compliance

type Audit struct {
	Path string `yaml:"path"`
}

type BinaryCmd struct {
	Name string   `yaml:"name"`
	Args []string `yaml:"args,omitempty"`
}

type Check check.Check

type CheckStatus struct {
	RuleID      string
	Name        string
	Description string
	Version     string
	Framework   string
	Source      string
	InitError   error
	LastEvent   *event.Event
}

type CheckStatusList []*CheckStatus

type CheckVisitor func(rule *RuleCommon, check Check, err error) bool

type Command struct {
	BinaryCmd      *BinaryCmd `yaml:"binary,omitempty"`
	ShellCmd       *ShellCmd  `yaml:"shell,omitempty"`
	TimeoutSeconds int        `yaml:"timeout,omitempty"`
}

type ConditionFallbackRule struct {
	RuleCommon   `yaml:",inline"`
	ResourceType string     `yaml:"resourceType,omitempty"`
	Resources    []Resource `yaml:"resources,omitempty"`
}

type Custom struct {
	Name      string            `yaml:"name"`
	Variables map[string]string `yaml:"variables,omitempty"`
}

type DockerResource struct {
	Kind string `yaml:"kind"`
}

type Fallback struct {
	Condition string   `yaml:"condition,omitempty"`
	Resource  Resource `yaml:"resource"`
}

type File struct {
	Path string `yaml:"path"`
}

type Group struct {
	Name string `yaml:"name"`
}

type KubeUnstructuredResource struct {
	unstructured.Unstructured
}

type KubernetesAPIRequest struct {
	Verb         string `yaml:"verb"`
	ResourceName string `yaml:"resourceName,omitempty"`
}

type KubernetesResource struct {
	Kind      string `yaml:"kind"`
	Version   string `yaml:"version,omitempty"`
	Group     string `yaml:"group,omitempty"`
	Namespace string `yaml:"namespace,omitempty"`

	// A selector to restrict the list of returned objects by their labels.
	// Defaults to everything.
	LabelSelector string `yaml:"labelSelector,omitempty"`
	// A selector to restrict the list of returned objects by their fields.
	// Defaults to everything.
	FieldSelector string `yaml:"fieldSelector,omitempty"`

	APIRequest KubernetesAPIRequest `yaml:"apiRequest"`
}

type Process struct {
	Name string `yaml:"name"`
}

type RegoResource struct {
	ResourceCommon `yaml:",inline"`
	TagName        string `yaml:"tag"`
}

type RegoRule struct {
	RuleCommon `yaml:",inline"`
	Resources  []RegoResource `yaml:"inputs,omitempty"`
	Module     string         `yaml:"module,omitempty"`
	Imports    []string       `yaml:"imports,omitempty"`
	Findings   string         `yaml:"findings,omitempty"`
}

type Report struct {
	// Data contains arbitrary data linked to check evaluation
	Data event.Data
	// Resource associated with the report
	Resource ReportResource
	// Passed defines whether check was successful or not
	Passed bool
	// Aggregated defines whether check was aggregated or not
	Aggregated bool
	// Error of th check evaluation
	Error error
}

type ReportResource struct {
	ID   string
	Type string
}

type Resource struct {
	ResourceCommon `yaml:",inline"`
	Condition      string    `yaml:"condition"`
	Fallback       *Fallback `yaml:"fallback,omitempty"`
}

type ResourceCommon struct {
	File          *File               `yaml:"file,omitempty"`
	Process       *Process            `yaml:"process,omitempty"`
	Group         *Group              `yaml:"group,omitempty"`
	Command       *Command            `yaml:"command,omitempty"`
	Audit         *Audit              `yaml:"audit,omitempty"`
	Docker        *DockerResource     `yaml:"docker,omitempty"`
	KubeApiserver *KubernetesResource `yaml:"kubeApiserver,omitempty"`
	Custom        *Custom             `yaml:"custom,omitempty"`
}

type ResourceKind string

type Rule interface {
	ResourceCount() int
	Common() *RuleCommon
}

type RuleCommon struct {
	ID           string        `yaml:"id"`
	Description  string        `yaml:"description,omitempty"`
	Scope        RuleScopeList `yaml:"scope,omitempty"`
	HostSelector string        `yaml:"hostSelector,omitempty"`
}

type RuleScope string

type RuleScopeList []RuleScope

type ShellCmd struct {
	Run   string     `yaml:"run"`
	Shell *BinaryCmd `yaml:"shell,omitempty"`
}

type Suite struct {
	Meta      SuiteMeta               `yaml:",inline"`
	Rules     []ConditionFallbackRule `yaml:"rules,omitempty"`
	RegoRules []RegoRule              `yaml:"regos,omitempty"`
}

type SuiteMeta struct {
	Schema    SuiteSchema `yaml:"schema,omitempty"`
	Name      string      `yaml:"name,omitempty"`
	Framework string      `yaml:"framework,omitempty"`
	Version   string      `yaml:"version,omitempty"`
	Tags      []string    `yaml:"tags,omitempty"`
	Source    string      `yaml:"-"`
}

type SuiteSchema struct {
	Version string `yaml:"version"`
}