mirror of
https://github.com/kubescape/kubescape.git
synced 2026-03-29 06:49:42 +00:00
92449bf564
* adding corrections to cmd Signed-off-by: David Wertenteil <dwertent@armosec.io> * remove decorative line Signed-off-by: David Wertenteil <dwertent@armosec.io> * wip: changed results indicator Signed-off-by: David Wertenteil <dwertent@armosec.io> * replace status test with icons Signed-off-by: David Wertenteil <dwertent@armosec.io> * print workloads in a different line Signed-off-by: David Wertenteil <dwertent@armosec.io> * update display Signed-off-by: David Wertenteil <dwertent@armosec.io> * deprecate commands Signed-off-by: David Wertenteil <dwertent@armosec.io> * removed unused functions Signed-off-by: David Wertenteil <dwertent@armosec.io> * fixed tests Signed-off-by: David Wertenteil <dwertent@armosec.io> * update cloud provider detection Signed-off-by: David Wertenteil <dwertent@armosec.io> * rename column name Signed-off-by: David Wertenteil <dwertent@armosec.io> --------- Signed-off-by: David Wertenteil <dwertent@armosec.io>
79 lines
3.3 KiB
Go
79 lines
3.3 KiB
Go
package resourcehandler
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
logger "github.com/kubescape/go-logger"
|
|
"github.com/kubescape/go-logger/helpers"
|
|
cloudsupportv1 "github.com/kubescape/k8s-interface/cloudsupport/v1"
|
|
"github.com/kubescape/k8s-interface/k8sinterface"
|
|
"github.com/kubescape/kubescape/v2/core/cautils"
|
|
"github.com/kubescape/kubescape/v2/core/pkg/opaprocessor"
|
|
"github.com/kubescape/opa-utils/reporthandling/apis"
|
|
helpersv1 "github.com/kubescape/opa-utils/reporthandling/helpers/v1"
|
|
reportv2 "github.com/kubescape/opa-utils/reporthandling/v2"
|
|
"go.opentelemetry.io/otel"
|
|
)
|
|
|
|
func CollectResources(ctx context.Context, rsrcHandler IResourceHandler, policyIdentifier []cautils.PolicyIdentifier, opaSessionObj *cautils.OPASessionObj, progressListener opaprocessor.IJobProgressNotificationClient, scanInfo *cautils.ScanInfo) error {
|
|
ctx, span := otel.Tracer("").Start(ctx, "resourcehandler.CollectResources")
|
|
defer span.End()
|
|
opaSessionObj.Report.ClusterAPIServerInfo = rsrcHandler.GetClusterAPIServerInfo(ctx)
|
|
|
|
// set cloud metadata only when scanning a cluster
|
|
if opaSessionObj.Metadata.ScanMetadata.ScanningTarget == reportv2.Cluster {
|
|
setCloudMetadata(opaSessionObj)
|
|
}
|
|
|
|
resourcesMap, allResources, externalResources, excludedRulesMap, err := rsrcHandler.GetResources(ctx, opaSessionObj, progressListener, scanInfo)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
opaSessionObj.K8SResources = resourcesMap
|
|
opaSessionObj.AllResources = allResources
|
|
opaSessionObj.ExternalResources = externalResources
|
|
opaSessionObj.ExcludedRules = excludedRulesMap
|
|
|
|
if (opaSessionObj.K8SResources == nil || len(opaSessionObj.K8SResources) == 0) && (opaSessionObj.ExternalResources == nil || len(opaSessionObj.ExternalResources) == 0) {
|
|
return fmt.Errorf("empty list of resources")
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func setCloudMetadata(opaSessionObj *cautils.OPASessionObj) {
|
|
iCloudMetadata := getCloudMetadata(opaSessionObj)
|
|
if iCloudMetadata == nil {
|
|
return
|
|
}
|
|
cloudMetadata := reportv2.NewCloudMetadata(iCloudMetadata)
|
|
if opaSessionObj.Metadata.ContextMetadata.ClusterContextMetadata == nil {
|
|
opaSessionObj.Metadata.ContextMetadata.ClusterContextMetadata = &reportv2.ClusterMetadata{}
|
|
}
|
|
opaSessionObj.Metadata.ContextMetadata.ClusterContextMetadata.CloudMetadata = cloudMetadata
|
|
opaSessionObj.Metadata.ClusterMetadata.CloudMetadata = cloudMetadata // deprecated - fallback
|
|
opaSessionObj.Report.ClusterCloudProvider = iCloudMetadata.Provider().ToString() // deprecated - fallback
|
|
|
|
logger.L().Debug("Cloud metadata", helpers.String("provider", iCloudMetadata.Provider().ToString()), helpers.String("name", iCloudMetadata.GetName()))
|
|
}
|
|
|
|
// getCloudMetadata - get cloud metadata from kubeconfig or API server
|
|
// There are 3 options:
|
|
// 1. Get cloud provider from API server git version (EKS, GKE)
|
|
// 2. Get cloud provider from kubeconfig by parsing the cluster context (EKS, GKE)
|
|
// 3. Get cloud provider from kubeconfig by parsing the server URL (AKS)
|
|
func getCloudMetadata(opaSessionObj *cautils.OPASessionObj) apis.ICloudParser {
|
|
switch cloudsupportv1.GetCloudProvider() {
|
|
case cloudsupportv1.AKS:
|
|
return helpersv1.NewAKSMetadata(k8sinterface.GetContextName())
|
|
case cloudsupportv1.EKS:
|
|
return helpersv1.NewEKSMetadata(k8sinterface.GetContextName())
|
|
case cloudsupportv1.GKE:
|
|
return helpersv1.NewGKEMetadata(k8sinterface.GetContextName())
|
|
default:
|
|
return nil
|
|
}
|
|
}
|