authorization

Documentation

Index

• type BindingChecker
  • func (sc BindingChecker) Check() ([]*models.IstioCheck, bool)
• type NamespaceMethodChecker
  • func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)
• type NoHostChecker
  • func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)
• type ServiceChecker
  • func (sc ServiceChecker) Check() ([]*models.IstioCheck, bool)
• type WorkloadSelectorChecker
  • func (wsc WorkloadSelectorChecker) Check() ([]*models.IstioCheck, bool)

Types

type BindingChecker

type BindingChecker struct {
	ServiceRoles       []kubernetes.IstioObject
	ServiceRoleBinding kubernetes.IstioObject
}

func (BindingChecker) Check

func (sc BindingChecker) Check() ([]*models.IstioCheck, bool)

type NamespaceMethodChecker

type NamespaceMethodChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespaces          models.NamespaceNames
}

func (NamespaceMethodChecker) Check

func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)

type NoHostChecker

type NoHostChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespace           string
	Namespaces          models.Namespaces
	ServiceEntries      map[string][]string
	Services            []core_v1.Service
}

func (NoHostChecker) Check

func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)

type ServiceChecker

type ServiceChecker struct {
	ServiceRole kubernetes.IstioObject
	Services    []core_v1.Service
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() ([]*models.IstioCheck, bool)

Check verifies that the services point to existing ones. ServiceRole can only affect the defined namespace, no other even if FQDN is used to point to different namespace

type WorkloadSelectorChecker

type WorkloadSelectorChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	WorkloadList        models.WorkloadList
}

func (WorkloadSelectorChecker) Check

func (wsc WorkloadSelectorChecker) Check() ([]*models.IstioCheck, bool)