Documentation ¶
Index ¶
- Variables
- type RBAC
- func (*RBAC) Descriptor() ([]byte, []int)
- func (m *RBAC) GetEnforcementType() RBAC_EnforcementType
- func (m *RBAC) GetRules() *v2alpha.RBAC
- func (m *RBAC) GetShadowRules() *v2alpha.RBAC
- func (m *RBAC) GetStatPrefix() string
- func (m *RBAC) Marshal() (dAtA []byte, err error)
- func (m *RBAC) MarshalTo(dAtA []byte) (int, error)
- func (*RBAC) ProtoMessage()
- func (m *RBAC) Reset()
- func (m *RBAC) Size() (n int)
- func (m *RBAC) String() string
- func (m *RBAC) Unmarshal(dAtA []byte) error
- func (m *RBAC) Validate() error
- func (m *RBAC) XXX_DiscardUnknown()
- func (m *RBAC) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *RBAC) XXX_Merge(src proto.Message)
- func (m *RBAC) XXX_Size() int
- func (m *RBAC) XXX_Unmarshal(b []byte) error
- type RBACValidationError
- type RBAC_EnforcementType
Constants ¶
This section is empty.
Variables ¶
View Source
var ( ErrInvalidLengthRbac = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowRbac = fmt.Errorf("proto: integer overflow") )
View Source
var RBAC_EnforcementType_name = map[int32]string{
0: "ONE_TIME_ON_FIRST_BYTE",
1: "CONTINUOUS",
}
View Source
var RBAC_EnforcementType_value = map[string]int32{
"ONE_TIME_ON_FIRST_BYTE": 0,
"CONTINUOUS": 1,
}
Functions ¶
This section is empty.
Types ¶
type RBAC ¶
type RBAC struct { // Specify the RBAC rules to be applied globally. // If absent, no enforcing RBAC policy will be applied. Rules *v2alpha.RBAC `protobuf:"bytes,1,opt,name=rules,proto3" json:"rules,omitempty"` // Shadow rules are not enforced by the filter but will emit stats and logs // and can be used for rule testing. // If absent, no shadow RBAC policy will be applied. ShadowRules *v2alpha.RBAC `protobuf:"bytes,2,opt,name=shadow_rules,json=shadowRules,proto3" json:"shadow_rules,omitempty"` // The prefix to use when emitting statistics. StatPrefix string `protobuf:"bytes,3,opt,name=stat_prefix,json=statPrefix,proto3" json:"stat_prefix,omitempty"` // RBAC enforcement strategy. By default RBAC will be enforced only once // when the first byte of data arrives from the downstream. When used in // conjunction with filters that emit dynamic metadata after decoding // every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to // CONTINUOUS to enforce RBAC policies on every message boundary. EnforcementType RBAC_EnforcementType `` /* 169-byte string literal not displayed */ XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
RBAC network filter config.
Header should not be used in rules/shadow_rules in RBAC network filter as this information is only available in :ref:`RBAC http filter <config_http_filters_rbac>`.
func (*RBAC) Descriptor ¶
func (*RBAC) GetEnforcementType ¶ added in v0.6.4
func (m *RBAC) GetEnforcementType() RBAC_EnforcementType
func (*RBAC) GetShadowRules ¶
func (*RBAC) GetStatPrefix ¶
func (*RBAC) ProtoMessage ¶
func (*RBAC) ProtoMessage()
func (*RBAC) Validate ¶
Validate checks the field values on RBAC with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.
func (*RBAC) XXX_DiscardUnknown ¶
func (m *RBAC) XXX_DiscardUnknown()
func (*RBAC) XXX_Unmarshal ¶
type RBACValidationError ¶
RBACValidationError is the validation error returned by RBAC.Validate if the designated constraints aren't met.
func (RBACValidationError) Error ¶
func (e RBACValidationError) Error() string
Error satisfies the builtin error interface
type RBAC_EnforcementType ¶ added in v0.6.4
type RBAC_EnforcementType int32
const ( // Apply RBAC policies when the first byte of data arrives on the connection. RBAC_ONE_TIME_ON_FIRST_BYTE RBAC_EnforcementType = 0 // Continuously apply RBAC policies as data arrives. Use this mode when // using RBAC with message oriented protocols such as Mongo, MySQL, Kafka, // etc. when the protocol decoders emit dynamic metadata such as the // resources being accessed and the operations on the resources. RBAC_CONTINUOUS RBAC_EnforcementType = 1 )
func (RBAC_EnforcementType) EnumDescriptor ¶ added in v0.6.4
func (RBAC_EnforcementType) EnumDescriptor() ([]byte, []int)
func (RBAC_EnforcementType) String ¶ added in v0.6.4
func (x RBAC_EnforcementType) String() string
Click to show internal directories.
Click to hide internal directories.