-
Notifications
You must be signed in to change notification settings - Fork 197
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: chenk <hen.keinan@gmail.com>
- Loading branch information
1 parent
60a5611
commit 78cc55c
Showing
9 changed files
with
236 additions
and
13 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,118 @@ | ||
| package cmd | ||
|
|
||
| import ( | ||
| "context" | ||
| "fmt" | ||
| "github.com/aquasecurity/starboard/pkg/apis/aquasecurity/v1alpha1" | ||
| "github.com/aquasecurity/starboard/pkg/compliance" | ||
| "github.com/aquasecurity/starboard/pkg/starboard" | ||
| "github.com/spf13/cobra" | ||
| "io" | ||
| "k8s.io/apimachinery/pkg/api/errors" | ||
| "k8s.io/apimachinery/pkg/types" | ||
| "k8s.io/cli-runtime/pkg/genericclioptions" | ||
| ctrl "sigs.k8s.io/controller-runtime" | ||
| "sigs.k8s.io/controller-runtime/pkg/client" | ||
| "strconv" | ||
| ) | ||
|
|
||
| func NewGetClusterComplianceReportsCmd(executable string, cf *genericclioptions.ConfigFlags, out io.Writer) *cobra.Command { | ||
| cmd := &cobra.Command{ | ||
| Use: "clustercompliancereports (NAME)", | ||
| Aliases: []string{"clustercompliance"}, | ||
| Short: "Get cluster compliance reports", | ||
| Long: `Get cluster compliance report for pre-define spec`, | ||
| Example: fmt.Sprintf(` | ||
| # Get cluster compliance report for specifc spec in JSON output format | ||
| %[1]s get clustercompliancereports nsa -o json | ||
| # Get compliance detail report for control checks failure in JSON output format | ||
| %[1]s get clustercompliancereports nsa -o json --detail`, executable), | ||
| RunE: func(cmd *cobra.Command, args []string) error { | ||
| //init client dependencies | ||
| logger := ctrl.Log.WithName("reconciler").WithName("clustercompliancereport") | ||
| ctx := context.Background() | ||
| scheme := starboard.NewScheme() | ||
| kubeConfig, err := cf.ToRESTConfig() | ||
| if err != nil { | ||
| return fmt.Errorf("failed to create kubeConfig: %w", err) | ||
| } | ||
| // create k8s client | ||
| kubeClient, err := client.New(kubeConfig, client.Options{Scheme: scheme}) | ||
| if err != nil { | ||
| return fmt.Errorf("failed to create kubernetes client: %w", err) | ||
| } | ||
| namespaceName, err := ComplianceNameFromArgs(args) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| // check report if report with spec exist | ||
| var report v1alpha1.ClusterComplianceReport | ||
| err = GetComplianceReport(ctx, kubeClient, namespaceName, out, &report) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| // generate compliance and compliance failure detail reports | ||
| complianceMgr := compliance.NewMgr(kubeClient, logger) | ||
| err = complianceMgr.GenerateComplianceReport(ctx, report.Spec) | ||
| if err != nil { | ||
| return fmt.Errorf("failed to generate report: %w", err) | ||
| } | ||
|
|
||
| format := cmd.Flag("output").Value.String() | ||
| printer, err := genericclioptions.NewPrintFlags(""). | ||
| WithTypeSetter(scheme). | ||
| WithDefaultOutput(format). | ||
| ToPrinter() | ||
| if err != nil { | ||
| return fmt.Errorf("faild to create printer: %w", err) | ||
| } | ||
| // check report detail flag has been set | ||
| detailString := cmd.Flag("detail").Value.String() | ||
| detail, err := strconv.ParseBool(detailString) | ||
| if err != nil { | ||
| detail = false | ||
| } | ||
| if !detail { | ||
| // print cluster compliance report | ||
| var complianceReport v1alpha1.ClusterComplianceReport | ||
| err := GetComplianceReport(ctx, kubeClient, namespaceName, out, &complianceReport) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if err := printer.PrintObj(&complianceReport, out); err != nil { | ||
| return fmt.Errorf("print compliance reports: %w", err) | ||
| } | ||
| return nil | ||
| } | ||
| // print cluster compliance failure detail report | ||
| detailNamespaceName, err := ComplianceNameFromArgs(args, "details") | ||
| if err != nil { | ||
| return err | ||
| } | ||
| var complianceDetailReport v1alpha1.ClusterComplianceDetailReport | ||
| err = GetComplianceReport(ctx, kubeClient, detailNamespaceName, out, &complianceDetailReport) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if err := printer.PrintObj(&complianceDetailReport, out); err != nil { | ||
| return fmt.Errorf("print compliance reports: %w", err) | ||
| } | ||
| return nil | ||
| }, | ||
| } | ||
| cmd.PersistentFlags().BoolP("detail", "d", false, "Get compliance detail report for control checks failure") | ||
| return cmd | ||
| } | ||
|
|
||
| func GetComplianceReport(ctx context.Context, client client.Client, namespaceName types.NamespacedName, out io.Writer, report client.Object) error { | ||
| err := client.Get(ctx, namespaceName, report) | ||
| if err != nil { | ||
| if errors.IsNotFound(err) { | ||
| fmt.Fprintf(out, "No complaince reports found with name: %s .\n", namespaceName.Name) | ||
| return err | ||
| } | ||
| return fmt.Errorf("failed getting report: %w", err) | ||
| } | ||
| return nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters