diff --git a/cmd/scan/scan.go b/cmd/scan/scan.go index 9c67c42c..76e0d5e9 100644 --- a/cmd/scan/scan.go +++ b/cmd/scan/scan.go @@ -117,6 +117,7 @@ func GetScanCommand(ks meta.IKubescape) *cobra.Command { scanCmd.AddCommand(getControlCmd(ks, &scanInfo)) scanCmd.AddCommand(getFrameworkCmd(ks, &scanInfo)) + scanCmd.AddCommand(getWorkloadCmd(ks, &scanInfo)) return scanCmd } diff --git a/cmd/scan/workload.go b/cmd/scan/workload.go new file mode 100644 index 00000000..313858ec --- /dev/null +++ b/cmd/scan/workload.go @@ -0,0 +1,75 @@ +package scan + +import ( + "context" + "fmt" + "strings" + + logger "github.com/kubescape/go-logger" + "github.com/kubescape/kubescape/v2/core/cautils" + "github.com/kubescape/kubescape/v2/core/meta" + + "github.com/spf13/cobra" +) + +var ( + workloadExample = fmt.Sprintf(` + # Scan an workload + %[1]s scan workload / + + # Scan an workload in a specific namespace + %[1]s scan workload / --namespace + + # Scan an workload from a file path + %[1]s scan workload / --file-path + + # Scan an workload from a helm-chart template + %[1]s scan workload / --chart-path + + +`, cautils.ExecName()) +) + +var namespace string + +// controlCmd represents the control command +func getWorkloadCmd(ks meta.IKubescape, scanInfo *cautils.ScanInfo) *cobra.Command { + workloadCmd := &cobra.Command{ + Use: "workload / [``/`-`] [flags]", + Short: fmt.Sprint("The workload you wish to scan"), + Example: workloadExample, + Args: func(cmd *cobra.Command, args []string) error { + if len(args) != 1 { + return fmt.Errorf("usage: /") + } + + wlIdentifier := strings.Split(args[0], "/") + if len(wlIdentifier) != 2 || wlIdentifier[0] == "" || wlIdentifier[1] == "" { + return fmt.Errorf("usage: /") + } + + return nil + }, + RunE: func(cmd *cobra.Command, args []string) error { + var wlIdentifier string + + if namespace != "" { + wlIdentifier = fmt.Sprintf("%s/", namespace) + } + wlIdentifier += args[0] + + scanInfo.WorkloadIdentifier = wlIdentifier + + ctx := context.TODO() + _, err := ks.Scan(ctx, scanInfo) + if err != nil { + logger.L().Fatal(err.Error()) + } + + return nil + }, + } + workloadCmd.PersistentFlags().StringVarP(&namespace, "namespace", "n", "", "Namespace of the workload. Default will be empty.") + + return workloadCmd +} diff --git a/core/cautils/scaninfo.go b/core/cautils/scaninfo.go index def1ef1d..e1d7a9dd 100644 --- a/core/cautils/scaninfo.go +++ b/core/cautils/scaninfo.go @@ -133,6 +133,7 @@ type ScanInfo struct { ScanAll bool // true if scan all frameworks OmitRawResources bool // true if omit raw resources from the output PrintAttackTree bool // true if print attack tree + WorkloadIdentifier string // workload identifier for workload scan } type Getters struct {