validators

Documentation

Overview

Package validators handles Kubescape validation rule reconciliation.

Index

• type KubescapeService
  • func NewKubescapeService(log logr.Logger, kvAPI *kubevuln.APIServerStore) *KubescapeService
  • func (n *KubescapeService) Manifests() ([]kubescapev1.VulnerabilityManifest, error)
  • func (n *KubescapeService) ReconcileFlaggedCVERule(cve validationv1.FlaggedCVE, manifests []kubescapev1.VulnerabilityManifest) (*types.ValidationRuleResult, error)
  • func (n *KubescapeService) ReconcileSeverityRule(rule validationv1.SeverityLimitRule, ...) (*types.ValidationRuleResult, error)

Types

type KubescapeService

type KubescapeService struct {
	Log logr.Logger
	API *kubevuln.APIServerStore
}

KubescapeService retrieves vulnerability data and uses it to reconcile Kubescape rules.

func NewKubescapeService

func NewKubescapeService(log logr.Logger, kvAPI *kubevuln.APIServerStore) *KubescapeService

NewKubescapeService creates a KubescapeService.

func (*KubescapeService) Manifests

func (n *KubescapeService) Manifests() ([]kubescapev1.VulnerabilityManifest, error)

Manifests retrieves vulnerability data.

func (*KubescapeService) ReconcileFlaggedCVERule

func (n *KubescapeService) ReconcileFlaggedCVERule(cve validationv1.FlaggedCVE, manifests []kubescapev1.VulnerabilityManifest) (*types.ValidationRuleResult, error)

ReconcileFlaggedCVERule reconciles a flagged CVE rule.

func (*KubescapeService) ReconcileSeverityRule

func (n *KubescapeService) ReconcileSeverityRule(rule validationv1.SeverityLimitRule, manifests []kubescapev1.VulnerabilityManifest) (*types.ValidationRuleResult, error)

ReconcileSeverityRule reconciles a severity limit rule.