acl

Aug 14, 2023

Changes in this version

+ const AnonymousTokenAlias

+ const AnonymousTokenID

+ const AnonymousTokenSecret

+ const DefaultNamespaceName

+ const DefaultPartitionName

+ const NodeIdentityNameMaxLength

+ const PolicyNameMaxLength

+ const ReservedBuiltinPrefix

+ const ServiceIdentityNameMaxLength

+ const WildcardName

+ const WildcardPartitionName

+ func ACLResourceNotExistError(resourceType string, entMeta EnterpriseMeta) error

+ func AliasIfAnonymousToken(accessorID string) string

+ func EqualNamespaces(_, _ string) bool

+ func EqualPartitions(_, _ string) bool

+ func IsDefaultPartition(partition string) bool

+ func IsValidAuthMethodName(name string) bool

+ func IsValidNodeIdentityName(name string) bool

+ func IsValidRoleName(name string) bool

+ func IsValidServiceIdentityName(name string) bool

+ func NamespaceOrDefault(_ string) string

+ func NormalizeNamespace(_ string) string

+ func PartitionOrDefault(_ string) string

+ func RequirePermissionDeniedError(t testing.TB, err error, authz Authorizer, _ *AuthorizerContext, ...)

+ func RequirePermissionDeniedMessage(t testing.TB, msg string, authz interface{}, _ *AuthorizerContext, ...)

+ func ValidatePolicyName(name string) error

+ type AccessLevel int

+ const AccessDeny

+ const AccessList

+ const AccessRead

+ const AccessUnknown

+ const AccessWrite

+ func AccessLevelFromString(level string) (AccessLevel, error)

+ func (l AccessLevel) String() string

+ type AgentRule struct

+ Node string

+ Policy string

+ type AllowAuthorizer struct

+ AccessorID string

+ func (a AllowAuthorizer) ACLReadAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) ACLWriteAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) AgentReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) AgentWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) EventReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) EventWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) IntentionDefaultAllowAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) IntentionReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) IntentionWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyListAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyWritePrefixAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyringReadAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) KeyringWriteAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) MeshReadAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) MeshWriteAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) NodeReadAllAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) NodeReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) NodeWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) OperatorReadAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) OperatorWriteAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) PeeringReadAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) PeeringWriteAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) PreparedQueryReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) PreparedQueryWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) ServiceReadAllAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) ServiceReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) ServiceWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) ServiceWriteAnyAllowed(ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) SessionReadAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) SessionWriteAllowed(name string, ctx *AuthorizerContext) error

+ func (a AllowAuthorizer) SnapshotAllowed(ctx *AuthorizerContext) error

type Authorizer

+ func NewAuthorizerFromRules(rules string, conf *Config, meta *EnterprisePolicyMeta) (Authorizer, error)

+ func NewPolicyAuthorizerWithDefaults(defaultAuthz Authorizer, policies []*Policy, entConfig *Config) (Authorizer, error)

+ MeshRead func(*AuthorizerContext) EnforcementDecision

+ MeshWrite func(*AuthorizerContext) EnforcementDecision

+ NodeReadAll func(*AuthorizerContext) EnforcementDecision

+ PeeringRead func(*AuthorizerContext) EnforcementDecision

+ PeeringWrite func(*AuthorizerContext) EnforcementDecision

+ ServiceReadAll func(*AuthorizerContext) EnforcementDecision

+ ServiceWriteAny func(*AuthorizerContext) EnforcementDecision

+ ToAllowAuthorizer func() AllowAuthorizer

+ type AuthorizerContext struct

+ Peer string

+ func (c *AuthorizerContext) PeerOrEmpty() string

+ type ChainedAuthorizer struct

+ func NewChainedAuthorizer(chain []Authorizer) *ChainedAuthorizer

+ func (c *ChainedAuthorizer) ACLRead(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ACLWrite(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) AgentRead(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) AgentWrite(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) AuthorizerChain() []Authorizer

+ func (c *ChainedAuthorizer) EventRead(name string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) EventWrite(name string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) IntentionDefaultAllow(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) IntentionRead(prefix string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) IntentionWrite(prefix string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyList(keyPrefix string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyRead(key string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyWrite(key string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyWritePrefix(keyPrefix string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyringRead(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) KeyringWrite(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) MeshRead(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) MeshWrite(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) NodeRead(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) NodeReadAll(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) NodeWrite(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) OperatorRead(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) OperatorWrite(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) PeeringRead(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) PeeringWrite(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) PreparedQueryRead(query string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) PreparedQueryWrite(query string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ServiceRead(name string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ServiceReadAll(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ServiceWrite(name string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ServiceWriteAny(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) SessionRead(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) SessionWrite(node string, entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) Snapshot(entCtx *AuthorizerContext) EnforcementDecision

