Bobby Brennan e4dd53d1c0 Add audit mode to CLI
Add option to send audit results to a remote host

add audit flag to print results to stdout

add comments

make comments more consistent

move audit test

fix fullaudit_test

add test instructions to README

update audit test

simplify stdout output

update comment

fix import

run audit by default
2019-04-03 18:58:00 +00:00
2019-04-01 13:24:44 -07:00
2019-03-27 22:57:01 -04:00
2019-04-03 18:58:00 +00:00
2019-03-27 23:09:25 -04:00
2019-02-13 14:33:47 -08:00
2019-02-08 11:02:31 -08:00
2018-12-21 15:21:21 -05:00
2019-01-26 16:40:32 -08:00
2019-03-27 22:57:01 -04:00
2019-03-14 20:17:44 +00:00
2019-02-08 11:02:31 -08:00
2019-04-03 18:58:00 +00:00
2019-04-03 18:58:00 +00:00

Build locally

git clone https://github.com/reactiveops/fairwinds $GOPATH/src/github.com/reactiveops/fairwinds
go build -a -o fairwinds *.go
./fairwinds -h

Run on-cluster

On GKE, you'll need to run the following command first:

kubectl create clusterrolebinding cluster-admin-binding \
  --clusterrole cluster-admin \
  --user $(gcloud config get-value account)

Then apply the config:

kubectl apply -f deploy/all.yaml

Options

  • dashboard Runs the webserver for Fairwinds dashboard.
  • dashboard-port: Port for the dashboard webserver (default 8080)
  • webhook: Runs the webhook webserver.
  • webhook-port: Port for the webhook webserver (default 9876)
  • disable-webhook-config-installer: disable the installer in the webhook server, so it won't install webhook configuration resources during bootstrapping
  • kubeconfig: Paths to a kubeconfig. Only required if out-of-cluster.
  • master: The address of the Kubernetes API server. Overrides any value in kubeconfig. Only required if out-of-cluster.

Helm Deploy Option

  • Create release with Helm:
helm upgrade --install fairwinds charts/fairwinds/ --namespace fairwinds --recreate-pods
kubectl port-forward --namespace fairwinds svc/fairwinds-fairwinds-dashboard 8080:80 &
open http://localhost:8080

Run tests

go list ./ | grep -v vendor | xargs golint -set_exit_status
go list ./ | grep -v vendor | xargs go vet
go test ./pkg/... -v -coverprofile cover.out
Description
Validation of best practices in your Kubernetes clusters
Readme Apache-2.0 59 MiB
Languages
Go 93.5%
CSS 3.1%
Shell 2.4%
JavaScript 0.7%
Dockerfile 0.3%