core

Documentation

Index

• func ResourcesConfigStructLevelValidation(sl validator.StructLevel)
• func ScopeConfigurationStructLevelValidation(sl validator.StructLevel)
• type ConfigurationEmptyError
  • func (m *ConfigurationEmptyError) Error() string
• type Policy
  • func (p *Policy) GetRulesetReferencesForScope(scope string, subscriptionId string) []*RulesetReference
• type Principal
• type ResourcesConfig
  • func (c *ResourcesConfig) GetGroupAssignmentSchedules(subscriptionId string) []*Schedule
  • func (c *ResourcesConfig) GetGroupEligibilitySchedules(subscriptionId string) []*Schedule
  • func (c *ResourcesConfig) GetPolicyByRoleName(roleName string) *Policy
  • func (c *ResourcesConfig) GetScopeRoleNameCombinations(subscriptionId string) []*ScopeRoleNameCombination
  • func (c *ResourcesConfig) GetUserAssignmentSchedules(subscriptionId string) []*Schedule
  • func (c *ResourcesConfig) GetUserEligibilitySchedules(subscriptionId string) []*Schedule
  • func (c *ResourcesConfig) Validate() error
• type RoleAssignmentScheduleCreate
• type RoleAssignmentScheduleDelete
• type RoleAssignmentScheduleUpdate
• type RoleEligibilityScheduleCreate
• type RoleEligibilityScheduleDelete
• type RoleEligibilityScheduleUpdate
• type RoleManagementPolicyRule
• type RoleManagementPolicyRuleset
• type RoleManagementPolicyUpdate
• type RulesetReference
• type Schedule
• type ScopeConfiguration
• type ScopeRoleNameCombination

Functions

func ResourcesConfigStructLevelValidation

func ResourcesConfigStructLevelValidation(sl validator.StructLevel)

func ScopeConfigurationStructLevelValidation

func ScopeConfigurationStructLevelValidation(sl validator.StructLevel)

Types

type ConfigurationEmptyError

type ConfigurationEmptyError struct{}

func (*ConfigurationEmptyError) Error

func (m *ConfigurationEmptyError) Error() string

type Policy

type Policy struct {
	Default        []*RulesetReference `yaml:"default"`
	Name           string
	Subscription   []*RulesetReference            `yaml:"subscription"`
	ResourceGroups map[string][]*RulesetReference `yaml:"resourceGroups"`
	Resources      map[string][]*RulesetReference `yaml:"resources"`
}

func (*Policy) GetRulesetReferencesForScope

func (p *Policy) GetRulesetReferencesForScope(scope string, subscriptionId string) []*RulesetReference

type Principal

type Principal struct {
	Name           string
	Subscription   *ScopeConfiguration            `yaml:"subscription"`
	ResourceGroups map[string]*ScopeConfiguration `yaml:"resourceGroups"`
	Resources      map[string]*ScopeConfiguration `yaml:"resources"`
}

type ResourcesConfig

type ResourcesConfig struct {
	Groups   []*Principal                   `validate:"dive"`
	Policies []*Policy                      `validate:"dive"`
	Rulesets []*RoleManagementPolicyRuleset `validate:"dive"`
	Users    []*Principal                   `validate:"dive"`
}

func (*ResourcesConfig) GetGroupAssignmentSchedules

func (c *ResourcesConfig) GetGroupAssignmentSchedules(subscriptionId string) []*Schedule

func (*ResourcesConfig) GetGroupEligibilitySchedules

func (c *ResourcesConfig) GetGroupEligibilitySchedules(subscriptionId string) []*Schedule

func (*ResourcesConfig) GetPolicyByRoleName

func (c *ResourcesConfig) GetPolicyByRoleName(roleName string) *Policy

func (*ResourcesConfig) GetScopeRoleNameCombinations

func (c *ResourcesConfig) GetScopeRoleNameCombinations(subscriptionId string) []*ScopeRoleNameCombination

func (*ResourcesConfig) GetUserAssignmentSchedules

func (c *ResourcesConfig) GetUserAssignmentSchedules(subscriptionId string) []*Schedule

func (*ResourcesConfig) GetUserEligibilitySchedules

func (c *ResourcesConfig) GetUserEligibilitySchedules(subscriptionId string) []*Schedule

