{"resources":{"redisdb":{"id":"redisdb","name":"redisdb","fields":{"acl":{"name":"acl","type":"\u001bredisdb.acl","provider":"go.mondoo.com/mql/v13/providers/redisdb","is_implicit_resource":true},"config":{"name":"config","type":"\u001bredisdb.config","title":"Redis or Valkey durability configuration","desc":"The durability and resource-limit settings relevant to availability and data-at-rest: RDB snapshotting, append-only logging, memory cap and eviction policy, and the on-disk data location. Read from CONFIG GET.","provider":"go.mondoo.com/mql/v13/providers/redisdb","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bredisdb.instance","title":"Redis or Valkey server","desc":"Server identity and network and authentication posture: version and product (Redis or Valkey), server mode, listening ports, whether protected mode is on, which interfaces it binds, whether a password is set, and the TLS settings. The access-control users and durability configuration are reached from here. Populated from INFO and CONFIG GET; fields the connecting credential is not permitted to read are left null rather than failing.","provider":"go.mondoo.com/mql/v13/providers/redisdb","is_implicit_resource":true}},"title":"Redis or Valkey server","desc":"Root of the redisdb provider. The connected server and everything queryable through it (access-control users and the security-relevant configuration) is reached from redisdb.instance.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"redisdb.acl":{"id":"redisdb.acl","fields":{"user":{"name":"user","type":"\u001bredisdb.acl.user","title":"Redis or Valkey access-control user","desc":"A single access-control user and the rules that govern it: whether it is enabled, whether it has no password, and the key patterns, channel patterns, and command rules it is granted. Parsed from ACL LIST. The name field selects the user, for example redisdb.instance.users.where(name == \"default\").","provider":"go.mondoo.com/mql/v13/providers/redisdb","is_implicit_resource":true}},"is_extension":true},"redisdb.acl.user":{"id":"redisdb.acl.user","name":"redisdb.acl.user","fields":{"channelPatterns":{"name":"channelPatterns","type":"\u0019\u0007","is_mandatory":true,"title":"Pub/sub channel patterns the user may access","desc":"A single \"*\" means all channels.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"commandRules":{"name":"commandRules","type":"\u0019\u0007","is_mandatory":true,"title":"Command rules granted to the user","desc":"The effective command allow and deny rules, for example \"+@all -@dangerous\" or \"-@all +get +set\". Categories are prefixed with @.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enabled and can authenticate","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"isDefault":{"name":"isDefault","type":"\u0004","is_mandatory":true,"title":"Whether this is the built-in default user","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"keyPatterns":{"name":"keyPatterns","type":"\u0019\u0007","is_mandatory":true,"title":"Key patterns the user may access","desc":"Glob patterns of the keys the user is allowed to operate on. A single \"*\" means all keys.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"nopass":{"name":"nopass","type":"\u0004","is_mandatory":true,"title":"Whether the user has no password","desc":"When true, the user authenticates with no password. A nopass, enabled default user means anyone who reaches the port has that user's access.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"passwordCount":{"name":"passwordCount","type":"\u0005","is_mandatory":true,"title":"Number of passwords configured for the user","desc":"A count of the configured password hashes; the hashes themselves are not exposed.","provider":"go.mondoo.com/mql/v13/providers/redisdb"}},"title":"Redis or Valkey access-control user","desc":"A single access-control user and the rules that govern it: whether it is enabled, whether it has no password, and the key patterns, channel patterns, and command rules it is granted. Parsed from ACL LIST. The name field selects the user, for example redisdb.instance.users.where(name == \"default\").","min_provider_version":"13.0.0","defaults":"name enabled nopass","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"redisdb.config":{"id":"redisdb.config","name":"redisdb.config","fields":{"appendFsync":{"name":"appendFsync","type":"\u0007","is_mandatory":true,"title":"Append-only fsync policy: \"everysec\", \"always\", or \"no\"","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"appendOnly":{"name":"appendOnly","type":"\u0004","is_mandatory":true,"title":"Whether append-only file persistence is enabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"dbFilename":{"name":"dbFilename","type":"\u0007","is_mandatory":true,"title":"RDB file name","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"dir":{"name":"dir","type":"\u0007","is_mandatory":true,"title":"Working directory where RDB and AOF files are written","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"logfile":{"name":"logfile","type":"\u0007","is_mandatory":true,"title":"Path to the log file, empty when logging goes to standard output","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"maxmemory":{"name":"maxmemory","type":"\u0005","is_mandatory":true,"title":"Maximum memory in bytes, or 0 for no