditReport, error)

+ type ReportBuilder struct

+ func NewReportBuilder(scheme *runtime.Scheme) *ReportBuilder

+ func (b *ReportBuilder) Controller(controller client.Object) *ReportBuilder

+ func (b *ReportBuilder) Data(data v1alpha1.ConfigAuditReportData) *ReportBuilder

+ func (b *ReportBuilder) GetClusterReport() (v1alpha1.ClusterConfigAuditReport, error)

+ func (b *ReportBuilder) GetReport() (v1alpha1.ConfigAuditReport, error)

+ func (b *ReportBuilder) PluginConfigHash(hash string) *ReportBuilder

+ func (b *ReportBuilder) ResourceSpecHash(hash string) *ReportBuilder

+ func (b *ReportBuilder) Write(ctx context.Context, writer Writer) error

+ type ResourceController struct

+ func (r *ResourceController) SetupWithManager(mgr ctrl.Manager) error

+ type ScanJobBuilder struct

+ func NewScanJobBuilder() *ScanJobBuilder

+ func (s *ScanJobBuilder) Get() (*batchv1.Job, []*corev1.Secret, error)

+ func (s *ScanJobBuilder) WithAnnotations(annotations map[string]string) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithObject(object client.Object) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithPlugin(plugin Plugin) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithPluginContext(pluginContext trivyoperator.PluginContext) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithPodTemplateLabels(podTemplateLabels labels.Set) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithTimeout(timeout time.Duration) *ScanJobBuilder

+ func (s *ScanJobBuilder) WithTolerations(tolerations []corev1.Toleration) *ScanJobBuilder

+ type Scanner struct

+ func NewScanner(buildInfo trivyoperator.BuildInfo, client client.Client) *Scanner

+ func (s *Scanner) Scan(ctx context.Context, resourceRef kube.ObjectRef) (*ReportBuilder, error)

+ type Writer interface

+ WriteClusterReport func(ctx context.Context, report v1alpha1.ClusterConfigAuditReport) error

+ WriteReport func(ctx context.Context, report v1alpha1.ConfigAuditReport) error