processor

Documentation

Index

• Constants
• type Processor
  • func NewProcessor(kubeconfig string) (*Processor, error)
  • func (p *Processor) GeneratePSP(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) *v1beta1.PodSecurityPolicy
  • func (p *Processor) GeneratePSPGrant(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) (types.PSPGrantList, string)
  • func (p *Processor) GenerateReport(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) *report.Report
  • func (p *Processor) GetSecuritySpec() ([]types.ContainerSecuritySpec, []types.PodSecuritySpec, error)
  • func (p *Processor) GetServiceAccount(ns, saName string) v1.ServiceAccount
  • func (p *Processor) SetExcludeNamespaces(excludeNamespaces []string)
  • func (p *Processor) SetNamespace(ns string)

Constants

const (
	DaemonSet             = "DaemonSet"
	Deployment            = "Deployment"
	Pod                   = "Pod"
	StatefulSet           = "StatefulSet"
	ReplicaSet            = "ReplicaSet"
	ReplicationController = "ReplicationController"
	Job                   = "Job"
	CronJob               = "CronJob"
)

Types

type Processor

type Processor struct {
	// contains filtered or unexported fields
}

func NewProcessor

func NewProcessor(kubeconfig string) (*Processor, error)

NewProcessor returns a new processor

func (*Processor) GeneratePSP

func (p *Processor) GeneratePSP(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) *v1beta1.PodSecurityPolicy

GeneratePSP generates Pod Security Policy

func (*Processor) GeneratePSPGrant

func (p *Processor) GeneratePSPGrant(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) (types.PSPGrantList, string)

GeneratePSPGrant generates Pod Security Policies, Roles, RoleBindings for service accounts to use PSP

func (*Processor) GenerateReport

func (p *Processor) GenerateReport(cssList []types.ContainerSecuritySpec, pssList []types.PodSecuritySpec) *report.Report

GenerateReport generate a JSON report

func (*Processor) GetSecuritySpec

func (p *Processor) GetSecuritySpec() ([]types.ContainerSecuritySpec, []types.PodSecuritySpec, error)

GetSecuritySpec security posture

func (*Processor) GetServiceAccount

func (p *Processor) GetServiceAccount(ns, saName string) v1.ServiceAccount

func (*Processor) SetExcludeNamespaces

func (p *Processor) SetExcludeNamespaces(excludeNamespaces []string)

func (*Processor) SetNamespace

func (p *Processor) SetNamespace(ns string)