controller

Oct 24, 2025

Changes in this version

+ const SecretFieldClientID

+ const SecretFieldClientSecret

+ func GetClusterCredentials(ctx context.Context, logger *zap.Logger, envMap EnvironmentConfig) (string, string, error)

+ func OnboardCluster(ctx context.Context, tlsSkipVerify bool, ...) (string, string, error)

type EnvironmentConfig

+ OnboardingClientID string

type OnboardResponse

+ ClusterClientID string

type ResourceManagerConfig

+ ApiGroup string

Aug 19, 2025

Changes in this version

type EnvironmentConfig

+ CiliumNamespaces []string

Jul 24, 2025

Changes in this version

+ const ICMP

+ const IPv4

+ const IPv6

+ const SCTP

+ const TCP

+ const UDP

type EnvironmentConfig

+ IPFIXCollectorPort string

+ OVNKNamespace string

+ VerboseDebugging bool

+ type OVNKFlow struct

+ DestinationIP string

+ DestinationPort uint16

+ EndTimestamp *timestamppb.Timestamp

+ IPVersion string

+ Protocol string

+ SourceIP string

+ SourcePort uint16

+ StartTimestamp *timestamppb.Timestamp

May 19, 2025

Changes in this version

type EnvironmentConfig

+ HttpsProxy string

type ResourceManager

+ func NewResourceManager(config ResourceManagerConfig) *ResourceManager

+ type ResourceManagerConfig struct

+ BaseLogger *zap.Logger

+ Clientset *kubernetes.Clientset

+ DynamicClient dynamic.Interface

+ Limiter *rate.Limiter

+ ResourceName string

+ StreamManager *streamManager

Apr 24, 2025

Changes in this version

+ type FlowCache struct

+ func NewFlowCache(activeTimeout time.Duration, maxFlows int, outFlows chan pb.Flow) *FlowCache

+ func (c *FlowCache) CacheFlow(ctx context.Context, flow pb.Flow) error

+ func (c *FlowCache) Close() error

+ func (c *FlowCache) Run(ctx context.Context, logger *zap.Logger) error

Apr 18, 2025

Changes in this version

type EnvironmentConfig

+ PodNamespace string

+ StreamSuccessPeriod StreamSuccessPeriod

type KeepalivePeriods

+ Configuration time.Duration

type ResourceManager

+ func (r *ResourceManager) WatchK8sResources(ctx context.Context, cancel context.CancelFunc, resource string, ...)

+ type StreamSuccessPeriod struct

+ Auth time.Duration

+ Connect time.Duration

Apr 3, 2025

Changes in this version

+ const STREAM_CONFIGURATION

+ const STREAM_LOGS

+ const STREAM_NETWORK_FLOWS

+ const STREAM_RESOURCES

+ var ErrFalcoTimestamp = errors.New("incomplete or incorrectly formatted timestamp found in Falco flow")

+ type Action func() error

type EnvironmentConfig

+ KeepalivePeriods KeepalivePeriods

type FalcoEvent

+ Timestamp *timestamppb.Timestamp

+ type KeepalivePeriods struct

+ KubernetesNetworkFlows time.Duration

+ KubernetesResources time.Duration

+ Logs time.Duration

type ResourceManager

+ func (r *ResourceManager) DynamicListAndWatchResources(ctx context.Context, cancel context.CancelFunc, resource string, ...)

+ type StreamType string

Mar 4, 2025

Changes in this version

+ func NewGRPCLogger(grpcSyncer *BufferedGrpcWriteSyncer, addCaller bool, clock zapcore.Clock) *zap.Logger

+ func NewProductionGRPCLogger(grpcSyncer *BufferedGrpcWriteSyncer) *zap.Logger

Feb 24, 2025

Changes in this version

+ const ONBOARDING_CLIENT_ID

+ const ONBOARDING_CLIENT_SECRET

+ var ErrCredentialNotFoundInK8sSecret error = &credentialNotFoundInK8sSecretError

+ func NewCredentialNotFoundInK8sSecretError(requiredField onboardingCredentialRequiredField) error

Feb 18, 2025

Changes in this version

+ var ErrFalcoIncompleteL3Flow = errors.New("ignoring incomplete falco l3 network flow")

+ var ErrFalcoIncompleteL4Flow = errors.New("ignoring incomplete falco l4 network flow")

+ var ErrFalcoInvalidPort = errors.New("ignoring incomplete falco flow due to bad ports")

Jan 2, 2025

Changes in this version

type FalcoEvent

+ Time string

Dec 11, 2024

Changes in this version

+ var ErrFalcoEventIsNotFlow = errors.New("ignoring falco event, not a network flow")

+ func GetTLSConfig(skipVerify bool) *tls.Config

+ func GetTokenSource(ctx context.Context, config clientcredentials.Config, tlsConfig *tls.Config) oauth2.TokenSource

+ func NewFalcoEventHandler(eventChan chan<- string) http.HandlerFunc

+ func ParseToken(tokenString string) (jwt.MapClaims, error)

