label

Documentation

Index

• Constants
• Variables
• type Actionner
  • func Register() *Actionner
  • func (a Actionner) CheckParameters(action *rules.Action) error
  • func (a Actionner) Checks(event *events.Event, _ *rules.Action) error
  • func (a Actionner) Information() models.Information
  • func (a Actionner) Init() error
  • func (a Actionner) Parameters() models.Parameters
  • func (a Actionner) Run(event *events.Event, action *rules.Action) (utils.LogLine, *models.Data, error)
• type Parameters

Constants

const (
	Name          string = "label"
	Category      string = "kubernetes"
	Description   string = "Add, modify or delete the labels of the pod/node"
	Source        string = "syscalls"
	Continue      bool   = true
	UseContext    bool   = false
	AllowOutput   bool   = false
	RequireOutput bool   = false
	Permissions   string = `` /* 185-byte string literal not displayed */

	Example string = `- action: Label the pod
  actionner: kubernetes:label
  parameters:
    level: pod
    labels:
      suspicious: "true"
`
)

Variables

var (
	RequiredOutputFields = []string{"k8s.ns.name", "k8s.pod.name"}
)

Types

type Actionner

type Actionner struct{}

func Register

func Register() *Actionner

func (Actionner) CheckParameters

func (a Actionner) CheckParameters(action *rules.Action) error

func (Actionner) Checks

func (a Actionner) Checks(event *events.Event, _ *rules.Action) error

func (Actionner) Information

func (a Actionner) Information() models.Information

func (Actionner) Init

func (a Actionner) Init() error

func (Actionner) Parameters

func (a Actionner) Parameters() models.Parameters

func (Actionner) Run

func (a Actionner) Run(event *events.Event, action *rules.Action) (utils.LogLine, *models.Data, error)

type Parameters

type Parameters struct {
	Labels map[string]string `mapstructure:"labels" validate:"required"`
	Level  string            `mapstructure:"level" validate:"omitempty"`
}