config

Documentation

Index

• type DockerExecProxy
• type ECSSSMProxy
• type KubectlExecProxy
• type ProxyConfig
  • func BuildProxyConfig(logger *zap.Logger, socket models.Socket, AWSRegion, AWSProfile string, ...) (*ProxyConfig, error)
  • func (c *ProxyConfig) IsRecordingEnabled() bool

Types

type DockerExecProxy

type DockerExecProxy struct {
	ContainerNameAllowlist []string
}

type ECSSSMProxy

type ECSSSMProxy struct {
	Cluster    string
	Services   []string
	Tasks      []string
	Containers []string
}

type KubectlExecProxy

type KubectlExecProxy struct {
	// eks
	IsAwsEks          bool
	AwsEksClusterName string

	// standard
	MasterUrl      string
	KubeconfigPath string

	NamespaceAllowlist          []string
	NamespaceSelectorsAllowlist map[string]map[string][]string
}

type ProxyConfig

type ProxyConfig struct {
	Username           string
	Password           string
	IdentityFile       string
	IdentityPrivateKey []byte
	Hostname           string
	Port               int
	SshClientConfig    *ssh.ClientConfig
	SshServerConfig    *ssh.ServerConfig
	AwsSSMTarget       string
	AwsEC2InstanceId   string
	AWSRegion          string
	AWSProfile         string
	ECSSSMProxy        *ECSSSMProxy
	IsKubectlExec      bool
	KubectlExecProxy   *KubectlExecProxy
	IsDockerExec       bool
	DockerExecProxy    *DockerExecProxy
	AwsConfig          aws.Config
	AwsUpstreamType    string
	Logger             *zap.Logger
	AwsCredentials     *common.AwsCredentials
	Recording          bool
	EndToEndEncryption bool
	Hostkey            *ssh.Signer
	OrgSshCA           ssh.PublicKey
	Socket             *models.Socket
	Border0API         border0.Border0API
	Border0CertAuth    bool
}

func BuildProxyConfig

func BuildProxyConfig(logger *zap.Logger, socket models.Socket, AWSRegion, AWSProfile string, hostkey *ssh.Signer, org *models.Organization, border0API border0.Border0API) (*ProxyConfig, error)

func (*ProxyConfig) IsRecordingEnabled

func (c *ProxyConfig) IsRecordingEnabled() bool