cmd

Documentation

Index

• Constants
• Variables
• func Execute()
• type Capability
• type Container
• type DaemonSet
• type DaemonSetList
• type DebugHook
  • func NewDebugHook() *DebugHook
  • func (hook *DebugHook) Fire(entry *logrus.Entry) error
  • func (hook *DebugHook) Levels() []logrus.Level
• type Deployment
• type DeploymentList
• type Items
• type ListOptions
• type NamespaceList
• type NetworkPolicy
• type NetworkPolicyList
• type Occurrence
• type Pod
• type PodList
• type ReplicationController
• type ReplicationControllerList
• type Result
  • func ServiceAccountIter(t interface{}) (result *Result)
  • func (res Result) Print()
• type StatefulSet
• type StatefulSetList

Constants

const (
	KubeauditInternalError
	ErrorAllowPrivilegeEscalationNIL
	ErrorAllowPrivilegeEscalationTrue
	ErrorCapabilitiesAdded
	ErrorCapabilitiesNIL
	ErrorCapabilitiesNoneDropped
	ErrorCapabilitiesSomeDropped
	ErrorImageTagIncorrect
	ErrorImageTagMissing
	ErrorPrivilegedNIL
	ErrorPrivilegedTrue
	ErrorReadOnlyRootFilesystemFalse
	ErrorReadOnlyRootFilesystemNIL
	ErrorRunAsNonRootFalse
	ErrorRunAsNonRootNIL
	ErrorSecurityContextNIL
	ErrorServiceAccountTokenDeprecated
	ErrorServiceAccountTokenNIL
	ErrorServiceAccountTokenNILAndNoName
	ErrorServiceAccountTokenNoName
	ErrorServiceAccountTokenTrueAndNoName
	InfoImageCorrect
)

const (
	Error
	Warn
	Info
	Debug
)

const Version = "0.1.0"

Variables

var KubeauditLogLevel = Info

var KubeauditLogLevels = map[string]int{"ERROR": Error, "WARN": Warn, "INFO": Info, "DEBUG": Debug}

var RootCmd = &cobra.Command{
	Use:   "kubeaudit",
	Short: "A Kubernetes security auditor",
	Long: `kubeaudit is a program that will help you audit
your Kubernetes clusters. Specify -l to run kubeaudit using ~/.kube/config
otherwise it will attempt to create an in-cluster client.

#patcheswelcome`,
}

Functions

func Execute

func Execute()

Types

type Capability

type Capability = apiv1.Capability

type Container

type Container = apiv1.Container

type DaemonSet

type DaemonSet = extensionsv1beta1.DaemonSet

type DaemonSetList

type DaemonSetList = extensionsv1beta1.DaemonSetList

type DebugHook

type DebugHook struct{}

func NewDebugHook

func NewDebugHook() *DebugHook

func (*DebugHook) Fire

func (hook *DebugHook) Fire(entry *logrus.Entry) error

func (*DebugHook) Levels

func (hook *DebugHook) Levels() []logrus.Level

type Deployment

type Deployment = v1beta1.Deployment

type DeploymentList

type DeploymentList = v1beta1.DeploymentList

type Items

type Items interface {
	Iter() []interface{}
}

type ListOptions

type ListOptions = metav1.ListOptions

type NamespaceList

type NamespaceList = apiv1.NamespaceList

type NetworkPolicy

type NetworkPolicy = networking.NetworkPolicy

type NetworkPolicyList

type NetworkPolicyList = networking.NetworkPolicyList

type Occurrence

type Occurrence struct {
	// contains filtered or unexported fields
}

type Pod

type Pod = apiv1.Pod

type PodList

type PodList = apiv1.PodList

type ReplicationController

type ReplicationController = apiv1.ReplicationController

type ReplicationControllerList

type ReplicationControllerList = apiv1.ReplicationControllerList

type Result

type Result struct {
	Err            int
	Occurrences    []Occurrence
	Namespace      string
	Name           string
	CapsAdded      []Capability
	ImageName      string
	CapsDropped    []Capability
	CapsNotDropped []Capability
	KubeType       string
	DSA            string
	SA             string
	Token          *bool
	ImageTag       string
}

func ServiceAccountIter

func ServiceAccountIter(t interface{}) (result *Result)

func (Result) Print

func (res Result) Print()

type StatefulSet

type StatefulSet = v1beta1.StatefulSet

type StatefulSetList

type StatefulSetList = v1beta1.StatefulSetList