enricher

Documentation

Index

• func Dial() (*grpc.ClientConn, context.CancelFunc, error)
• type Enricher
  • func New(logger logr.Logger, labelDenials bool, impls ...impl) (*Enricher, error)
  • func (e *Enricher) Avcs(ctx context.Context, r *api.AvcRequest) (*api.AvcResponse, error)
  • func (e *Enricher) ResetAvcs(ctx context.Context, r *api.AvcRequest) (*api.EmptyResponse, error)
  • func (e *Enricher) ResetSyscalls(ctx context.Context, r *api.SyscallsRequest) (*api.EmptyResponse, error)
  • func (e *Enricher) Run() error
  • func (e *Enricher) Syscalls(ctx context.Context, r *api.SyscallsRequest) (*api.SyscallsResponse, error)

Functions

func Dial

func Dial() (*grpc.ClientConn, context.CancelFunc, error)

Dial can be used to connect to the default GRPC server by creating a new client.

Types

type Enricher

type Enricher struct {
	apienricher.UnimplementedEnricherServer
	// contains filtered or unexported fields
}

Enricher is the main structure of this package.

func New

func New(logger logr.Logger, labelDenials bool, impls ...impl) (*Enricher, error)

New returns a new Enricher instance.

func (*Enricher) Avcs

func (e *Enricher) Avcs(
	ctx context.Context, r *api.AvcRequest,
) (*api.AvcResponse, error)

Avcs returns the AVC messages for a provided profile.

func (*Enricher) ResetAvcs

func (e *Enricher) ResetAvcs(
	ctx context.Context, r *api.AvcRequest,
) (*api.EmptyResponse, error)

ResetAvcs removes the avcs for a provided profile.

func (*Enricher) ResetSyscalls

func (e *Enricher) ResetSyscalls(
	ctx context.Context, r *api.SyscallsRequest,
) (*api.EmptyResponse, error)

ResetSyscalls removes the syscalls for a provided profile.

func (*Enricher) Run

func (e *Enricher) Run() error

Run the log-enricher to scrap audit logs and enrich them with Kubernetes data (namespace, pod and container).

func (*Enricher) Syscalls

func (e *Enricher) Syscalls(
	ctx context.Context, r *api.SyscallsRequest,
) (*api.SyscallsResponse, error)

Syscalls returns the syscalls for a provided profile.