/AWS1/CL_GDYKUBERNETESWORKLO00¶
Details about the Kubernetes workload involved in a Kubernetes finding.
CONSTRUCTOR
¶
IMPORTING¶
Optional arguments:¶
iv_name
TYPE /AWS1/GDYSTRING
/AWS1/GDYSTRING
¶
Kubernetes workload name.
iv_type
TYPE /AWS1/GDYSTRING
/AWS1/GDYSTRING
¶
Kubernetes workload type (e.g. Pod, Deployment, etc.).
iv_uid
TYPE /AWS1/GDYSTRING
/AWS1/GDYSTRING
¶
Kubernetes workload ID.
iv_namespace
TYPE /AWS1/GDYSTRING
/AWS1/GDYSTRING
¶
Kubernetes namespace that the workload is part of.
iv_hostnetwork
TYPE /AWS1/GDYBOOLEAN
/AWS1/GDYBOOLEAN
¶
Whether the hostNetwork flag is enabled for the pods included in the workload.
it_containers
TYPE /AWS1/CL_GDYCONTAINER=>TT_CONTAINERS
TT_CONTAINERS
¶
Containers running as part of the Kubernetes workload.
it_volumes
TYPE /AWS1/CL_GDYVOLUME=>TT_VOLUMES
TT_VOLUMES
¶
Volumes used by the Kubernetes workload.
iv_serviceaccountname
TYPE /AWS1/GDYSTRING
/AWS1/GDYSTRING
¶
The service account name that is associated with a Kubernetes workload.
iv_hostipc
TYPE /AWS1/GDYBOOLEAN
/AWS1/GDYBOOLEAN
¶
Whether the host IPC flag is enabled for the pods in the workload.
iv_hostpid
TYPE /AWS1/GDYBOOLEAN
/AWS1/GDYBOOLEAN
¶
Whether the host PID flag is enabled for the pods in the workload.
Queryable Attributes¶
Name¶
Kubernetes workload name.
Accessible with the following methods¶
Method | Description |
---|---|
GET_NAME() |
Getter for NAME, with configurable default |
ASK_NAME() |
Getter for NAME w/ exceptions if field has no value |
HAS_NAME() |
Determine if NAME has a value |
Type¶
Kubernetes workload type (e.g. Pod, Deployment, etc.).
Accessible with the following methods¶
Method | Description |
---|---|
GET_TYPE() |
Getter for TYPE, with configurable default |
ASK_TYPE() |
Getter for TYPE w/ exceptions if field has no value |
HAS_TYPE() |
Determine if TYPE has a value |
Uid¶
Kubernetes workload ID.
Accessible with the following methods¶
Method | Description |
---|---|
GET_UID() |
Getter for UID, with configurable default |
ASK_UID() |
Getter for UID w/ exceptions if field has no value |
HAS_UID() |
Determine if UID has a value |
Namespace¶
Kubernetes namespace that the workload is part of.
Accessible with the following methods¶
Method | Description |
---|---|
GET_NAMESPACE() |
Getter for NAMESPACE, with configurable default |
ASK_NAMESPACE() |
Getter for NAMESPACE w/ exceptions if field has no value |
HAS_NAMESPACE() |
Determine if NAMESPACE has a value |
HostNetwork¶
Whether the hostNetwork flag is enabled for the pods included in the workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_HOSTNETWORK() |
Getter for HOSTNETWORK, with configurable default |
ASK_HOSTNETWORK() |
Getter for HOSTNETWORK w/ exceptions if field has no value |
HAS_HOSTNETWORK() |
Determine if HOSTNETWORK has a value |
Containers¶
Containers running as part of the Kubernetes workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_CONTAINERS() |
Getter for CONTAINERS, with configurable default |
ASK_CONTAINERS() |
Getter for CONTAINERS w/ exceptions if field has no value |
HAS_CONTAINERS() |
Determine if CONTAINERS has a value |
Volumes¶
Volumes used by the Kubernetes workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_VOLUMES() |
Getter for VOLUMES, with configurable default |
ASK_VOLUMES() |
Getter for VOLUMES w/ exceptions if field has no value |
HAS_VOLUMES() |
Determine if VOLUMES has a value |
ServiceAccountName¶
The service account name that is associated with a Kubernetes workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_SERVICEACCOUNTNAME() |
Getter for SERVICEACCOUNTNAME, with configurable default |
ASK_SERVICEACCOUNTNAME() |
Getter for SERVICEACCOUNTNAME w/ exceptions if field has no |
HAS_SERVICEACCOUNTNAME() |
Determine if SERVICEACCOUNTNAME has a value |
HostIPC¶
Whether the host IPC flag is enabled for the pods in the workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_HOSTIPC() |
Getter for HOSTIPC, with configurable default |
ASK_HOSTIPC() |
Getter for HOSTIPC w/ exceptions if field has no value |
HAS_HOSTIPC() |
Determine if HOSTIPC has a value |
HostPID¶
Whether the host PID flag is enabled for the pods in the workload.
Accessible with the following methods¶
Method | Description |
---|---|
GET_HOSTPID() |
Getter for HOSTPID, with configurable default |
ASK_HOSTPID() |
Getter for HOSTPID w/ exceptions if field has no value |
HAS_HOSTPID() |
Determine if HOSTPID has a value |