inspector

Documentation

Index

• func IsInvalidConfig(err error) bool
• func IsSecurityViolationError(err error) bool
• type Config
• type Inspector
  • func New(config Config) (*Inspector, error)
  • func (i *Inspector) Inspect(ctx context.Context, app v1alpha1.App, userInfo authv1.UserInfo) error

Functions

func IsInvalidConfig

func IsInvalidConfig(err error) bool

IsInvalidConfig asserts invalidConfigError.

func IsSecurityViolationError

func IsSecurityViolationError(err error) bool

IsSecurityViolationError asserts validationError.

Types

type Config

type Config struct {
	Logger micrologger.Logger

	AppBlacklist       []string
	CatalogBlacklist   []string
	GroupWhitelist     []string
	NamespaceBlacklist []string
	UserWhitelist      []string
}

type Inspector

type Inspector struct {
	// contains filtered or unexported fields
}

func New

func New(config Config) (*Inspector, error)

func (*Inspector) Inspect

func (i *Inspector) Inspect(ctx context.Context, app v1alpha1.App, userInfo authv1.UserInfo) error

Inspect check App CR against two things at the moment: - references to blacklisted namespaces in config or userConfig - blacklisted apps from blacklisted catalogs being requested