+ func (c *ChainedAuthorizer) ToAllowAuthorizer() AllowAuthorizer

+ type Config struct

+ WildcardName string

+ func (c *Config) Close()

+ func (c *Config) GetWildcardName() string

+ type EnforcementDecision int

+ const Allow

+ const Default

+ const Deny

+ func Enforce(authz Authorizer, rsc Resource, segment string, access string, ...) (EnforcementDecision, error)

+ func (d EnforcementDecision) String() string

+ type EnterpriseConfig struct

+ func (_ *EnterpriseConfig) Close()

+ type EnterpriseMeta struct

+ func DefaultEnterpriseMeta() *EnterpriseMeta

+ func NewEnterpriseMetaWithPartition(_, _ string) EnterpriseMeta

+ func WildcardEnterpriseMeta() *EnterpriseMeta

+ func (_ *EnterpriseMeta) FillAuthzContext(_ *AuthorizerContext)

+ func (_ *EnterpriseMeta) Normalize()

+ func (_ *EnterpriseMeta) NormalizeNamespace()

+ func (_ *EnterpriseMeta) NormalizePartition()

+ func (m *EnterpriseMeta) AddToHash(_ hash.Hash, _ bool)

+ func (m *EnterpriseMeta) EstimateSize() int

+ func (m *EnterpriseMeta) InDefaultNamespace() bool

+ func (m *EnterpriseMeta) InDefaultPartition() bool

+ func (m *EnterpriseMeta) IsSame(_ *EnterpriseMeta) bool

+ func (m *EnterpriseMeta) LessThan(_ *EnterpriseMeta) bool

+ func (m *EnterpriseMeta) Matches(_ *EnterpriseMeta) bool

+ func (m *EnterpriseMeta) Merge(_ *EnterpriseMeta)

+ func (m *EnterpriseMeta) MergeNoWildcard(_ *EnterpriseMeta)

+ func (m *EnterpriseMeta) NamespaceOrDefault() string

+ func (m *EnterpriseMeta) NamespaceOrEmpty() string

+ func (m *EnterpriseMeta) OverridePartition(_ string)

+ func (m *EnterpriseMeta) PartitionOrDefault() string

+ func (m *EnterpriseMeta) PartitionOrEmpty() string

+ func (m *EnterpriseMeta) ToEnterprisePolicyMeta() *EnterprisePolicyMeta

+ func (m *EnterpriseMeta) UnsetPartition()

+ func (m *EnterpriseMeta) WithWildcardNamespace() *EnterpriseMeta

+ type EnterprisePolicyMeta struct

+ type EnterprisePolicyRules struct

+ func (r *EnterprisePolicyRules) Validate(*Config) error

+ type EnterpriseRule struct

+ func (r *EnterpriseRule) Validate(string, *Config) error

+ type EventRule struct

+ Event string

+ Policy string

+ type ExportFetcher interface

+ ExportsForPartition func(partition string) ExportedServices

+ type ExportedServices struct

+ Data map[string]map[string][]string

+ type KeyRule struct

+ Policy string

+ Prefix string

+ type MockAuthorizer struct

+ func (m *MockAuthorizer) ACLRead(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) ACLWrite(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) AgentRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) AgentWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) EventRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) EventWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) IntentionDefaultAllow(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) IntentionRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) IntentionWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyList(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyWritePrefix(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyringRead(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) KeyringWrite(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) MeshRead(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) MeshWrite(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) NamespaceRead(s string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) NamespaceWrite(s string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) NodeRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) NodeReadAll(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) NodeWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) OperatorRead(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) OperatorWrite(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) PeeringRead(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) PeeringWrite(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) PreparedQueryRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) PreparedQueryWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) ServiceRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) ServiceReadAll(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) ServiceWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) ServiceWriteAny(ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) SessionRead(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) SessionWrite(segment string, ctx *AuthorizerContext) EnforcementDecision

