providers

Documentation

Index

• Constants
• func GetKubeConfigPath() string
• type AWSProvider
  • func NewAWSProvider(uuid uuid.UUID) *AWSProvider
  • func (m *AWSProvider) GetConnection() aws.Config
  • func (m *AWSProvider) IsAuthenticatedAgainstAWS() bool
• type AzureProvider
  • func NewAzureProvider(uuid uuid.UUID) *AzureProvider
  • func (m *AzureProvider) GetCredentials() *azidentity.DefaultAzureCredential
  • func (m *AzureProvider) IsAuthenticatedAgainstAzure() bool
• type EKSProvider
  • func NewEKSProvider(uuid uuid.UUID) *EKSProvider
  • func (m *EKSProvider) GetAWSConnection() aws.Config
  • func (m *EKSProvider) GetEKSClusterName() string
  • func (m *EKSProvider) GetK8sClient() *kubernetes.Clientset
  • func (m *EKSProvider) IsAuthenticatedAgainstEKS() bool
• type EntraIdProvider
  • func NewEntraIdProvider(uuid uuid.UUID) *EntraIdProvider
  • func (m *EntraIdProvider) GetBetaGraphClient() *betagraph.GraphServiceClient
  • func (m *EntraIdProvider) GetGraphClient() *graph.GraphServiceClient
  • func (m *EntraIdProvider) GetTenantId() (string, error)
  • func (m *EntraIdProvider) IsAuthenticatedAgainstEntraId() bool
• type GCPProvider
  • func NewGCPProvider(uuid uuid.UUID) *GCPProvider
  • func (m *GCPProvider) GetProjectId() string
  • func (m *GCPProvider) IsAuthenticated() bool
  • func (m *GCPProvider) Options() option.ClientOption
• type K8sProvider
  • func NewK8sProvider(uuid uuid.UUID) *K8sProvider
  • func (m *K8sProvider) GetClient() *kubernetes.Clientset
  • func (m *K8sProvider) GetRestConfig() *rest.Config
  • func (m *K8sProvider) IsAuthenticated() bool

Constants

const EnvVarSkipEKSHostnameCheck = "STRATUS_SKIP_EKS_HOSTNAME_CHECK"

const (
	KubeconfigDefaultPath = ".kube/config"
)

Functions

func GetKubeConfigPath

func GetKubeConfigPath() string

GetKubeConfigPath returns the path of the kubeconfig, with the following priority: 1. KUBECONFIG environment variable 2. $HOME/.kube/config

Types

type AWSProvider

type AWSProvider struct {
	UniqueCorrelationId uuid.UUID // unique value injected in the user-agent, to differentiate Stratus Red Team executions
	// contains filtered or unexported fields
}

func NewAWSProvider

func NewAWSProvider(uuid uuid.UUID) *AWSProvider

func (*AWSProvider) GetConnection

func (m *AWSProvider) GetConnection() aws.Config

func (*AWSProvider) IsAuthenticatedAgainstAWS

func (m *AWSProvider) IsAuthenticatedAgainstAWS() bool

type AzureProvider

type AzureProvider struct {
	Credentials         *azidentity.DefaultAzureCredential
	ClientOptions       *arm.ClientOptions
	SubscriptionID      string
	UniqueCorrelationId uuid.UUID // unique value injected in the user-agent, to differentiate Stratus Red Team executions
}

func NewAzureProvider

func NewAzureProvider(uuid uuid.UUID) *AzureProvider

func (*AzureProvider) GetCredentials

func (m *AzureProvider) GetCredentials() *azidentity.DefaultAzureCredential

func (*AzureProvider) IsAuthenticatedAgainstAzure

func (m *AzureProvider) IsAuthenticatedAgainstAzure() bool

type EKSProvider

type EKSProvider struct {
	UniqueCorrelationId uuid.UUID // unique value injected in the user-agent, to differentiate Stratus Red Team executions
	// contains filtered or unexported fields
}

func NewEKSProvider

func NewEKSProvider(uuid uuid.UUID) *EKSProvider

func (*EKSProvider) GetAWSConnection

func (m *EKSProvider) GetAWSConnection() aws.Config

func (*EKSProvider) GetEKSClusterName

func (m *EKSProvider) GetEKSClusterName() string

taken from https://github.com/DataDog/managed-kubernetes-auditing-toolkit/blob/main/internal/utils/kubernetes.go#L59C1-L74C2

func (*EKSProvider) GetK8sClient

func (m *EKSProvider) GetK8sClient() *kubernetes.Clientset

func (*EKSProvider) IsAuthenticatedAgainstEKS

func (m *EKSProvider) IsAuthenticatedAgainstEKS() bool

type EntraIdProvider

type EntraIdProvider struct {
	Credentials     *azidentity.DefaultAzureCredential
	ClientOptions   *arm.ClientOptions
	GraphClient     *graph.GraphServiceClient
	BetaGraphClient *betagraph.GraphServiceClient
}

func NewEntraIdProvider

func NewEntraIdProvider(uuid uuid.UUID) *EntraIdProvider

func (*EntraIdProvider) GetBetaGraphClient

func (m *EntraIdProvider) GetBetaGraphClient() *betagraph.GraphServiceClient

func (*EntraIdProvider) GetGraphClient

func (m *EntraIdProvider) GetGraphClient() *graph.GraphServiceClient

func (*EntraIdProvider) GetTenantId

func (m *EntraIdProvider) GetTenantId() (string, error)

func (*EntraIdProvider) IsAuthenticatedAgainstEntraId

func (m *EntraIdProvider) IsAuthenticatedAgainstEntraId() bool

type GCPProvider

type GCPProvider struct {
	UniqueCorrelationId uuid.UUID
	ProjectId           string
}

func NewGCPProvider

func NewGCPProvider(uuid uuid.UUID) *GCPProvider

func (*GCPProvider) GetProjectId

func (m *GCPProvider) GetProjectId() string

func (*GCPProvider) IsAuthenticated

func (m *GCPProvider) IsAuthenticated() bool

func (*GCPProvider) Options

func (m *GCPProvider) Options() option.ClientOption

type K8sProvider

type K8sProvider struct {
	RestConfig          *rest.Config
	UniqueCorrelationId uuid.UUID // unique value injected in the user-agent, to differentiate Stratus Red Team executions
	// contains filtered or unexported fields
}

func NewK8sProvider

func NewK8sProvider(uuid uuid.UUID) *K8sProvider

func (*K8sProvider) GetClient

func (m *K8sProvider) GetClient() *kubernetes.Clientset

GetClient is used to authenticate with Kubernetes and build the client from a kubeconfig

func (*K8sProvider) GetRestConfig

func (m *K8sProvider) GetRestConfig() *rest.Config

func (*K8sProvider) IsAuthenticated

func (m *K8sProvider) IsAuthenticated() bool