install

Documentation

Overview

Package install is responsible for installation and uninstallation of KubeArmor while autogenerating the configuration

Index

• Variables
• func CreateCustomResourceDefinition(crdName string) apiextensions.CustomResourceDefinition
• func GenerateCA() (*x509.Certificate, *rsa.PrivateKey, error)
• func GenerateCSR(namespace string, serviceName string) (*x509.Certificate, *rsa.PrivateKey, error)
• func GeneratePki(namespace string, serviceName string) (*bytes.Buffer, *bytes.Buffer, *bytes.Buffer, error)
• func K8sInstaller(c *k8s.Client, o Options) error
• func K8sLegacyInstaller(c *k8s.Client, o Options) error
• func K8sLegacyUninstaller(c *k8s.Client, o Options) error
• func K8sUninstaller(c *k8s.Client, o Options) error
• func SignCSR(caCrt *x509.Certificate, caKey *rsa.PrivateKey, csrCrt *x509.Certificate, ...) ([]byte, error)
• func UpdateImageRegistry(registry, image string, preserveUpstream bool) string
• type Options

Variables

var KubeArmorClusterRoleBindingName = "kubearmor-clusterrolebinding"

var KubeArmorClusterRoleName = "kubearmor-clusterrole"

var KubeArmorControllerClusterRoleBindingName = "kubearmor-controller-clusterrolebinding"

var KubeArmorControllerClusterRoleName = "kubearmor-controller-clusterrole"

var KubeArmorControllerProxyClusterRoleBindingName = "kubearmor-controller-proxy-rolebinding"

var KubeArmorControllerProxyClusterRoleName = "kubearmor-controller-proxy-role"

var KubeArmorOperatorClusterRoleBindingName = "kubearmor-operator-clusterrole-binding"

var KubeArmorOperatorClusterRoleName = "kubearmor-operator-clusterrole"

var KubeArmorOperatorManageClusterRoleBindingName = "kubearmor-operator-manage-kubearmor-clusterrole-binding"

var KubeArmorOperatorManageClusterRoleName = "kubearmor-operator-manage-kubearmor-clusterrole"

var KubeArmorOperatorManageControllerClusterRoleBindingName = "kubearmor-operator-manage-controller-clusterrole-binding"

var KubeArmorOperatorManageControllerClusterRoleName = "kubearmor-operator-manage-controller-clusterrole"

var KubeArmorSnitchClusterRoleName = "kubearmor-snitch"

var KubeArmorSnitchClusterroleBindingName = "kubearmor-snitch-binding"

var RelayClusterRoleBindingName = "kubearmor-relay-clusterrolebinding"

var RelayClusterRoleName = "kubearmor-relay-clusterrole"

Functions

func CreateCustomResourceDefinition

func CreateCustomResourceDefinition(crdName string) apiextensions.CustomResourceDefinition

CreateCustomResourceDefinition creates the CRD and add it into Kubernetes.

func GenerateCA

func GenerateCA() (*x509.Certificate, *rsa.PrivateKey, error)

GenerateCA - generate private key and a cert for a CA

func GenerateCSR

func GenerateCSR(namespace string, serviceName string) (*x509.Certificate, *rsa.PrivateKey, error)

GenerateCSR - generate certificate signing request

func GeneratePki

func GeneratePki(namespace string, serviceName string) (*bytes.Buffer, *bytes.Buffer, *bytes.Buffer, error)

GeneratePki - generate pub/priv keypair

func K8sInstaller

func K8sInstaller(c *k8s.Client, o Options) error

K8sInstaller using operator for karmor

func K8sLegacyInstaller

func K8sLegacyInstaller(c *k8s.Client, o Options) error

K8sInstaller for karmor install

func K8sLegacyUninstaller

func K8sLegacyUninstaller(c *k8s.Client, o Options) error

func K8sUninstaller

func K8sUninstaller(c *k8s.Client, o Options) error

K8sUninstaller for karmor uninstall

func SignCSR

func SignCSR(caCrt *x509.Certificate, caKey *rsa.PrivateKey, csrCrt *x509.Certificate, csrKey *rsa.PrivateKey) ([]byte, error)

SignCSR - signs a certificate signing request essentially approving it using the given CA

func UpdateImageRegistry

func UpdateImageRegistry(registry, image string, preserveUpstream bool) string

UpdateImageRegistry will update the registry address of the image

Types

type Options

type Options struct {
	Namespace              string
	InitImage              string
	KubearmorImage         string
	ControllerImage        string
	OperatorImage          string
	RelayImage             string
	ImageRegistry          string
	Audit                  string
	Block                  string
	Visibility             string
	Force                  bool
	Local                  bool
	Save                   bool
	Verify                 bool
	Legacy                 bool
	SkipDeploy             bool
	KubeArmorTag           string
	KubeArmorRelayTag      string
	KubeArmorControllerTag string
	KubeArmorOperatorTag   string
	PreserveUpstream       bool
	Env                    envOption
	AlertThrottling        bool
	MaxAlertPerSec         int32
	ThrottleSec            int32
}

Options for karmor install