-
Notifications
You must be signed in to change notification settings - Fork 197
/
starboard.go
34 lines (27 loc) · 1.07 KB
/
starboard.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
package kube
import (
"time"
)
const (
// TODO I'm wondering if we should rename starboard.resource.* labels to starboard.object.*
// TODO In Kubernetes API terminology a resource is usually lowercase, plural word (e.g. pods) identifying a set of
// TODO HTTP endpoints (paths) exposing the CRUD semantics of a certain object type in the system
LabelResourceKind = "starboard.resource.kind"
LabelResourceName = "starboard.resource.name"
LabelResourceNamespace = "starboard.resource.namespace"
LabelContainerName = "starboard.container.name"
LabelPodSpecHash = "pod-spec-hash"
LabelConfigAuditReportScan = "configAuditReport.scanner"
LabelVulnerabilityReportScan = "vulnerabilityReport.scanner"
LabelKubeBenchReportScan = "kubeBenchReport.scanner"
LabelK8SAppManagedBy = "app.kubernetes.io/managed-by"
AppStarboardOperator = "starboard-operator"
)
const (
AnnotationContainerImages = "starboard.container-images"
)
// ScannerOpts holds configuration of the vulnerability Scanner.
type ScannerOpts struct {
ScanJobTimeout time.Duration
DeleteScanJob bool
}