+ func (m *MockAuthorizer) Snapshot(ctx *AuthorizerContext) EnforcementDecision

+ func (p *MockAuthorizer) ToAllowAuthorizer() AllowAuthorizer

+ type NodeRule struct

+ Name string

+ Policy string

type PermissionDeniedError

+ AccessLevel AccessLevel

+ Accessor string

+ Resource Resource

+ ResourceID ResourceDescriptor

+ func PermissionDenied(msg string, args ...interface{}) PermissionDeniedError

+ func PermissionDeniedByACL(authz Authorizer, context *AuthorizerContext, resource Resource, ...) PermissionDeniedError

+ func PermissionDeniedByACLUnnamed(authz Authorizer, context *AuthorizerContext, resource Resource, ...) PermissionDeniedError

+ type PolicyMerger struct

+ func (m *PolicyMerger) Merge(policy *Policy)

+ func (m *PolicyMerger) Policy() *Policy

+ type PolicyRules struct

+ ACL string

+ AgentPrefixes []*AgentRule

+ Agents []*AgentRule

+ EventPrefixes []*EventRule

+ Events []*EventRule

+ KeyPrefixes []*KeyRule

+ Keyring string

+ Keys []*KeyRule

+ Mesh string

+ NodePrefixes []*NodeRule

+ Nodes []*NodeRule

+ Operator string

+ Peering string

+ PreparedQueries []*PreparedQueryRule

+ PreparedQueryPrefixes []*PreparedQueryRule

+ ServicePrefixes []*ServiceRule

+ Services []*ServiceRule

+ SessionPrefixes []*SessionRule

+ Sessions []*SessionRule

+ func (pr *PolicyRules) Validate(conf *Config) error

+ type PreparedQueryRule struct

+ Policy string

+ Prefix string

+ type Resource string

+ const ResourceACL

+ const ResourceAgent

+ const ResourceEvent

+ const ResourceIntention

+ const ResourceKey

+ const ResourceKeyring

+ const ResourceMesh

+ const ResourceNode

+ const ResourceOperator

+ const ResourcePeering

+ const ResourceQuery

+ const ResourceService

+ const ResourceSession

+ type ResourceDescriptor struct

+ Name string

+ func NewResourceDescriptor(name string, _ *AuthorizerContext) ResourceDescriptor

+ func (od *ResourceDescriptor) ToString() string

+ type ServiceRule struct

+ Intentions string

+ Name string

+ Policy string

+ type SessionRule struct

+ Node string

+ Policy string

Nov 14, 2018

Changes in this version

+ var ErrInvalidParent = errors.New(errInvalidParent)

+ func TranslateLegacyRules(policyBytes []byte) ([]byte, error)

+ type Authorizer interface

+ ACLRead func() bool

+ ACLWrite func() bool

+ AgentRead func(string) bool

+ AgentWrite func(string) bool

+ EventRead func(string) bool

+ EventWrite func(string) bool

+ IntentionDefaultAllow func() bool

+ IntentionRead func(string) bool

+ IntentionWrite func(string) bool

+ KeyList func(string) bool

+ KeyRead func(string) bool

+ KeyWrite func(string, sentinel.ScopeFn) bool

+ KeyWritePrefix func(string) bool

+ KeyringRead func() bool

+ KeyringWrite func() bool

+ NodeRead func(string) bool

+ NodeWrite func(string, sentinel.ScopeFn) bool

+ OperatorRead func() bool

+ OperatorWrite func() bool

+ PreparedQueryRead func(string) bool

+ PreparedQueryWrite func(string) bool

+ ServiceRead func(string) bool

+ ServiceWrite func(string, sentinel.ScopeFn) bool

+ SessionRead func(string) bool

+ SessionWrite func(string) bool

+ Snapshot func() bool

+ func RootAuthorizer(id string) Authorizer

type Policy

+ ACL string

+ AgentPrefixes []*AgentPolicy

+ EventPrefixes []*EventPolicy

+ KeyPrefixes []*KeyPolicy

+ NodePrefixes []*NodePolicy

+ PreparedQueryPrefixes []*PreparedQueryPolicy

+ Revision uint64

+ ServicePrefixes []*ServicePolicy

+ SessionPrefixes []*SessionPolicy

+ func MergePolicies(policies []*Policy) *Policy

+ func NewPolicyFromSource(id string, revision uint64, rules string, syntax SyntaxVersion, ...) (*Policy, error)

