compliancescan

Documentation

Index

• Constants
• func Add(mgr manager.Manager) error
• func GetComponentImage(component ComplianceComponent) string
• type ComplianceComponent
• type ReconcileComplianceScan
  • func (r *ReconcileComplianceScan) Reconcile(request reconcile.Request) (reconcile.Result, error)

Constants

const (
	// OpenSCAPScanContainerName defines the name of the contianer that will run OpenSCAP
	OpenSCAPScanContainerName = "openscap-ocp"
	NodeHostnameLabel         = "kubernetes.io/hostname"
	AggregatorPodAnnotation   = "scan-aggregator"
)

const (
	// configMap that contains the default script
	OpenScapScriptConfigMapName = "openscap-container-entrypoint"
	// This is how the script would be mounted
	OpenScapScriptPath = "/scripts/openscap-container-entrypoint"

	// a configMap with env vars for the script
	OpenScapEnvConfigMapName = "openscap-env-map"

	// environment variables the default script consumes
	OpenScapHostRootEnvName   = "HOSTROOT"
	OpenScapProfileEnvName    = "PROFILE"
	OpenScapContentEnvName    = "CONTENT"
	OpenScapReportDirEnvName  = "REPORT_DIR"
	OpenScapRuleEnvName       = "RULE"
	OpenScapVerbosityeEnvName = "VERBOSITY"

	ResultServerPort = int32(8443)
)

const (
	DefaultContentContainerImage = "quay.io/jhrozek/ocp4-openscap-content:latest"
	CACertDataKey                = "ca.crt"
	CAKeyDataKey                 = "ca.key"
	ServerCertInstanceSuffix     = "-rs"
	ClientCertInstanceSuffix     = "-client"
	ServerCertPrefix             = "result-server-cert-"
	ClientCertPrefix             = "result-client-cert-"
	RootCAPrefix                 = "root-ca-"
	CertValidityDays             = 1
)

const (
	LOG_COLLECTOR = iota
	OPENSCAP
	RESULT_SERVER
	AGGREGATOR
)

Functions

func Add

func Add(mgr manager.Manager) error

Add creates a new ComplianceScan Controller and adds it to the Manager. The Manager will set fields on the Controller and Start it when the Manager is Started.

func GetComponentImage

func GetComponentImage(component ComplianceComponent) string

GetComponentImage returns a full image pull spec for a given component based on the component type

Types

type ComplianceComponent

type ComplianceComponent uint

type ReconcileComplianceScan

type ReconcileComplianceScan struct {
	// contains filtered or unexported fields
}

ReconcileComplianceScan reconciles a ComplianceScan object

func (*ReconcileComplianceScan) Reconcile

func (r *ReconcileComplianceScan) Reconcile(request reconcile.Request) (reconcile.Result, error)

Reconcile reads that state of the cluster for a ComplianceScan object and makes changes based on the state read and what is in the ComplianceScan.Spec Note: The Controller will requeue the Request to be processed again if the returned error is non-nil or Result.Requeue is true, otherwise upon completion it will remove the work from the queue.