Skip to content

Commit

Permalink
Merge pull request #211 from seungsoo-lee/dev
Browse files Browse the repository at this point in the history
Updated testing code
  • Loading branch information
seungsoo-lee committed Jul 15, 2021
2 parents fd02c46 + 6e3c406 commit b46f121
Showing 1 changed file with 8 additions and 5 deletions.
13 changes: 8 additions & 5 deletions src/systempolicy/systemPolicy.go
Original file line number Diff line number Diff line change
Expand Up @@ -576,17 +576,13 @@ func DiscoverSystemPolicyMain() {

// get k8s pods
pods := cluster.GetPods(clusterName)
fmt.Println("Pod, syslogs ", len(pods), len(sysLogs))

// filter system logs from configuration
cfgFilteredLogs := FilterSystemLogsByConfig(sysLogs, pods)
fmt.Println("cfgFilteredLogs ", len(cfgFilteredLogs))

// iterate sys log key := [namespace + pod_name]
nsPodLogs := clusteringSystemLogsByNamespacePod(cfgFilteredLogs)
fmt.Println("nsPodLogs ", len(nsPodLogs))
for sysKey, perPodlogs := range nsPodLogs {
fmt.Println("sysKey ", sysKey, len(perPodlogs))

discoveredSysPolicies := []types.KnoxSystemPolicy{}

Expand All @@ -595,20 +591,27 @@ func DiscoverSystemPolicyMain() {
log.Error().Msg(err.Error())
continue
}
fmt.Println("pod ", pod)

fmt.Println(pod, len(perPodlogs))

// 1. discover file operation system policy
if SystemPolicyTypes&SYS_OP_FILE_INT > 0 {
fileOpLogs := getOperationLogs(SYS_OP_FILE, perPodlogs)
fmt.Println(fileOpLogs)
discoveredSysPolicies = discoverFileOperationPolicy(discoveredSysPolicies, pod, fileOpLogs)
fmt.Println(discoveredSysPolicies)
}

// 2. discover process operation system policy
if SystemPolicyTypes&SYS_OP_PROCESS_INT > 0 {
procOpLogs := getOperationLogs(SYS_OP_PROCESS, perPodlogs)
fmt.Println(procOpLogs)
discoveredSysPolicies = discoverProcessOperationPolicy(discoveredSysPolicies, pod, procOpLogs)
fmt.Println(discoveredSysPolicies)
}

fmt.Println("")

// 3. update selector
discoveredSysPolicies = updateSysPolicySelector(clusterName, pod, discoveredSysPolicies)

Expand Down

0 comments on commit b46f121

Please sign in to comment.