Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
Enabled bool
CastaiSecretRefName string
ScanInterval time.Duration `validate:"required"`
ScanTimeout time.Duration
MaxConcurrentScans int64 `validate:"required"`
ScanJobImagePullPolicy string
Mode string
CPURequest string
CPULimit string
MemoryRequest string
MemoryLimit string
ProfileEnabled bool
PhlareEnabled bool
PrivateRegistryPullSecret string
ServiceAccount string
InitDelay time.Duration
CastaiGRPCAddress string
CastaiClusterID string
CastaiGrpcInsecure bool
ImageScanBlobsCacheURL string
CloudProvider string
}
type Controller ¶
type Controller struct {
// contains filtered or unexported fields
}
func NewController ¶
func NewController( log *logging.Logger, cfg Config, imageScanner imageScanner, client castaiClient, kubeController kubeClient, ) *Controller
func (*Controller) OnAdd ¶
func (c *Controller) OnAdd(obj kube.Object)
func (*Controller) OnDelete ¶
func (c *Controller) OnDelete(obj kube.Object)
func (*Controller) OnUpdate ¶
func (c *Controller) OnUpdate(obj kube.Object)
func (*Controller) RequiredTypes ¶
func (c *Controller) RequiredTypes() []reflect.Type
type ImageScanImage ¶
type ImageScanImage struct {
PullPolicy string `envconfig:"IMAGE_SCAN_IMAGE_PULL_POLICY" yaml:"pullPolicy"`
}
type ScanImageParams ¶
type ScanImageParams struct {
ImageName string // Example: ghcr.io/castai/kvisor/kvisor:8889dc92d6c69420a811de4fc67e619a30c028e9
ImageID string // Example: ghcr.io/castai/kvisor/kvisor@sha256:2db087348c66274941013a3163036b1ca09da03ea64e9f9cdd79b8f647e4fe44
ContainerRuntime string
Mode string
NodeName string
ResourceIDs []string
DeleteFinishedJob bool
WaitForCompletion bool
WaitDurationAfterCompletion time.Duration
Architecture string
Os string
ScanImageDetails kube.ImageDetails
}
type Scanner ¶
type Scanner struct {
// contains filtered or unexported fields
}
func NewImageScanner ¶
func NewImageScanner(client kubernetes.Interface, cfg Config, podNamespace string) *Scanner
Click to show internal directories.
Click to hide internal directories.