pod.go

package cmd

import (
	"bufio"
	"bytes"
	"context"
	"errors"
	"fmt"
	"os"
	"time"

	"github.com/controlplaneio/kubectl-kubesec/v2/pkg/kubesec"
	"github.com/spf13/cobra"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)

var podCmd = &cobra.Command{
	Use:     `pod [name]`,
	Short:   "Scans pod object",
	Example: `  pod podinfo --namespace=default`,
	RunE: func(cmd *cobra.Command, args []string) error {
		if len(args) < 1 {
			return errors.New("pod name is required")
		}
		name := args[0]

		kubeClient, err := newKubeClient(kubeconfig)
		if err != nil {
			return err
		}

		var buffer bytes.Buffer
		writer := bufio.NewWriter(&buffer)

		fmt.Println("scanning pod", name, "in namespace", namespace)
		ctx, cancel := context.WithTimeout(context.Background(), time.Minute)
		defer cancel()
		pod, err := kubeClient.CoreV1().Pods(namespace).Get(ctx, name, metav1.GetOptions{})
		if err != nil {
			fmt.Println(err)
			os.Exit(1)
		}
		pod.TypeMeta = metav1.TypeMeta{
			Kind:       "Pod",
			APIVersion: "v1",
		}
		err = serializer.Encode(pod, writer)
		if err != nil {
			fmt.Println(err)
			os.Exit(1)
		}

		if err := writer.Flush(); err != nil {
			return err
		}

		kc := kubesec.NewClient(scanURL, scanTimeOut)
		rs, err := kc.ScanDefinition(buffer)

		if err != nil {
			fmt.Println(err)
			os.Exit(1)
		}

		if err := rs.Dump(os.Stdout); err != nil {
			fmt.Println(err)
			os.Exit(1)
		}

		return nil
	},
}