func (*ResourcesConfig) Validate

func (c *ResourcesConfig) Validate() error

type RoleAssignmentScheduleCreate

type RoleAssignmentScheduleCreate struct {
	EndDateTime                       *time.Time
	PrincipalName                     string
	PrincipalType                     armauthorization.PrincipalType
	RoleAssignmentScheduleRequest     *armauthorization.RoleAssignmentScheduleRequest
	RoleAssignmentScheduleRequestName string
	RoleName                          string
	Scope                             string
	StartDateTime                     *time.Time
}

type RoleAssignmentScheduleDelete

type RoleAssignmentScheduleDelete struct {
	Cancel                            bool
	EndDateTime                       *time.Time
	PrincipalName                     string
	PrincipalType                     armauthorization.PrincipalType
	RoleAssignmentScheduleRequest     *armauthorization.RoleAssignmentScheduleRequest
	RoleAssignmentScheduleRequestName string
	RoleName                          string
	Scope                             string
	StartDateTime                     *time.Time
}

type RoleAssignmentScheduleUpdate

type RoleAssignmentScheduleUpdate struct {
	EndDateTime                       *time.Time
	PrincipalName                     string
	PrincipalType                     armauthorization.PrincipalType
	RoleAssignmentScheduleRequest     *armauthorization.RoleAssignmentScheduleRequest
	RoleAssignmentScheduleRequestName string
	RoleName                          string
	Scope                             string
	StartDateTime                     *time.Time
}

type RoleEligibilityScheduleCreate

type RoleEligibilityScheduleCreate struct {
	EndDateTime                        *time.Time
	PrincipalName                      string
	PrincipalType                      armauthorization.PrincipalType
	RoleEligibilityScheduleRequest     *armauthorization.RoleEligibilityScheduleRequest
	RoleEligibilityScheduleRequestName string
	RoleName                           string
	Scope                              string
	StartDateTime                      *time.Time
}

type RoleEligibilityScheduleDelete

type RoleEligibilityScheduleDelete struct {
	Cancel                             bool
	EndDateTime                        *time.Time
	PrincipalName                      string
	PrincipalType                      armauthorization.PrincipalType
	RoleEligibilityScheduleRequest     *armauthorization.RoleEligibilityScheduleRequest
	RoleEligibilityScheduleRequestName string
	RoleName                           string
	Scope                              string
	StartDateTime                      *time.Time
}

type RoleEligibilityScheduleUpdate

type RoleEligibilityScheduleUpdate struct {
	EndDateTime                        *time.Time
	PrincipalName                      string
	PrincipalType                      armauthorization.PrincipalType
	RoleEligibilityScheduleRequest     *armauthorization.RoleEligibilityScheduleRequest
	RoleEligibilityScheduleRequestName string
	RoleName                           string
	Scope                              string
	StartDateTime                      *time.Time
}

type RoleManagementPolicyRule

type RoleManagementPolicyRule struct {
	ID    string      `yaml:"id" validate:"required"`
	Patch interface{} `yaml:"patch" validate:"required"`
}

type RoleManagementPolicyRuleset

type RoleManagementPolicyRuleset struct {
	Name  string
	Rules []*RoleManagementPolicyRule `yaml:"rules"`
}

type RoleManagementPolicyUpdate

type RoleManagementPolicyUpdate struct {
	RoleManagementPolicy *armauthorization.RoleManagementPolicy
	RoleName             string
	Scope                string
}

type RulesetReference

type RulesetReference struct {
	RulesetName string `yaml:"rulesetName" validate:"required"`
}

type Schedule

type Schedule struct {
	EndDateTime   *time.Time `yaml:"endDateTime"`
	PrincipalName string
	RoleName      string `yaml:"roleName" validate:"required"`
	Scope         string
	StartDateTime *time.Time `yaml:"startDateTime"`
}

type ScopeConfiguration

type ScopeConfiguration struct {
	Active   []*Schedule `yaml:"active"`
	Eligible []*Schedule `yaml:"eligible"`
}

type ScopeRoleNameCombination

type ScopeRoleNameCombination struct {
	RoleName string
	Scope    string
}