controller

Documentation

Index

• func ConfigurePolicies(ctx context.Context, config etc.Config, c client.Client, ...) (*policy.Policies, error)
• func Policies(ctx context.Context, config etc.Config, c client.Client, ...) (*policy.Policies, error)
• type ChecksLoader
  • func NewChecksLoader(cfg etc.Config, logger logr.Logger, cl client.Client, ...) *ChecksLoader
  • func (r *ChecksLoader) GetPolicies(ctx context.Context) (*policy.Policies, error)
  • func (r *ChecksLoader) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *ChecksLoader) SetupWithManager(mgr ctrl.Manager) error
• type Misconfiguration
• type NodeCollectorJobController
  • func (r *NodeCollectorJobController) SetupWithManager(mgr ctrl.Manager) error
• type NodeReconciler
  • func (r *NodeReconciler) SetupWithManager(mgr ctrl.Manager) error
• type PolicyConfigController
  • func (r *PolicyConfigController) SetupWithManager(mgr ctrl.Manager) error
• type ResourceController
  • func (r *ResourceController) SetupWithManager(mgr ctrl.Manager) error

Functions

func ConfigurePolicies

func ConfigurePolicies(ctx context.Context, config etc.Config, c client.Client, cac configauditreport.ConfigAuditConfig, log logr.Logger, pl policy.Loader, clusterVersion ...string) (*policy.Policies, error)

func Policies

func Policies(ctx context.Context, config etc.Config, c client.Client, cac configauditreport.ConfigAuditConfig, log logr.Logger, pl policy.Loader, clusterVersion ...string) (*policy.Policies, error)

Types

type ChecksLoader

type ChecksLoader struct {
	// contains filtered or unexported fields
}

func NewChecksLoader

func NewChecksLoader(
	cfg etc.Config,
	logger logr.Logger,
	cl client.Client,
	objectResolver kube.ObjectResolver,
	pluginContext trivyoperator.PluginContext,
	pluginConfig configauditreport.PluginInMemory,
	policyLoader policy.Loader,
) *ChecksLoader

func (*ChecksLoader) GetPolicies

func (r *ChecksLoader) GetPolicies(ctx context.Context) (*policy.Policies, error)

func (*ChecksLoader) Reconcile

func (r *ChecksLoader) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

func (*ChecksLoader) SetupWithManager

func (r *ChecksLoader) SetupWithManager(mgr ctrl.Manager) error

type Misconfiguration

type Misconfiguration struct {
	// contains filtered or unexported fields
}

type NodeCollectorJobController

type NodeCollectorJobController struct {
	logr.Logger
	etc.Config
	kube.ObjectResolver
	kube.LogsReader
	PolicyLoader policy.Loader
	trivyoperator.ConfigData
	trivyoperator.PluginContext
	configauditreport.PluginInMemory
	InfraReadWriter infraassessment.ReadWriter
	trivyoperator.BuildInfo
	ChecksLoader *ChecksLoader
}

NodeCollectorJobController watches Kubernetes jobs generates v1alpha1.ClusterInfraAssessmentReport instances using infra assessment scanner

func (*NodeCollectorJobController) SetupWithManager

func (r *NodeCollectorJobController) SetupWithManager(mgr ctrl.Manager) error

type NodeReconciler

type NodeReconciler struct {
	logr.Logger
	etc.Config
	PolicyLoader policy.Loader
	trivyoperator.ConfigData
	kube.ObjectResolver
	trivyoperator.PluginContext
	configauditreport.PluginInMemory
	jobs.LimitChecker
	InfraReadWriter  infraassessment.ReadWriter
	CacheSyncTimeout time.Duration
	trivyoperator.BuildInfo
}

NodeReconciler reconciles corev1.Node and corev1.Job objects

to collect cluster nodes information (fileSystem permission and process arguments) the node information will be evaluated by the compliance control checks per relevant reports, examples: cis-benchmark and nsa

func (*NodeReconciler) SetupWithManager

func (r *NodeReconciler) SetupWithManager(mgr ctrl.Manager) error

type PolicyConfigController

type PolicyConfigController struct {
	logr.Logger
	etc.Config
	kube.ObjectResolver
	trivyoperator.PluginContext
	PolicyLoader policy.Loader
	configauditreport.PluginInMemory
	ClusterVersion string
}

PolicyConfigController watches changes on policies config map and generates v1alpha1.ConfigAuditReport instances based on OPA Rego policies as fast as possible.

func (*PolicyConfigController) SetupWithManager

func (r *PolicyConfigController) SetupWithManager(mgr ctrl.Manager) error

type ResourceController

type ResourceController struct {
	logr.Logger
	etc.Config
	PolicyLoader policy.Loader
	trivyoperator.ConfigData
	kube.ObjectResolver
	trivyoperator.PluginContext
	configauditreport.PluginInMemory
	configauditreport.ReadWriter
	RbacReadWriter  rbacassessment.ReadWriter
	InfraReadWriter infraassessment.ReadWriter
	trivyoperator.BuildInfo
	ClusterVersion   string
	CacheSyncTimeout time.Duration
	ChecksLoader     *ChecksLoader
}

ResourceController watches all Kubernetes kinds and generates v1alpha1.ConfigAuditReport instances based on OPA Rego policies as fast as possible.

func (*ResourceController) SetupWithManager

func (r *ResourceController) SetupWithManager(mgr ctrl.Manager) error