acl

Documentation

Index

• func ApplyAccessControlPolicies(ctx context.Context, operation string, httpVerb commonv1pb.HTTPExtension_Verb, ...) (bool, string)
• func GetAndParseSpiffeID(ctx context.Context) (*config.SpiffeID, error)
• func IsOperationAllowedByAccessControlPolicy(spiffeID *config.SpiffeID, srcAppID string, inputOperation string, ...) (bool, string)
• func ParseAccessControlSpec(accessControlSpec config.AccessControlSpec, protocol string) (*config.AccessControlList, error)

Functions

func ApplyAccessControlPolicies

func ApplyAccessControlPolicies(ctx context.Context, operation string, httpVerb commonv1pb.HTTPExtension_Verb, appProtocol string, acl *config.AccessControlList) (bool, string)

func GetAndParseSpiffeID

func GetAndParseSpiffeID(ctx context.Context) (*config.SpiffeID, error)

GetAndParseSpiffeID retrieves the SPIFFE Id from the cert and parses it.

func IsOperationAllowedByAccessControlPolicy

func IsOperationAllowedByAccessControlPolicy(spiffeID *config.SpiffeID, srcAppID string, inputOperation string, httpVerb commonv1pb.HTTPExtension_Verb, appProtocol string, accessControlList *config.AccessControlList) (bool, string)

IsOperationAllowedByAccessControlPolicy determines if access control policies allow the operation on the target app.

func ParseAccessControlSpec

func ParseAccessControlSpec(accessControlSpec config.AccessControlSpec, protocol string) (*config.AccessControlList, error)

ParseAccessControlSpec creates an in-memory copy of the Access Control Spec for fast lookup.