cli

Documentation

Index

• Constants
• Variables
• func ExplainPolicies(explainedPolicies *matcher.Policy)
• func Lint(kubePolicies []*networkingv1.NetworkPolicy)
• func ParsePolicies(kubePolicies []*networkingv1.NetworkPolicy)
• func ProbeSyntheticConnectivity(explainedPolicies *matcher.Policy, modelPath string, kubePods []v1.Pod, ...)
• func QueryTargetHelper(policies *matcher.Policy, pod *QueryTargetPod) (*matcher.Policy, *matcher.Policy)
• func QueryTargets(explainedPolicies *matcher.Policy, podPath string, pods []*QueryTargetPod)
• func QueryTraffic(explainedPolicies *matcher.Policy, trafficPath string)
• func RunAnalyzeCommand(args *AnalyzeArgs)
• func RunCompareCommand(args *CompareArgs)
• func RunGenerateCommand(args *GenerateArgs)
• func RunProbeCommand(args *ProbeArgs)
• func RunRootCommand()
• func RunVersionCommand()
• func SetupAnalyzeCommand() *cobra.Command
• func SetupCompareCommand() *cobra.Command
• func SetupGenerateCommand() *cobra.Command
• func SetupProbeCommand() *cobra.Command
• func SetupRootCommand() *cobra.Command
• func SetupVersionCommand() *cobra.Command
• type AnalyzeArgs
• type CompareArgs
• type GenerateArgs
• type ProbeArgs
• type QueryTargetPod
• type RootFlags
• type SyntheticProbeConnectivityConfig

Constants

const (
	ParseMode        = "parse"
	ExplainMode      = "explain"
	LintMode         = "lint"
	QueryTrafficMode = "query-traffic"
	QueryTargetMode  = "query-target"
	ProbeMode        = "probe"
)

Variables

var AllModes = []string{
	ParseMode,
	ExplainMode,
	LintMode,
	QueryTrafficMode,
	QueryTargetMode,
	ProbeMode,
}

var (
	DefaultExcludeTags = []string{
		generator.TagMultiPeer,
		generator.TagUpstreamE2E,
		generator.TagExample,
		generator.TagEndPort,
		generator.TagNamespacesByDefaultLabel}
)

Functions

func ExplainPolicies

func ExplainPolicies(explainedPolicies *matcher.Policy)

func Lint

func Lint(kubePolicies []*networkingv1.NetworkPolicy)

func ParsePolicies

func ParsePolicies(kubePolicies []*networkingv1.NetworkPolicy)

func ProbeSyntheticConnectivity

func ProbeSyntheticConnectivity(explainedPolicies *matcher.Policy, modelPath string, kubePods []v1.Pod, kubeNamespaces []v1.Namespace)

func QueryTargetHelper

func QueryTargetHelper(policies *matcher.Policy, pod *QueryTargetPod) (*matcher.Policy, *matcher.Policy)

func QueryTargets

func QueryTargets(explainedPolicies *matcher.Policy, podPath string, pods []*QueryTargetPod)

func QueryTraffic

func QueryTraffic(explainedPolicies *matcher.Policy, trafficPath string)

func RunAnalyzeCommand

func RunAnalyzeCommand(args *AnalyzeArgs)

func RunCompareCommand

func RunCompareCommand(args *CompareArgs)

func RunGenerateCommand

func RunGenerateCommand(args *GenerateArgs)

func RunProbeCommand

func RunProbeCommand(args *ProbeArgs)

func RunRootCommand

func RunRootCommand()

func RunVersionCommand

func RunVersionCommand()

func SetupAnalyzeCommand

func SetupAnalyzeCommand() *cobra.Command

func SetupCompareCommand

func SetupCompareCommand() *cobra.Command

func SetupGenerateCommand

func SetupGenerateCommand() *cobra.Command

func SetupProbeCommand

func SetupProbeCommand() *cobra.Command

func SetupRootCommand

func SetupRootCommand() *cobra.Command

func SetupVersionCommand

func SetupVersionCommand() *cobra.Command

Types

type AnalyzeArgs

type AnalyzeArgs struct {
	AllNamespaces      bool
	Namespaces         []string
	UseExamplePolicies bool
	PolicyPath         string
	Context            string
	SimplifyPolicies   bool

	Modes []string

	// traffic
	TrafficPath string

	// targets
	TargetPodPath string

	// synthetic probe
	ProbePath string
}

type CompareArgs

type CompareArgs struct {
	Noisy                     bool
	NetpolCreationWaitSeconds int
	Contexts                  []string
}

type GenerateArgs

type GenerateArgs struct {
	AllowDNS                  bool
	Noisy                     bool
	IgnoreLoopback            bool
	PerturbationWaitSeconds   int
	PodCreationTimeoutSeconds int
	Retries                   int
	Context                   string
	ServerPorts               []int
	ServerProtocols           []string
	ServerNamespaces          []string
	ServerPods                []string
	CleanupNamespaces         bool
	Include                   []string
	Exclude                   []string
	DestinationType           string
	Mock                      bool
	DryRun                    bool
	JobTimeoutSeconds         int
	JunitResultsFile          string
}

type ProbeArgs

type ProbeArgs struct {
	Noisy                     bool
	IgnoreLoopback            bool
	KubeContext               string
	PerturbationWaitSeconds   int
	PodCreationTimeoutSeconds int
	PolicyPath                string
	ProbeMode                 string
	JobTimeoutSeconds         int

	// what to probe on
	ProbeAllAvailable bool
	Ports             []string
	Protocols         []string

	// server setup
	ServerProtocols  []string
	ServerPorts      []int
	ServerNamespaces []string
	ServerPods       []string
}

type QueryTargetPod

type QueryTargetPod struct {
	Namespace string
	Labels    map[string]string
}

QueryTargetPod matches targets; targets exist in only a single namespace and can't be matched by namespace

label, therefore we match by exact namespace and by pod labels.

type RootFlags

type RootFlags struct {
	Verbosity string
}

type SyntheticProbeConnectivityConfig

type SyntheticProbeConnectivityConfig struct {
	Resources *probe.Resources
	Probes    []*generator.PortProtocol
}