mirror of
https://github.com/k8sgpt-ai/k8sgpt.git
synced 2025-05-31 19:15:10 +00:00
06e8532f88
* feat: add Validating/Mutating webhook analyzer Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> * change conditions Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> * fix: use GetClient to get pods and mask pod name Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> * fix: add new cases in util.GetParent Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> * feat: implements webhooks Signed-off-by: Alex Jones <alexsimonjones@gmail.com> * feat: implements webhooks Signed-off-by: Alex Jones <alexsimonjones@gmail.com> * feat: implements webhooks Signed-off-by: Alex Jones <alexsimonjones@gmail.com> * feat: implements webhooks Signed-off-by: Alex Jones <alexsimonjones@gmail.com> --------- Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> Signed-off-by: Alex Jones <alexsimonjones@gmail.com> Co-authored-by: Rakshit Gondwal <rakshitgondwal3@gmail.com> Co-authored-by: Aris Boutselis <aris.boutselis@senseon.io>
82 lines
2.4 KiB
Go
82 lines
2.4 KiB
Go
/*
|
|
Copyright 2023 The K8sGPT Authors.
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package common
|
|
|
|
import (
|
|
"context"
|
|
|
|
trivy "github.com/aquasecurity/trivy-operator/pkg/apis/aquasecurity/v1alpha1"
|
|
openapi_v2 "github.com/google/gnostic/openapiv2"
|
|
"github.com/k8sgpt-ai/k8sgpt/pkg/ai"
|
|
"github.com/k8sgpt-ai/k8sgpt/pkg/kubernetes"
|
|
regv1 "k8s.io/api/admissionregistration/v1"
|
|
appsv1 "k8s.io/api/apps/v1"
|
|
autov1 "k8s.io/api/autoscaling/v1"
|
|
v1 "k8s.io/api/core/v1"
|
|
networkv1 "k8s.io/api/networking/v1"
|
|
policyv1 "k8s.io/api/policy/v1"
|
|
)
|
|
|
|
type IAnalyzer interface {
|
|
Analyze(analysis Analyzer) ([]Result, error)
|
|
}
|
|
|
|
type Analyzer struct {
|
|
Client *kubernetes.Client
|
|
Context context.Context
|
|
Namespace string
|
|
AIClient ai.IAI
|
|
PreAnalysis map[string]PreAnalysis
|
|
Results []Result
|
|
OpenapiSchema *openapi_v2.Document
|
|
}
|
|
|
|
type PreAnalysis struct {
|
|
Pod v1.Pod
|
|
FailureDetails []Failure
|
|
Deployment appsv1.Deployment
|
|
ReplicaSet appsv1.ReplicaSet
|
|
PersistentVolumeClaim v1.PersistentVolumeClaim
|
|
Endpoint v1.Endpoints
|
|
Ingress networkv1.Ingress
|
|
HorizontalPodAutoscalers autov1.HorizontalPodAutoscaler
|
|
PodDisruptionBudget policyv1.PodDisruptionBudget
|
|
StatefulSet appsv1.StatefulSet
|
|
NetworkPolicy networkv1.NetworkPolicy
|
|
Node v1.Node
|
|
ValidatingWebhook regv1.ValidatingWebhookConfiguration
|
|
MutatingWebhook regv1.MutatingWebhookConfiguration
|
|
// Integrations
|
|
TrivyVulnerabilityReport trivy.VulnerabilityReport
|
|
}
|
|
|
|
type Result struct {
|
|
Kind string `json:"kind"`
|
|
Name string `json:"name"`
|
|
Error []Failure `json:"error"`
|
|
Details string `json:"details"`
|
|
ParentObject string `json:"parentObject"`
|
|
}
|
|
|
|
type Failure struct {
|
|
Text string
|
|
KubernetesDoc string
|
|
Sensitive []Sensitive
|
|
}
|
|
|
|
type Sensitive struct {
|
|
Unmasked string
|
|
Masked string
|
|
}
|