+ func (policy *Policy) ConvertFromLegacy() *Policy

+ func (policy *Policy) ConvertToLegacy() *Policy

+ type PolicyAuthorizer struct

+ func NewPolicyAuthorizer(parent Authorizer, policies []*Policy, sentinel sentinel.Evaluator) (*PolicyAuthorizer, error)

+ func (p *PolicyAuthorizer) ACLRead() bool

+ func (p *PolicyAuthorizer) ACLWrite() bool

+ func (p *PolicyAuthorizer) AgentRead(node string) bool

+ func (p *PolicyAuthorizer) AgentWrite(node string) bool

+ func (p *PolicyAuthorizer) EventRead(name string) bool

+ func (p *PolicyAuthorizer) EventWrite(name string) bool

+ func (p *PolicyAuthorizer) IntentionDefaultAllow() bool

+ func (p *PolicyAuthorizer) IntentionRead(prefix string) bool

+ func (p *PolicyAuthorizer) IntentionWrite(prefix string) bool

+ func (p *PolicyAuthorizer) KeyList(key string) bool

+ func (p *PolicyAuthorizer) KeyRead(key string) bool

+ func (p *PolicyAuthorizer) KeyWrite(key string, scope sentinel.ScopeFn) bool

+ func (p *PolicyAuthorizer) KeyWritePrefix(prefix string) bool

+ func (p *PolicyAuthorizer) KeyringRead() bool

+ func (p *PolicyAuthorizer) KeyringWrite() bool

+ func (p *PolicyAuthorizer) NodeRead(name string) bool

+ func (p *PolicyAuthorizer) NodeWrite(name string, scope sentinel.ScopeFn) bool

+ func (p *PolicyAuthorizer) OperatorRead() bool

+ func (p *PolicyAuthorizer) OperatorWrite() bool

+ func (p *PolicyAuthorizer) PreparedQueryRead(prefix string) bool

+ func (p *PolicyAuthorizer) PreparedQueryWrite(prefix string) bool

+ func (p *PolicyAuthorizer) ServiceRead(name string) bool

+ func (p *PolicyAuthorizer) ServiceWrite(name string, scope sentinel.ScopeFn) bool

