Directories
¶
| Path | Synopsis |
|---|---|
|
Package alerts evaluates operator-defined rules against osquery log traffic and node state, and dispatches notifications through configured channels (email, webhooks, …).
|
Package alerts evaluates operator-defined rules against osquery log traffic and node state, and dispatches notifications through configured channels (email, webhooks, …). |
|
Package auth defines the provider-agnostic federated-identity surface for osctrl-api.
|
Package auth defines the provider-agnostic federated-identity surface for osctrl-api. |
|
oidc
Package oidc is the OpenID Connect (RFC 6749 + OIDC Core 1.0) implementation of the auth.Provider interface defined in pkg/auth.
|
Package oidc is the OpenID Connect (RFC 6749 + OIDC Core 1.0) implementation of the auth.Provider interface defined in pkg/auth. |
|
saml
Package saml is the SAML 2.0 Web Browser SSO Profile implementation of the auth.Provider interface defined in pkg/auth.
|
Package saml is the SAML 2.0 Web Browser SSO Profile implementation of the auth.Provider interface defined in pkg/auth. |
|
Package authproviders persists federated authentication provider configurations (OIDC, SAML) to the database.
|
Package authproviders persists federated authentication provider configurations (OIDC, SAML) to the database. |
|
Package logsinks persists per-environment osquery log sink configurations to the database.
|
Package logsinks persists per-environment osquery log sink configurations to the database. |
|
Package mcp exposes osctrl's read surface to Model Context Protocol clients, so an LLM agent can inspect a fleet — nodes, environments, query results, and the osquery schema — without being handed the raw REST API.
|
Package mcp exposes osctrl's read surface to Model Context Protocol clients, so an LLM agent can inspect a fleet — nodes, environments, query results, and the osquery schema — without being handed the raw REST API. |
|
Package mfa implements the second authentication factor for password (`db`) logins: TOTP authenticator apps, WebAuthn credentials (passkeys and hardware security keys) and single-use recovery codes.
|
Package mfa implements the second authentication factor for password (`db`) logins: TOTP authenticator apps, WebAuthn credentials (passkeys and hardware security keys) and single-use recovery codes. |
|
Package osquery provides shared helpers for working with the osquery schema.
|
Package osquery provides shared helpers for working with the osquery schema. |
|
Package ratelimit provides a small token-bucket rate-limit middleware used to protect anonymous attack surfaces (login, enroll) from brute-force / password-spray.
|
Package ratelimit provides a small token-bucket rate-limit middleware used to protect anonymous attack surfaces (login, enroll) from brute-force / password-spray. |
|
Package servicecommands stores small, allowlisted service control requests.
|
Package servicecommands stores small, allowlisted service control requests. |
|
Package serviceconfig persists the structured YAML configuration sections (logger, carver, SAML, OIDC, metrics, TLS, etc.) per service into the database.
|
Package serviceconfig persists the structured YAML configuration sections (logger, carver, SAML, OIDC, metrics, TLS, etc.) per service into the database. |
Click to show internal directories.
Click to hide internal directories.