seccompprofile

Documentation

Index

• func NewController() controller.Controller
• type AllowedSyscallsChangedPredicate
  • func (AllowedSyscallsChangedPredicate) Update(e event.UpdateEvent) bool
• type OutputProfile
• type Reconciler
  • func (r *Reconciler) Healthz(*http.Request) error
  • func (r *Reconciler) Name() string
  • func (r *Reconciler) Reconcile(_ context.Context, req reconcile.Request) (reconcile.Result, error)
  • func (r *Reconciler) SchemeBuilder() *scheme.Builder
  • func (r *Reconciler) Setup(ctx context.Context, mgr ctrl.Manager, met *metrics.Metrics) error

Functions

func NewController

func NewController() controller.Controller

NewController returns a new empty controller instance.

Types

type AllowedSyscallsChangedPredicate

type AllowedSyscallsChangedPredicate struct {
	predicate.Funcs
}

AllowedSyscallsChangedPredicate implements a update predicate function on SPOD's AllowedSyscalls changed.

func (AllowedSyscallsChangedPredicate) Update

func (AllowedSyscallsChangedPredicate) Update(e event.UpdateEvent) bool

Update implements default update event filter for checking SPOD's AllowedSyscalls change.

type OutputProfile

type OutputProfile struct {
	DefaultAction    seccomp.Action               `json:"defaultAction"`
	Architectures    []seccompprofileapi.Arch     `json:"architectures,omitempty"`
	ListenerPath     string                       `json:"listenerPath,omitempty"`
	ListenerMetadata string                       `json:"listenerMetadata,omitempty"`
	Syscalls         []*seccompprofileapi.Syscall `json:"syscalls,omitempty"`
	Flags            []*seccompprofileapi.Flag    `json:"flags,omitempty"`
}

OutputProfile represents the on-disk form of the SeccompProfile.

type Reconciler

type Reconciler struct {
	// contains filtered or unexported fields
}

A Reconciler reconciles seccomp profiles.

func (*Reconciler) Healthz

func (r *Reconciler) Healthz(*http.Request) error

Healthz is the liveness probe endpoint of the controller.

func (*Reconciler) Name

func (r *Reconciler) Name() string

Name returns the name of the controller.

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(_ context.Context, req reconcile.Request) (reconcile.Result, error)

Reconcile reconciles a SeccompProfile.

func (*Reconciler) SchemeBuilder

func (r *Reconciler) SchemeBuilder() *scheme.Builder

SchemeBuilder returns the API scheme of the controller.

func (*Reconciler) Setup

func (r *Reconciler) Setup(
	ctx context.Context,
	mgr ctrl.Manager,
	met *metrics.Metrics,
) error

Setup adds a controller that reconciles seccomp profiles.