+ func (p *PolicyAuthorizer) SessionRead(node string) bool

+ func (p *PolicyAuthorizer) SessionWrite(node string) bool

+ func (p *PolicyAuthorizer) Snapshot() bool

+ type RulePolicy struct

+ type StaticAuthorizer struct

+ func (s *StaticAuthorizer) ACLRead() bool

+ func (s *StaticAuthorizer) ACLWrite() bool

+ func (s *StaticAuthorizer) AgentRead(string) bool

+ func (s *StaticAuthorizer) AgentWrite(string) bool

+ func (s *StaticAuthorizer) EventRead(string) bool

+ func (s *StaticAuthorizer) EventWrite(string) bool

+ func (s *StaticAuthorizer) IntentionDefaultAllow() bool

+ func (s *StaticAuthorizer) IntentionRead(string) bool

+ func (s *StaticAuthorizer) IntentionWrite(string) bool

+ func (s *StaticAuthorizer) KeyList(string) bool

+ func (s *StaticAuthorizer) KeyRead(string) bool

+ func (s *StaticAuthorizer) KeyWrite(string, sentinel.ScopeFn) bool

+ func (s *StaticAuthorizer) KeyWritePrefix(string) bool

+ func (s *StaticAuthorizer) KeyringRead() bool

+ func (s *StaticAuthorizer) KeyringWrite() bool

+ func (s *StaticAuthorizer) NodeRead(string) bool

+ func (s *StaticAuthorizer) NodeWrite(string, sentinel.ScopeFn) bool

+ func (s *StaticAuthorizer) OperatorRead() bool

+ func (s *StaticAuthorizer) OperatorWrite() bool

+ func (s *StaticAuthorizer) PreparedQueryRead(string) bool

+ func (s *StaticAuthorizer) PreparedQueryWrite(string) bool

+ func (s *StaticAuthorizer) ServiceRead(string) bool

+ func (s *StaticAuthorizer) ServiceWrite(string, sentinel.ScopeFn) bool

+ func (s *StaticAuthorizer) SessionRead(string) bool

+ func (s *StaticAuthorizer) SessionWrite(string) bool

+ func (s *StaticAuthorizer) Snapshot() bool

+ type SyntaxVersion int

+ const SyntaxCurrent

+ const SyntaxLegacy

Jun 25, 2018

Changes in this version

type ACL

+ IntentionDefaultAllow func() bool

+ IntentionRead func(string) bool

+ IntentionWrite func(string) bool

type PolicyACL

+ func (p *PolicyACL) IntentionDefaultAllow() bool

+ func (p *PolicyACL) IntentionRead(prefix string) bool

+ func (p *PolicyACL) IntentionWrite(prefix string) bool

type ServicePolicy

+ Intentions string

type StaticACL

+ func (s *StaticACL) IntentionDefaultAllow() bool

+ func (s *StaticACL) IntentionRead(string) bool

+ func (s *StaticACL) IntentionWrite(string) bool

Oct 16, 2017

Changes in this version

+ const DefaultPolicyEnforcementLevel

+ const PolicyList

type ACL

+ KeyList func(string) bool

type KeyPolicy

+ Sentinel Sentinel

type NodePolicy

+ Sentinel Sentinel

type PolicyACL

+ func (p *PolicyACL) KeyList(key string) bool

+ type PolicyRule struct

+ type Sentinel struct

+ Code string

+ EnforcementLevel string

type ServicePolicy

+ Sentinel Sentinel

type StaticACL

+ func (s *StaticACL) KeyList(string) bool

Sep 8, 2017

Changes in this version

+ var ErrDisabled = errors.New(errDisabled)

+ var ErrNotFound = errors.New(errNotFound)

+ var ErrPermissionDenied = PermissionDeniedError

+ var ErrRootDenied = errors.New(errRootDenied)

