azure

Documentation

Index

• type AZSecurityPolicyProvider
  • func NewAzPolicyProvider() *AZSecurityPolicyProvider
  • func (p *AZSecurityPolicyProvider) HasAllowPrivilegeEscalationRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasAllowedCapabilitiesRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasAssignedCapabilitiesRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasHostIPCRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasHostNetworkRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasHostPIDRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasHostPortRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasNETRAWRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasPrivilegedAccessRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasRootUserRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasSeccompProfileRestriction() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasSecurityPolicies() (*bool, error)
  • func (p *AZSecurityPolicyProvider) HasVolumeTypeRestriction() (*bool, error)

Types

type AZSecurityPolicyProvider

type AZSecurityPolicyProvider struct {
	// contains filtered or unexported fields
}

AZSecurityPolicyProvider queries the policies applied on the supplied subscription and resource group. This may be deprecated in favour of azk8sconstrainttemplate which queries the kubernetes cluster directly. TODO: decide if this should be kept.

func NewAzPolicyProvider

func NewAzPolicyProvider() *AZSecurityPolicyProvider

NewAzPolicyProvider ...

func (*AZSecurityPolicyProvider) HasAllowPrivilegeEscalationRestriction

func (p *AZSecurityPolicyProvider) HasAllowPrivilegeEscalationRestriction() (*bool, error)

HasAllowPrivilegeEscalationRestriction ...

func (*AZSecurityPolicyProvider) HasAllowedCapabilitiesRestriction

func (p *AZSecurityPolicyProvider) HasAllowedCapabilitiesRestriction() (*bool, error)

HasAllowedCapabilitiesRestriction ...

func (*AZSecurityPolicyProvider) HasAssignedCapabilitiesRestriction

func (p *AZSecurityPolicyProvider) HasAssignedCapabilitiesRestriction() (*bool, error)

HasAssignedCapabilitiesRestriction ...

func (*AZSecurityPolicyProvider) HasHostIPCRestriction

func (p *AZSecurityPolicyProvider) HasHostIPCRestriction() (*bool, error)

HasHostIPCRestriction ...

func (*AZSecurityPolicyProvider) HasHostNetworkRestriction

func (p *AZSecurityPolicyProvider) HasHostNetworkRestriction() (*bool, error)

HasHostNetworkRestriction ...

func (*AZSecurityPolicyProvider) HasHostPIDRestriction

func (p *AZSecurityPolicyProvider) HasHostPIDRestriction() (*bool, error)

HasHostPIDRestriction ...

func (*AZSecurityPolicyProvider) HasHostPortRestriction

func (p *AZSecurityPolicyProvider) HasHostPortRestriction() (*bool, error)

HasHostPortRestriction ...

func (*AZSecurityPolicyProvider) HasNETRAWRestriction

func (p *AZSecurityPolicyProvider) HasNETRAWRestriction() (*bool, error)

HasNETRAWRestriction ...

func (*AZSecurityPolicyProvider) HasPrivilegedAccessRestriction

func (p *AZSecurityPolicyProvider) HasPrivilegedAccessRestriction() (*bool, error)

HasPrivilegedAccessRestriction ...

func (*AZSecurityPolicyProvider) HasRootUserRestriction

func (p *AZSecurityPolicyProvider) HasRootUserRestriction() (*bool, error)

HasRootUserRestriction ...

func (*AZSecurityPolicyProvider) HasSeccompProfileRestriction

func (p *AZSecurityPolicyProvider) HasSeccompProfileRestriction() (*bool, error)

HasSeccompProfileRestriction ...

func (*AZSecurityPolicyProvider) HasSecurityPolicies

func (p *AZSecurityPolicyProvider) HasSecurityPolicies() (*bool, error)

HasSecurityPolicies ...

func (*AZSecurityPolicyProvider) HasVolumeTypeRestriction

func (p *AZSecurityPolicyProvider) HasVolumeTypeRestriction() (*bool, error)

HasVolumeTypeRestriction ...