controller

type Misconfiguration ¶

type Misconfiguration struct {
	// contains filtered or unexported fields
}

type NodeCollectorJobController ¶

type NodeCollectorJobController struct {
	logr.Logger
	etc.Config
	kube.ObjectResolver
	kube.LogsReader
	vuloperator.ConfigData
	vuloperator.PluginContext
	configauditreport.PluginInMemory
	InfraReadWriter infraassessment.ReadWriter
	vuloperator.BuildInfo
}

NodeCollectorJobController watches Kubernetes jobs generates v1alpha1.ClusterInfraAssessmentReport instances using infra assessment scanner

func (r *NodeCollectorJobController) SetupWithManager(mgr ctrl.Manager) error

type NodeReconciler ¶

type NodeReconciler struct {
	logr.Logger
	etc.Config
	vuloperator.ConfigData
	kube.ObjectResolver
	vuloperator.PluginContext
	configauditreport.PluginInMemory
	jobs.LimitChecker
	InfraReadWriter  infraassessment.ReadWriter
	CacheSyncTimeout time.Duration
	vuloperator.BuildInfo
}

NodeReconciler reconciles corev1.Node and corev1.Job objects

to collect cluster nodes information (fileSystem permission and process arguments) the node information will be evaluated by the complaince control checks per relevant reports, examples: cis-benchmark and nsa

func (r *NodeReconciler) SetupWithManager(mgr ctrl.Manager) error

type PolicyConfigController ¶

type PolicyConfigController struct {
	logr.Logger
	etc.Config
	kube.ObjectResolver
	vuloperator.PluginContext
	configauditreport.PluginInMemory
	ClusterVersion string
}

PolicyConfigController watches changes on policies config map and generates v1alpha1.ConfigAuditReport instances based on OPA Rego policies as fast as possible.

func (r *PolicyConfigController) SetupWithManager(mgr ctrl.Manager) error

type ResourceController ¶

type ResourceController struct {
	logr.Logger
	etc.Config
	vuloperator.ConfigData
	kube.ObjectResolver
	vuloperator.PluginContext
	configauditreport.PluginInMemory
	configauditreport.ReadWriter
	RbacReadWriter  rbacassessment.ReadWriter
	InfraReadWriter infraassessment.ReadWriter
	vuloperator.BuildInfo
	ClusterVersion   string
	CacheSyncTimeout time.Duration
}

ResourceController watches all Kubernetes kinds and generates v1alpha1.ConfigAuditReport instances based on OPA Rego policies as fast as possible.

func (r *ResourceController) SetupWithManager(mgr ctrl.Manager) error