policy

Documentation

Index

• type BreakGlassCondition
• type IntegrityVerifierMode
• type ScopeType
• type SignPolicy
  • func (p *SignPolicy) DeepCopy() *SignPolicy
  • func (p *SignPolicy) DeepCopyInto(p2 *SignPolicy)
  • func (self *SignPolicy) GetCandidatePubkeys(keyPathList []string, namespace string) []string
  • func (self *SignPolicy) GetSignerMap() map[string][]SubjectCondition
  • func (self *SignPolicy) Match(namespace string, signer *common.SignerInfo) (bool, *SignPolicyCondition)
  • func (self *SignPolicy) Merge(data *SignPolicy) *SignPolicy
• type SignPolicyCondition
• type SignerCondition
• type SubjectCondition
  • func (self *SubjectCondition) Match(signer *common.SignerInfo) bool
• type SubjectMatchPattern

Types

type BreakGlassCondition

type BreakGlassCondition struct {
	Scope      ScopeType `json:"scope,omitempty"`
	Namespaces []string  `json:"namespaces,omitempty"`
}

type IntegrityVerifierMode

type IntegrityVerifierMode string

const (
	UnknownMode IntegrityVerifierMode = ""
	EnforceMode IntegrityVerifierMode = "enforce"
	DetectMode  IntegrityVerifierMode = "detect"
)

type ScopeType

type ScopeType string

const (
	ScopeUndefined  ScopeType = ""
	ScopeNamespaced ScopeType = "Namespaced"
	ScopeCluster    ScopeType = "Cluster"
)

type SignPolicy

type SignPolicy struct {
	Policies    []SignPolicyCondition `json:"policies,omitempty"`
	Signers     []SignerCondition     `json:"signers,omitempty"`
	BreakGlass  []BreakGlassCondition `json:"breakGlass,omitempty"`
	Description string                `json:"description,omitempty"`
}

func (*SignPolicy) DeepCopy

func (p *SignPolicy) DeepCopy() *SignPolicy

func (*SignPolicy) DeepCopyInto

func (p *SignPolicy) DeepCopyInto(p2 *SignPolicy)

func (*SignPolicy) GetCandidatePubkeys

func (self *SignPolicy) GetCandidatePubkeys(keyPathList []string, namespace string) []string

func (*SignPolicy) GetSignerMap

func (self *SignPolicy) GetSignerMap() map[string][]SubjectCondition

func (*SignPolicy) Match

func (self *SignPolicy) Match(namespace string, signer *common.SignerInfo) (bool, *SignPolicyCondition)

func (*SignPolicy) Merge

func (self *SignPolicy) Merge(data *SignPolicy) *SignPolicy

type SignPolicyCondition

type SignPolicyCondition struct {
	Scope             ScopeType `json:"scope,omitempty"`
	Namespaces        []string  `json:"namespaces,omitempty"`
	ExcludeNamespaces []string  `json:"excludeNamespaces,omitempty"`
	Signers           []string  `json:"signers,omitempty"`
}

type SignerCondition

type SignerCondition struct {
	Name     string                `json:"name,omitempty"`
	Secret   string                `json:"secret,omitempty"`
	Subjects []SubjectMatchPattern `json:"subjects,omitempty"`
}

type SubjectCondition

type SubjectCondition struct {
	Name    string              `json:"name"`
	Subject SubjectMatchPattern `json:"subject"`
}

func (*SubjectCondition) Match

func (self *SubjectCondition) Match(signer *common.SignerInfo) bool

type SubjectMatchPattern

type SubjectMatchPattern struct {
	Email              string `json:"email,omitempty"`
	Uid                string `json:"uid,omitempty"`
	Country            string `json:"country,omitempty"`
	Organization       string `json:"organization,omitempty"`
	OrganizationalUnit string `json:"organizationalUnit,omitempty"`
	Locality           string `json:"locality,omitempty"`
	Province           string `json:"province,omitempty"`
	StreetAddress      string `json:"streetAddress,omitempty"`
	PostalCode         string `json:"postalCode,omitempty"`
	CommonName         string `json:"commonName,omitempty"`
	SerialNumber       string `json:"serialNumber,omitempty"`
}