access

Documentation

Overview

Package access implements the access control logic for the extended apis

Index

• func AuthenticateClusterCAHandler(state state.State, r *http.Request) (bool, response.Response)
• func AuthenticateUnixHandler(_ state.State, r *http.Request) (bool, response.Response)
• func ClusterCATrustedEndpoint(handler func(state state.State, r *http.Request) response.Response, ...) rest.EndpointAction

Functions

func AuthenticateClusterCAHandler

func AuthenticateClusterCAHandler(state state.State, r *http.Request) (bool, response.Response)

AuthenticateClusterCAHandler authenticates the cluster CA for incoming requests. It checks if the request is trusted and verifies the client certificate against the cluster CA. If the request is trusted or the client certificate is successfully verified, it allows the request. Otherwise, it returns a forbidden response.

func AuthenticateUnixHandler

func AuthenticateUnixHandler(_ state.State, r *http.Request) (bool, response.Response)

AuthenticateUnixHandler only allow requests coming from the unix socket.

func ClusterCATrustedEndpoint

func ClusterCATrustedEndpoint(handler func(state state.State, r *http.Request) response.Response, proxyTarget bool) rest.EndpointAction

ClusterCATrustedEndpoint is a helper to simplify the creation of a cluster peer endpoint.