getImageAndTag - Returns the image and tag of the container. Queries K8s when necessary

handleContainerEvent - Handle a container event

handleContainerExited - Handles a container running event

handleContainerRunning - Handles a container running event

handleNetworkEvent - handle a network event

handleSecurityProfileUpdate - Handles a security profile creation

handleSecurityProfileDeletion - Handles a security profile deletion

handleSecurityProfileUpdate - Handles a security profile update

* ingress_cls - Handles ingress hooks * @skb: skb structure of the packet */

* ingress_ext_cls - Handles "external" ingress hooks * @skb: skb structure of the packet */

init - Initializes the NetworkSecurityProbe

init - Initializes perfmap

* insert_cidr_entry - Inserts a CIDR entry for the provided DNS response. Returns 0 if access should be granted, -1 if not. * @response: pointer to a

listen - Wait for events and print them

listen - Wait for events and print them

listen - Wait for events and print them

listen - Listen for new events from the kernel

listenForDockerEvents - Listens for Docker events

loadEBPFProgram - Loads eBPF program

* netns_from_device - Returns the netns of a device * @dev: device */

newSecurityProfiles returns a SecurityProfiles

* new_session_key - Populates the provided session_key with the data from the provided event * @session_key: session key to populate * @event: point

onAdd - SecurityProfile creation handler

onDelete - SecurityProfile creation handler

onUpdate - SecurityProfile update handler

* parse_arp - Parses arp header. Returns 0 on success, a negative value on error. */

* parse_dns_query - Parses sk_buff to retrieve DNS query data. Returns 0 on success, negative value on error. */

* parse_dns_response - Parses sk_buff to retrieve DNS response data. Returns 0 on success, negative value on error. */

* parse_ip - Parses sk_buff to retrieve L3 data. Returns 0 on success, negative value on error. */

* parse_l2 - Parses sk_buff to retrieve L2 data. Returns 0 on success, negative value on error. */

* parse_l4 - Parses sk_buff to retrieve L4 data. Returns 0 on success, negative value on error. */

* parse_l7 - Parses sk_buff to retrieve L7 data. Returns 0 on success, negative value on error. */

pollStop - Stop a perf map listener

setupRTNetLink - Sets up a connection with RTNetlink

startMonitors - Starts monitors

startProcessors - Starts event processors

* tailcall_dns - Tail calls to the right DNS program. Returns 0 if access should be granted, -1 if not. * @event: pointer to a net_event_t structure

* trace__dev_change_net_namespace - Traces devices that swith network * namespace. * @dev: device * @net: new network namespace */

* trace__do_fork - Handles _do_fork kprobe hook * @clone_flags: flags of the clone call * @stack_start: start addr of the stack in memory * @stack_

* trace__free_netdev - Traces devices that the kernel is about to freed. * @dev: the device structure befor it is freed. */

* trace__register_netdevice - Traces the registration of a new network * device in the kernel. * @dev: the device structure after registration in th

* trace__register_netdevice_ret - Traces the return of a new device registration * in the kernel. * @ret: the return value */

* trace_sched_process_exec - Handles exec tracepoint hook * @args: pointer to tracepoint arguments */

* trace_sched_process_exit - Handles exit tracepoint hook * @args: pointer to tracepoint arguments */

* trace_sched_process_fork - Handles fork tracepoint hook * @child_pid: child pid */

* trace__security_sk_classify_flow - Traces processes that are trying * to reach out to a remote service. * @fl: routing flow of the outgoing traffi

* trace__security_socket_bind - Traces processes that are binding a * socket to a local address. * @sock: socket * @address: address * @addrlen: a

* trace__sock_gen_cookie - Traces sock_gen_cookie * @sk: sock structure */

* trace__sock_gen_cookie_ret - Traces the return value of sock_gen_cookie * @cookie: cookie of the socket */

* trace__unregister_netdevice_queue - Traces devices that are about to * get unregisterd from the kernel. * @dev: the device structure before it is

* trace__veth_newlink - Traces the creation request of a new veth pair * for the provided device. * @dev: device, some members of this structure mig

AssetNames returns the names of the assets.

Create takes the representation of a securityProfile and creates it. Returns the server's representation of the securityProfile, and an error, if the

Create takes the representation of a securityProfile and creates it. Returns the server's representation of the securityProfile, and an error, if the

CreateSecurityProfileCRD - Creates SecurityProfile v1 CRDs

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressRule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HTTPRule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressRule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L3Rule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L4ProtocolPortRule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L4Rule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7Rule.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicy.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProcessProfile.

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecurityProfileSpec.

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

Delete takes name of the securityProfile and deletes it. Returns an error if one occurs.

Delete takes name of the securityProfile and deletes it. Returns an error if one occurs.

DeleteCollection deletes a collection of objects.

DeleteCollection deletes a collection of objects.

Discovery retrieves the DiscoveryClient

DispatchEvent - Dispatches an event to the processors

ForResource gives generic access to a shared informer of the matching type TODO extend this to unknown resources with a client pool

Get retrieves the SecurityProfile from the indexer for a given namespace and name.

Get takes name of the securityProfile, and returns the corresponding securityProfile object, and an error if there is any.

Get takes name of the securityProfile, and returns the corresponding securityProfile object, and an error if there is any.

GetBinaryIDs - Returns the list of binary IDs of the profile

GetBootTime - Returns the boot time of the host

GetCollection - Returns the eBPF collection of the NSP

GetCommFromPid - Returns the comm of a process

GetConfig - Returns the config of the NSP

GetEventChan - Returns event channel

GetEventChan - Returns event channel

GetEventChan - Returns event channel