limit","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"maxmemoryPolicy":{"name":"maxmemoryPolicy","type":"\u0007","is_mandatory":true,"title":"Eviction policy when maxmemory is reached, for example \"noeviction\" or \"allkeys-lru\"","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"rdbEnabled":{"name":"rdbEnabled","type":"\u0004","is_mandatory":true,"title":"Whether RDB snapshotting is enabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"save":{"name":"save","type":"\u0007","is_mandatory":true,"title":"RDB snapshot schedule, empty when snapshotting is disabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"}},"title":"Redis or Valkey durability configuration","desc":"The durability and resource-limit settings relevant to availability and data-at-rest: RDB snapshotting, append-only logging, memory cap and eviction policy, and the on-disk data location. Read from CONFIG GET.","min_provider_version":"13.0.0","defaults":"appendOnly rdbEnabled maxmemoryPolicy","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"redisdb.instance":{"id":"redisdb.instance","name":"redisdb.instance","fields":{"aclFile":{"name":"aclFile","type":"\u0007","is_mandatory":true,"title":"Path to the external ACL file, or empty when access-control rules are inline","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"bind":{"name":"bind","type":"\u0019\u0007","is_mandatory":true,"title":"Interfaces the server binds to","desc":"The configured bind addresses. An empty list means the server listens on all interfaces.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"bindsAllInterfaces":{"name":"bindsAllInterfaces","type":"\u0004","is_mandatory":true,"title":"Whether the server listens on all network interfaces","desc":"True when no bind address is configured or a wildcard address such as 0.0.0.0 is present, exposing the server beyond loopback.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"config":{"name":"config","type":"\u001bredisdb.config","title":"Durability and resource-limit configuration","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"isValkey":{"name":"isValkey","type":"\u0004","is_mandatory":true,"title":"Whether the server is Valkey rather than Redis","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Server mode: \"standalone\", \"sentinel\", or \"cluster\"","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"os":{"name":"os","type":"\u0007","is_mandatory":true,"title":"Operating system the server reports running on","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Plaintext TCP port, or 0 when the plaintext listener is disabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"protectedMode":{"name":"protectedMode","type":"\u0004","is_mandatory":true,"title":"Whether protected mode is enabled","desc":"Protected mode (on by default) refuses external connections when no password and no explicit bind are set. Turning it off on an exposed server is a risk.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"requirepassSet":{"name":"requirepassSet","type":"\u0004","is_mandatory":true,"title":"Whether a password is configured (the requirepass value)","desc":"The password value itself is never exposed, only whether one is set. A false value means unauthenticated clients that reach the port are served.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"runId":{"name":"runId","type":"\u0007","is_mandatory":true,"title":"Run identifier, a random value regenerated on every restart","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"tlsAuthClients":{"name":"tlsAuthClients","type":"\u0007","is_mandatory":true,"title":"Client-certificate policy for TLS: \"yes\", \"no\", or \"optional\"","desc":"\"yes\" requires and verifies a client certificate (mutual TLS); \"no\" does not enforce one.","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"tlsEnabled":{"name":"tlsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the TLS listener is enabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"tlsPort":{"name":"tlsPort","type":"\u0005","is_mandatory":true,"title":"TLS port, or 0 when TLS is disabled","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"users":{"name":"users","type":"\u0019\u001bredisdb.acl.user","title":"Access-control users defined on the server","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"valkeyVersion":{"name":"valkeyVersion","type":"\u0007","is_mandatory":true,"title":"Valkey version, when the server is Valkey","provider":"go.mondoo.com/mql/v13/providers/redisdb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Server version, for example \"7.4.0\"","desc":"On Valkey this is the compatible Redis OSS version, not the Valkey version; read valkeyVersion for the latter.","provider":"go.mondoo.com/mql/v13/providers/redisdb"}},"title":"Redis or Valkey server","desc":"Server identity and network and authentication posture: version and product (Redis or Valkey), server mode, listening ports, whether protected mode is on, which interfaces it binds, whether a password is set, and the TLS settings. The access-control users and durability configuration are reached from here. Populated from INFO and CONFIG GET; fields the connecting credential is not permitted to read are left null rather than failing.","min_provider_version":"13.0.0","defaults":"version isValkey protectedMode requirepassSet","provider":"go.mondoo.com/mql/v13/providers/redisdb"}}}