policybuilder

Documentation

Index

• func BuildClusterNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, ...) (*v1alpha1.ClusterNimbusPolicy, error)
• func BuildNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, ...) (*v1.NimbusPolicy, error)
• func BuildNimbusPolicyFromClusterBinding(ctx context.Context, logger logr.Logger, k8sClient client.Client, ...) (*v1.NimbusPolicy, error)
• func PreprocessExpression(expr string) string
• func ProcessCEL(ctx context.Context, k8sClient client.Client, namespace string, ...) (map[string]string, error)

Functions

func BuildClusterNimbusPolicy

func BuildClusterNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, scheme *runtime.Scheme, csib v1alpha1.ClusterSecurityIntentBinding) (*v1alpha1.ClusterNimbusPolicy, error)

BuildClusterNimbusPolicy generates a ClusterNimbusPolicy based on given SecurityIntents and ClusterSecurityIntentBinding.

func BuildNimbusPolicy

func BuildNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, scheme *runtime.Scheme, sib v1.SecurityIntentBinding) (*v1.NimbusPolicy, error)

BuildNimbusPolicy generates a NimbusPolicy based on given SecurityIntentBinding.

func BuildNimbusPolicyFromClusterBinding

func BuildNimbusPolicyFromClusterBinding(ctx context.Context, logger logr.Logger, k8sClient client.Client, scheme *runtime.Scheme, csib v1.ClusterSecurityIntentBinding, ns string) (*v1.NimbusPolicy, error)

BuildNimbusPolicyFromClusterBinding generates a NimbusPolicy based on given ClusterSecurityIntentBinding.

func PreprocessExpression

func PreprocessExpression(expr string) string

func ProcessCEL

func ProcessCEL(ctx context.Context, k8sClient client.Client, namespace string, expressions []string) (map[string]string, error)

ProcessCEL processes CEL expressions to generate matchLabels.