+ type FalcoEvent struct

+ DstIP string

+ DstPort string

+ IpVersion string

+ Proto string

+ SrcIP string

+ SrcPort string

type ResourceManager

+ func (r *ResourceManager) ExtractObjectMetas(resources *unstructured.UnstructuredList) ([]metav1.ObjectMeta, error)

+ func (r *ResourceManager) FetchResources(ctx context.Context, resource schema.GroupVersionResource, namespace string) (*unstructured.UnstructuredList, error)

+ func (r *ResourceManager) ListResources(ctx context.Context, resource schema.GroupVersionResource, namespace string) ([]metav1.ObjectMeta, string, error)

Oct 10, 2024

Changes in this version

+ var ErrHubbleNotFound = errors.New("hubble Relay service not found; disabling Cilium flow collection")

+ var ErrNoPortsAvailable = errors.New("hubble Relay service has no ports; disabling Cilium flow collection")

+ var ErrStopRetries = errors.New("stop retries")

+ func ConnectStreams(ctx context.Context, logger *zap.SugaredLogger, envMap EnvironmentConfig, ...)

+ func NewAuthenticatedConnection(ctx context.Context, logger *zap.SugaredLogger, envMap EnvironmentConfig) (*grpc.ClientConn, pb.KubernetesInfoServiceClient, error)

+ type Authenticator struct

+ Logger *zap.SugaredLogger

+ func (authn *Authenticator) DoesK8sSecretExist(ctx context.Context, secretName string) bool

+ func (authn *Authenticator) GetOnboardingCredentials(ctx context.Context, clientID string, clientSecret string) (Credentials, error)

+ func (authn *Authenticator) ReadCredentialsK8sSecrets(ctx context.Context, secretName string) (string, string, error)

+ func (authn *Authenticator) WriteK8sSecret(ctx context.Context, keyData OnboardResponse, ClusterCreds string) error

+ type Cache struct

type OnboardResponse

+ func Onboard(ctx context.Context, TlsSkipVerify bool, OnboardingEndpoint string, ...) (OnboardResponse, error)

Sep 26, 2024

Changes in this version

+ type CiliumFlowCollector struct

type EnvironmentConfig

+ CiliumNamespace string

Sep 11, 2024

Changes in this version

+ func NewGRPClogger(grpcSyncer *BufferedGrpcWriteSyncer) *zap.SugaredLogger

+ func NewStreams(ctx context.Context, logger *zap.SugaredLogger, conn *grpc.ClientConn) (*streamManager, error)

+ type BufferedGrpcWriteSyncer struct

+ func NewBufferedGrpcWriteSyncer() *BufferedGrpcWriteSyncer

+ func (b *BufferedGrpcWriteSyncer) Close() error

+ func (b *BufferedGrpcWriteSyncer) ListenToLogStream()

+ func (b *BufferedGrpcWriteSyncer) UpdateClient(client pb.KubernetesInfoService_SendLogsClient, conn ClientConnInterface)

+ type ClientConnInterface interface

+ Close func() error

+ GetState func() connectivity.State

Sep 6, 2024

Changes in this version

+ func ExponentialStreamConnect(ctx context.Context, logger *zap.SugaredLogger, envMap EnvironmentConfig)

+ func GetClusterID(ctx context.Context, logger *zap.SugaredLogger) (string, error)

+ func IsRunningInCluster() bool

+ func NewClientSet() (*kubernetes.Clientset, error)

+ func NewStream(ctx context.Context, logger *zap.SugaredLogger, conn *grpc.ClientConn) (*streamManager, error)

+ func ServerIsHealthy() bool

+ func SetUpOAuthConnection(ctx context.Context, logger *zap.SugaredLogger, tokenURL string, ...) (*grpc.ClientConn, error)

+ type CacheManager struct

+ type Credentials struct

+ ClientID string

+ ClientSecret string

+ type CredentialsManager struct

+ Credentials Credentials

+ Logger *zap.SugaredLogger

+ func (am *CredentialsManager) Onboard(ctx context.Context, TlsSkipVerify bool, OnboardingEndpoint string) (OnboardResponse, error)

+ type EnvironmentConfig struct

+ ClusterCreds string

+ OnboardingClientId string

+ OnboardingClientSecret string

+ OnboardingEndpoint string

+ TlsSkipVerify bool

+ TokenEndpoint string

+ type OnboardResponse struct

+ ClusterClientId string

+ ClusterClientSecret string

+ type ResourceManager struct

+ func (r *ResourceManager) DyanmicListAndWatchResources(ctx context.Context, cancel context.CancelFunc, resource string, ...)

+ func (r *ResourceManager) DynamicListResources(ctx context.Context, resource string) (string, CacheManager, error)

+ type SecretManager struct

+ Logger *zap.SugaredLogger

+ func (sm *SecretManager) DoesK8sSecretExist(ctx context.Context, secretName string) bool

+ func (sm *SecretManager) GetOnboardingCredentials(ctx context.Context, clientID string, clientSecret string) (Credentials, error)

+ func (sm *SecretManager) ReadCredentialsK8sSecrets(ctx context.Context, secretName string) (string, string, error)

+ func (sm *SecretManager) WriteK8sSecret(ctx context.Context, keyData OnboardResponse, ClusterCreds string) error