policy

Documentation

Index

• Variables
• func ParseEnv(env string) []string
• func ValidatePackage(logE *logrus.Entry, pkg *config.Package, policies []*Config) error
• type Config
  • func (c *Config) Init() error
• type ConfigFinder
• type ConfigFinderImpl
  • func NewConfigFinder(fs afero.Fs) *ConfigFinderImpl
  • func (f *ConfigFinderImpl) Find(policyFilePath, wd string) (string, error)
• type ConfigReader
• type ConfigReaderImpl
  • func NewConfigReader(fs afero.Fs) *ConfigReaderImpl
  • func (r *ConfigReaderImpl) Read(files []string) ([]*Config, error)
  • func (r *ConfigReaderImpl) ReadFile(file string) (*Config, error)
• type ConfigYAML
• type MockConfigFinder
  • func (f *MockConfigFinder) Find(policyFilePath, wd string) (string, error)
• type MockConfigReader
  • func (r *MockConfigReader) Read(files []string) ([]*Config, error)
• type MockReader
  • func (r *MockReader) Append(logE *logrus.Entry, aquaYAMLPath string, policies []*Config, ...) ([]*Config, error)
  • func (r *MockReader) Read(policyFilePaths []string) ([]*Config, error)
• type MockValidator
  • func (v *MockValidator) Allow(p string) error
  • func (v *MockValidator) Deny(p string) error
  • func (v *MockValidator) Validate(p string) error
  • func (v *MockValidator) Warn(logE *logrus.Entry, policyFilePath string, updated bool) error
• type Package
• type Reader
  • func NewReader(fs afero.Fs, validator Validator, finder ConfigFinder, reader ConfigReader) *Reader
  • func (r *Reader) Append(logE *logrus.Entry, aquaYAMLPath string, policies []*Config, ...) ([]*Config, error)
  • func (r *Reader) Read(policyFilePaths []string) ([]*Config, error)
• type Registry
• type Validator
• type ValidatorImpl
  • func NewValidator(param *config.Param, fs afero.Fs) *ValidatorImpl
  • func (v *ValidatorImpl) Allow(p string) error
  • func (v *ValidatorImpl) Deny(p string) error
  • func (v *ValidatorImpl) Validate(p string) error
  • func (v *ValidatorImpl) Warn(logE *logrus.Entry, policyFilePath string, updated bool) error

Variables

var (
	ErrConfigFileNotFound = errors.New("policy file isn't found")
)

Functions

func ParseEnv

func ParseEnv(env string) []string

func ValidatePackage

func ValidatePackage(logE *logrus.Entry, pkg *config.Package, policies []*Config) error

Types

type Config

type Config struct {
	Path    string
	Allowed bool
	YAML    *ConfigYAML
}

func (*Config) Init

func (c *Config) Init() error

type ConfigFinder

type ConfigFinder interface {
	Find(policyFilePath, wd string) (string, error)
}

type ConfigFinderImpl

type ConfigFinderImpl struct {
	// contains filtered or unexported fields
}

func NewConfigFinder

func NewConfigFinder(fs afero.Fs) *ConfigFinderImpl

func (*ConfigFinderImpl) Find

func (f *ConfigFinderImpl) Find(policyFilePath, wd string) (string, error)

type ConfigReader

type ConfigReader interface {
	Read(policyConfigFiles []string) ([]*Config, error)
	ReadFile(policyConfigFile string) (*Config, error)
}

type ConfigReaderImpl

type ConfigReaderImpl struct {
	// contains filtered or unexported fields
}

func NewConfigReader

func NewConfigReader(fs afero.Fs) *ConfigReaderImpl

func (*ConfigReaderImpl) Read

func (r *ConfigReaderImpl) Read(files []string) ([]*Config, error)

func (*ConfigReaderImpl) ReadFile

func (r *ConfigReaderImpl) ReadFile(file string) (*Config, error)

type ConfigYAML

type ConfigYAML struct {
	Registries []*Registry `json:"registries"`
	Packages   []*Package  `json:"packages,omitempty"`
}

type MockConfigFinder

type MockConfigFinder struct {
	// contains filtered or unexported fields
}

func (*MockConfigFinder) Find

func (f *MockConfigFinder) Find(policyFilePath, wd string) (string, error)

type MockConfigReader

type MockConfigReader struct {
	Cfgs []*Config
	Err  error
}

func (*MockConfigReader) Read

func (r *MockConfigReader) Read(files []string) ([]*Config, error)

type MockReader

type MockReader struct {
	Config  *Config
	Configs []*Config
	Err     error
}

func (*MockReader) Append

func (r *MockReader) Append(logE *logrus.Entry, aquaYAMLPath string, policies []*Config, globalPolicyPaths map[string]struct{}) ([]*Config, error)

func (*MockReader) Read

func (r *MockReader) Read(policyFilePaths []string) ([]*Config, error)

type MockValidator

type MockValidator struct {
	Err error
}

func (*MockValidator) Allow

func (v *MockValidator) Allow(p string) error

func (*MockValidator) Deny

func (v *MockValidator) Deny(p string) error

func (*MockValidator) Validate

func (v *MockValidator) Validate(p string) error

func (*MockValidator) Warn

func (v *MockValidator) Warn(logE *logrus.Entry, policyFilePath string, updated bool) error

type Package

type Package struct {
	Name         string    `json:"name"`
	Version      string    `json:"version,omitempty"`
	RegistryName string    `yaml:"registry" json:"registry,omitempty"`
	Registry     *Registry `yaml:"-" json:"-"`
}

type Reader

type Reader struct {
	// contains filtered or unexported fields
}

func NewReader

func NewReader(fs afero.Fs, validator Validator, finder ConfigFinder, reader ConfigReader) *Reader

func (*Reader) Append

func (r *Reader) Append(logE *logrus.Entry, aquaYAMLPath string, policies []*Config, globalPolicyPaths map[string]struct{}) ([]*Config, error)

Append finds and reads a policy file for aquaYAMLPath and appends the policy to policies.

func (*Reader) Read

func (r *Reader) Read(policyFilePaths []string) ([]*Config, error)

type Registry

type Registry struct {
	Name      string `json:"name,omitempty"`
	Type      string `validate:"required" json:"type,omitempty" jsonschema:"enum=standard,enum=local,enum=github_content"`
	RepoOwner string `yaml:"repo_owner" json:"repo_owner,omitempty"`
	RepoName  string `yaml:"repo_name" json:"repo_name,omitempty"`
	Ref       string `json:"ref,omitempty"`
	Path      string `validate:"required" json:"path,omitempty"`
}

type Validator

type Validator interface {
	Validate(p string) error
	Allow(p string) error
	Deny(p string) error
	Warn(logE *logrus.Entry, policyFilePath string, updated bool) error
}

type ValidatorImpl

type ValidatorImpl struct {
	// contains filtered or unexported fields
}

func NewValidator

func NewValidator(param *config.Param, fs afero.Fs) *ValidatorImpl

func (*ValidatorImpl) Allow

func (v *ValidatorImpl) Allow(p string) error

func (*ValidatorImpl) Deny

func (v *ValidatorImpl) Deny(p string) error

func (*ValidatorImpl) Validate

func (v *ValidatorImpl) Validate(p string) error

func (*ValidatorImpl) Warn

func (v *ValidatorImpl) Warn(logE *logrus.Entry, policyFilePath string, updated bool) error