mirror of
https://github.com/k8sgpt-ai/k8sgpt.git
synced 2025-08-23 09:58:21 +00:00
ec08cac214
* feat: add GatewayClass analyser Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * chore: add a valid GW class object Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * feat: add gw analyzer and switch to controller-runtime client Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * chore: add unit tests for gw analyser Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * chore: replace constants with condition status Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * feat: add httproute analyzer Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * feat: add HTTPRoute individual tests. Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> * docs: add analyzers Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> --------- Signed-off-by: Aris Boutselis <arisboutselis08@gmail.com> Signed-off-by: Aris Boutselis <aris.boutselis@senseon.io> Co-authored-by: Aris Boutselis <arisboutselis08@gmail.com>
87 lines
2.6 KiB
Go
87 lines
2.6 KiB
Go
/*
|
|
Copyright 2023 The K8sGPT Authors.
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package common
|
|
|
|
import (
|
|
"context"
|
|
|
|
trivy "github.com/aquasecurity/trivy-operator/pkg/apis/aquasecurity/v1alpha1"
|
|
openapi_v2 "github.com/google/gnostic/openapiv2"
|
|
"github.com/k8sgpt-ai/k8sgpt/pkg/ai"
|
|
"github.com/k8sgpt-ai/k8sgpt/pkg/kubernetes"
|
|
regv1 "k8s.io/api/admissionregistration/v1"
|
|
appsv1 "k8s.io/api/apps/v1"
|
|
autov1 "k8s.io/api/autoscaling/v1"
|
|
v1 "k8s.io/api/core/v1"
|
|
networkv1 "k8s.io/api/networking/v1"
|
|
policyv1 "k8s.io/api/policy/v1"
|
|
gtwapi "sigs.k8s.io/gateway-api/apis/v1"
|
|
)
|
|
|
|
type IAnalyzer interface {
|
|
Analyze(analysis Analyzer) ([]Result, error)
|
|
}
|
|
|
|
type Analyzer struct {
|
|
Client *kubernetes.Client
|
|
Context context.Context
|
|
Namespace string
|
|
AIClient ai.IAI
|
|
PreAnalysis map[string]PreAnalysis
|
|
Results []Result
|
|
OpenapiSchema *openapi_v2.Document
|
|
}
|
|
|
|
type PreAnalysis struct {
|
|
Pod v1.Pod
|
|
FailureDetails []Failure
|
|
Deployment appsv1.Deployment
|
|
ReplicaSet appsv1.ReplicaSet
|
|
PersistentVolumeClaim v1.PersistentVolumeClaim
|
|
Endpoint v1.Endpoints
|
|
Ingress networkv1.Ingress
|
|
HorizontalPodAutoscalers autov1.HorizontalPodAutoscaler
|
|
PodDisruptionBudget policyv1.PodDisruptionBudget
|
|
StatefulSet appsv1.StatefulSet
|
|
NetworkPolicy networkv1.NetworkPolicy
|
|
Node v1.Node
|
|
ValidatingWebhook regv1.ValidatingWebhookConfiguration
|
|
MutatingWebhook regv1.MutatingWebhookConfiguration
|
|
GatewayClass gtwapi.GatewayClass
|
|
Gateway gtwapi.Gateway
|
|
HTTPRoute gtwapi.HTTPRoute
|
|
// Integrations
|
|
TrivyVulnerabilityReport trivy.VulnerabilityReport
|
|
TrivyConfigAuditReport trivy.ConfigAuditReport
|
|
}
|
|
|
|
type Result struct {
|
|
Kind string `json:"kind"`
|
|
Name string `json:"name"`
|
|
Error []Failure `json:"error"`
|
|
Details string `json:"details"`
|
|
ParentObject string `json:"parentObject"`
|
|
}
|
|
|
|
type Failure struct {
|
|
Text string
|
|
KubernetesDoc string
|
|
Sensitive []Sensitive
|
|
}
|
|
|
|
type Sensitive struct {
|
|
Unmasked string
|
|
Masked string
|
|
}
|