rulemanager

Documentation

Index

• type RuleManager
  • func CreateRuleManager(ctx context.Context, k8sClient k8sclient.K8sClientInterface, ...) (*RuleManager, error)
  • func (rm *RuleManager) ContainerCallback(notif containercollection.PubSubEvent)
  • func (rm *RuleManager) HasApplicableRuleBindings(namespace, name string) bool
  • func (rm *RuleManager) HasFinalApplicationProfile(pod *corev1.Pod) bool
  • func (rm *RuleManager) IsContainerMonitored(k8sContainerID string) bool
  • func (rm *RuleManager) IsPodMonitored(namespace, pod string) bool
  • func (rm *RuleManager) RegisterPeekFunc(peek func(mntns uint64) ([]string, error))
  • func (rm *RuleManager) ReportCapability(event tracercapabilitiestype.Event)
  • func (rm *RuleManager) ReportDNSEvent(event tracerdnstype.Event)
  • func (rm *RuleManager) ReportFileExec(event tracerexectype.Event)
  • func (rm *RuleManager) ReportFileOpen(event traceropentype.Event)
  • func (rm *RuleManager) ReportHardlinkEvent(event tracerhardlinktype.Event)
  • func (rm *RuleManager) ReportNetworkEvent(event tracernetworktype.Event)
  • func (rm *RuleManager) ReportRandomxEvent(event tracerrandomxtype.Event)
  • func (rm *RuleManager) ReportSymlinkEvent(event tracersymlinktype.Event)

Types

type RuleManager

type RuleManager struct {
	// contains filtered or unexported fields
}

func CreateRuleManager

func CreateRuleManager(ctx context.Context, k8sClient k8sclient.K8sClientInterface, ruleBindingCache bindingcache.RuleBindingCache, objectCache objectcache.ObjectCache, exporter exporters.Exporter, metrics metricsmanager.MetricsManager, nodeName string, clusterName string) (*RuleManager, error)

func (*RuleManager) ContainerCallback

func (rm *RuleManager) ContainerCallback(notif containercollection.PubSubEvent)

func (*RuleManager) HasApplicableRuleBindings

func (rm *RuleManager) HasApplicableRuleBindings(namespace, name string) bool

func (*RuleManager) HasFinalApplicationProfile

func (rm *RuleManager) HasFinalApplicationProfile(pod *corev1.Pod) bool

func (*RuleManager) IsContainerMonitored

func (rm *RuleManager) IsContainerMonitored(k8sContainerID string) bool

func (*RuleManager) IsPodMonitored

func (rm *RuleManager) IsPodMonitored(namespace, pod string) bool

func (*RuleManager) RegisterPeekFunc

func (rm *RuleManager) RegisterPeekFunc(peek func(mntns uint64) ([]string, error))

func (*RuleManager) ReportCapability

func (rm *RuleManager) ReportCapability(event tracercapabilitiestype.Event)

func (*RuleManager) ReportDNSEvent

func (rm *RuleManager) ReportDNSEvent(event tracerdnstype.Event)

func (*RuleManager) ReportFileExec

func (rm *RuleManager) ReportFileExec(event tracerexectype.Event)

func (*RuleManager) ReportFileOpen

func (rm *RuleManager) ReportFileOpen(event traceropentype.Event)

func (*RuleManager) ReportHardlinkEvent

func (rm *RuleManager) ReportHardlinkEvent(event tracerhardlinktype.Event)

func (*RuleManager) ReportNetworkEvent

func (rm *RuleManager) ReportNetworkEvent(event tracernetworktype.Event)

func (*RuleManager) ReportRandomxEvent

func (rm *RuleManager) ReportRandomxEvent(event tracerrandomxtype.Event)

func (*RuleManager) ReportSymlinkEvent

func (rm *RuleManager) ReportSymlinkEvent(event tracersymlinktype.Event)