data

Documentation

Index

• func GetPodByPodName(ctx context.Context, dynamicClient dynamic.Interface, ...) (*unstructured.Unstructured, error)
• type FalcoOutput
  • func Aggregate24hrsData(fsWrapper afero.Fs, dir string) (aggregatedData []FalcoOutput, err error)
• type OutputFormat

Functions

func GetPodByPodName

func GetPodByPodName(ctx context.Context, dynamicClient dynamic.Interface, restMapper meta.RESTMapper, namespace, podname string) (*unstructured.Unstructured, error)

GetPodByPodName returns pod from the namespace and name provided.

Types

type FalcoOutput

type FalcoOutput struct {
	PodName             string
	Container           string
	ControllerNamespace string
	ControllerName      string
	ControllerKind      string
	UUID                string                 `json:"uuid,omitempty"`
	Output              string                 `json:"output"`
	Priority            types.PriorityType     `json:"priority"`
	Rule                string                 `json:"rule"`
	Time                time.Time              `json:"time"`
	OutputFields        map[string]interface{} `json:"output_fields"`
}

FalcoPayload is a struct to map falco event json

func Aggregate24hrsData

func Aggregate24hrsData(fsWrapper afero.Fs, dir string) (aggregatedData []FalcoOutput, err error)

Aggregate24hrsData return aggregated report for the past 24 hours

type OutputFormat

type OutputFormat struct {
	Output []FalcoOutput
}