+ func IsErrDisabled(err error) bool

+ func IsErrNotFound(err error) bool

+ func IsErrPermissionDenied(err error) bool

+ func IsErrRootDenied(err error) bool

+ type PermissionDeniedError struct

+ Cause string

+ func (e PermissionDeniedError) Error() string

Dec 19, 2016

Changes in this version

type ACL

+ AgentRead func(string) bool

+ AgentWrite func(string) bool

+ NodeRead func(string) bool

+ NodeWrite func(string) bool

+ SessionRead func(string) bool

+ SessionWrite func(string) bool

+ type AgentPolicy struct

+ Node string

+ Policy string

+ func (a *AgentPolicy) GoString() string

+ type NodePolicy struct

+ Name string

+ Policy string

+ func (n *NodePolicy) GoString() string

type Policy

+ Agents []*AgentPolicy

+ Nodes []*NodePolicy

+ Sessions []*SessionPolicy

type PolicyACL

+ func (p *PolicyACL) AgentRead(node string) bool

+ func (p *PolicyACL) AgentWrite(node string) bool

+ func (p *PolicyACL) NodeRead(name string) bool

+ func (p *PolicyACL) NodeWrite(name string) bool

+ func (p *PolicyACL) SessionRead(node string) bool

+ func (p *PolicyACL) SessionWrite(node string) bool

+ type SessionPolicy struct

+ Node string

+ Policy string

+ func (s *SessionPolicy) GoString() string

type StaticACL

+ func (s *StaticACL) AgentRead(string) bool

+ func (s *StaticACL) AgentWrite(string) bool

+ func (s *StaticACL) NodeRead(string) bool

+ func (s *StaticACL) NodeWrite(string) bool

+ func (s *StaticACL) SessionRead(string) bool

+ func (s *StaticACL) SessionWrite(string) bool

Nov 10, 2016

Changes in this version

type ACL

+ Snapshot func() bool

type PolicyACL

+ func (p *PolicyACL) Snapshot() bool

type StaticACL

+ func (s *StaticACL) Snapshot() bool

Sep 14, 2016

Changes in this version

+ func RuleID(rules string) string

type ACL

+ OperatorRead func() bool

+ OperatorWrite func() bool

type Policy

+ Operator string

type PolicyACL

+ func (p *PolicyACL) OperatorRead() bool

+ func (p *PolicyACL) OperatorWrite() bool

type StaticACL

+ func (s *StaticACL) OperatorRead() bool

+ func (s *StaticACL) OperatorWrite() bool

Mar 16, 2016

Changes in this version

+ const PolicyDeny

+ const PolicyRead

+ const PolicyWrite

type ACL

+ PreparedQueryRead func(string) bool

+ PreparedQueryWrite func(string) bool

type Policy

+ PreparedQueries []*PreparedQueryPolicy

type PolicyACL

+ func (p *PolicyACL) PreparedQueryRead(prefix string) bool

+ func (p *PolicyACL) PreparedQueryWrite(prefix string) bool

+ type PreparedQueryPolicy struct

+ Policy string

+ Prefix string

+ func (e *PreparedQueryPolicy) GoString() string

type StaticACL

+ func (s *StaticACL) PreparedQueryRead(string) bool

+ func (s *StaticACL) PreparedQueryWrite(string) bool

Dec 3, 2015

Changes in this version

+ const EventPolicyDeny

+ const EventPolicyRead

+ const EventPolicyWrite

+ const KeyringPolicyDeny

+ const KeyringPolicyRead

+ const KeyringPolicyWrite

type ACL

+ EventRead func(string) bool

+ EventWrite func(string) bool

+ KeyringRead func() bool

+ KeyringWrite func() bool

+ QueryList func() bool

+ QueryModify func() bool

+ type EventPolicy struct

+ Event string

+ Policy string

+ func (e *EventPolicy) GoString() string

type Policy

+ Events []*EventPolicy

+ Keyring string

type PolicyACL

+ func (p *PolicyACL) EventRead(name string) bool

+ func (p *PolicyACL) EventWrite(name string) bool

+ func (p *PolicyACL) KeyringRead() bool

+ func (p *PolicyACL) KeyringWrite() bool

+ func (p *PolicyACL) QueryList() bool

+ func (p *PolicyACL) QueryModify() bool

type StaticACL

+ func (s *StaticACL) EventRead(string) bool

+ func (s *StaticACL) EventWrite(string) bool

+ func (s *StaticACL) KeyringRead() bool

+ func (s *StaticACL) KeyringWrite() bool

+ func (s *StaticACL) QueryList() bool

+ func (s *StaticACL) QueryModify() bool

Feb 19, 2015

Changes in this version

+ const ServicePolicyDeny

+ const ServicePolicyRead

+ const ServicePolicyWrite

type ACL

+ ServiceRead func(string) bool

+ ServiceWrite func(string) bool

type Policy

+ Services []*ServicePolicy

type PolicyACL

+ func (p *PolicyACL) ServiceRead(name string) bool

+ func (p *PolicyACL) ServiceWrite(name string) bool

+ type ServicePolicy struct

+ Name string

+ Policy string

+ func (k *ServicePolicy) GoString() string

type StaticACL

+ func (s *StaticACL) ServiceRead(string) bool

+ func (s *StaticACL) ServiceWrite(string) bool

Sep 5, 2014

Changes in this version

+ const KeyPolicyDeny

+ const KeyPolicyRead

+ const KeyPolicyWrite

+ type ACL interface

+ ACLList func() bool

+ ACLModify func() bool

+ KeyRead func(string) bool

+ KeyWrite func(string) bool

+ KeyWritePrefix func(string) bool

+ func AllowAll() ACL

+ func DenyAll() ACL

+ func ManageAll() ACL

+ func RootACL(id string) ACL

+ type Cache struct

+ func NewCache(size int, faultfn FaultFunc) (*Cache, error)

+ func (c *Cache) ClearACL(id string)

+ func (c *Cache) GetACL(id string) (ACL, error)

+ func (c *Cache) GetACLPolicy(id string) (string, *Policy, error)

+ func (c *Cache) GetPolicy(rules string) (*Policy, error)

+ func (c *Cache) Purge()

+ type FaultFunc func(id string) (string, string, error)

+ type KeyPolicy struct

+ Policy string

+ Prefix string

+ func (k *KeyPolicy) GoString() string

+ type Policy struct

+ ID string

+ Keys []*KeyPolicy

+ func Parse(rules string) (*Policy, error)

+ type PolicyACL struct

+ func New(parent ACL, policy *Policy) (*PolicyACL, error)

+ func (p *PolicyACL) ACLList() bool

+ func (p *PolicyACL) ACLModify() bool

+ func (p *PolicyACL) KeyRead(key string) bool

+ func (p *PolicyACL) KeyWrite(key string) bool

+ func (p *PolicyACL) KeyWritePrefix(prefix string) bool

+ type StaticACL struct

+ func (s *StaticACL) ACLList() bool

+ func (s *StaticACL) ACLModify() bool

+ func (s *StaticACL) KeyRead(string) bool

+ func (s *StaticACL) KeyWrite(string) bool

+ func (s *StaticACL) KeyWritePrefix(string) bool