expanders

Documentation

Overview

Copyright Contributors to the Open Cluster Management project

Copyright Contributors to the Open Cluster Management project

Copyright Contributors to the Open Cluster Management project

Index

• func GetExpanders() map[string]Expander
• type Expander
• type GatekeeperPolicyExpander
  • func (g GatekeeperPolicyExpander) CanHandle(manifest map[string]interface{}) bool
  • func (g GatekeeperPolicyExpander) Enabled(policyConf *types.PolicyConfig) bool
  • func (g GatekeeperPolicyExpander) Expand(manifest map[string]interface{}, severity string) []map[string]interface{}
• type KyvernoPolicyExpander
  • func (k KyvernoPolicyExpander) CanHandle(manifest map[string]interface{}) bool
  • func (k KyvernoPolicyExpander) Enabled(policyConf *types.PolicyConfig) bool
  • func (k KyvernoPolicyExpander) Expand(manifest map[string]interface{}, severity string) []map[string]interface{}

Functions

func GetExpanders

func GetExpanders() map[string]Expander

GetExpanders returns the list of available expanders.

Types

type Expander

type Expander interface {
	// CanHandle determines if the manifest is a policy that can be expanded.
	CanHandle(manifest map[string]interface{}) bool
	// Enabled determines if the policy configuration allows a policy to be expanded.
	Enabled(policyConf *types.PolicyConfig) bool
	// Expand will generate additional policy templates for the policy for auditing purposes.
	Expand(manifest map[string]interface{}, severity string) []map[string]interface{}
}

Expander is the interface for all policy expander instances.

type GatekeeperPolicyExpander

type GatekeeperPolicyExpander struct{}

func (GatekeeperPolicyExpander) CanHandle

func (g GatekeeperPolicyExpander) CanHandle(manifest map[string]interface{}) bool

CanHandle determines if the manifest is a Gatekeeper policy that can be expanded.

func (GatekeeperPolicyExpander) Enabled

func (g GatekeeperPolicyExpander) Enabled(policyConf *types.PolicyConfig) bool

Enabled determines if the policy configuration allows a Gatekeeper policy to be expanded.

func (GatekeeperPolicyExpander) Expand

func (g GatekeeperPolicyExpander) Expand(
	manifest map[string]interface{}, severity string,
) []map[string]interface{}

Expand will generate additional policy templates for the Gatekeeper policy for auditing purposes through Open Cluster Management. This should be run after the CanHandle method.

type KyvernoPolicyExpander

type KyvernoPolicyExpander struct{}

func (KyvernoPolicyExpander) CanHandle

func (k KyvernoPolicyExpander) CanHandle(manifest map[string]interface{}) bool

CanHandle determines if the manifest is a Kyverno policy that can be expanded.

func (KyvernoPolicyExpander) Enabled

func (k KyvernoPolicyExpander) Enabled(policyConf *types.PolicyConfig) bool

Enabled determines if the policy configuration allows a Kyverno policy to be expanded.

func (KyvernoPolicyExpander) Expand

func (k KyvernoPolicyExpander) Expand(
	manifest map[string]interface{}, severity string,
) []map[string]interface{}

Expand will generate additional policy templates for the Kyverno policy for auditing purposes through Open Cluster Management. This should be run after the CanHandle method.