check

Documentation

Index

• Constants
• type Check
  • func (c *Check) Run()
• type Controls
  • func NewControls(t NodeType, in []byte) (*Controls, error)
  • func (controls *Controls) JSON() ([]byte, error)
  • func (controls *Controls) RunChecks(ids ...string) Summary
  • func (controls *Controls) RunGroup(gids ...string) Summary
• type Group
• type NodeType
• type State
• type Summary

Constants

const (
	// PASS check passed.
	PASS State = "PASS"
	// FAIL check failed.
	FAIL = "FAIL"
	// WARN could not carry out check.
	WARN = "WARN"
	// INFO informational message
	INFO = "INFO"

	// MASTER a master node
	MASTER NodeType = "master"
	// NODE a node
	NODE NodeType = "node"
	// FEDERATED a federated deployment.
	FEDERATED NodeType = "federated"
)

Types

type Check

type Check struct {
	ID          string      `yaml:"id" json:"test_number"`
	Text        string      `json:"test_desc"`
	Audit       string      `json:"omit"`
	Type        string      `json:"type"`
	Commands    []*exec.Cmd `json:"omit"`
	Tests       *tests      `json:"omit"`
	Set         bool        `json:"omit"`
	Remediation string      `json:"-"`
	TestInfo    []string    `json:"test_info"`
	State       `json:"status"`
}

Check contains information about a recommendation in the CIS Kubernetes 1.6+ document.

func (*Check) Run

func (c *Check) Run()

Run executes the audit commands specified in a check and outputs the results.

type Controls

type Controls struct {
	ID      string   `yaml:"id" json:"id"`
	Version string   `json:"version"`
	Text    string   `json:"text"`
	Type    NodeType `json:"node_type"`
	Groups  []*Group `json:"tests"`
	Summary
}

Controls holds all controls to check for master nodes.

func NewControls

func NewControls(t NodeType, in []byte) (*Controls, error)

NewControls instantiates a new master Controls object.

func (*Controls) JSON

func (controls *Controls) JSON() ([]byte, error)

JSON encodes the results of last run to JSON.

func (*Controls) RunChecks

func (controls *Controls) RunChecks(ids ...string) Summary

RunChecks runs the checks with the supplied IDs.

func (*Controls) RunGroup

func (controls *Controls) RunGroup(gids ...string) Summary

RunGroup runs all checks in a group.

type Group

type Group struct {
	ID     string   `yaml:"id" json:"section"`
	Pass   int      `json:"pass"`
	Fail   int      `json:"fail"`
	Warn   int      `json:"warn"`
	Text   string   `json:"desc"`
	Checks []*Check `json:"results"`
}

Group is a collection of similar checks.

type NodeType

type NodeType string

NodeType indicates the type of node (master, node, federated).

type State

type State string

State is the state of a control check.

type Summary

type Summary struct {
	Pass int `json:"total_pass"`
	Fail int `json:"total_fail"`
	Warn int `json:"total_warn"`
}

Summary is a summary of the results of control checks run.