peerauthentications

Documentation

Index

• type DisabledMeshWideChecker
  • func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)
• type DisabledNamespaceWideChecker
  • func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)
• type MeshMtlsChecker
  • func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)
• type NamespaceMtlsChecker
  • func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Types

type DisabledMeshWideChecker

type DisabledMeshWideChecker struct {
	PeerAuthn        kubernetes.IstioObject
	DestinationRules []kubernetes.IstioObject
}

func (DisabledMeshWideChecker) Check

func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)

type DisabledNamespaceWideChecker

type DisabledNamespaceWideChecker struct {
	PeerAuthn        kubernetes.IstioObject
	DestinationRules []kubernetes.IstioObject
}

func (DisabledNamespaceWideChecker) Check

func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)

type MeshMtlsChecker

type MeshMtlsChecker struct {
	// MeshPolicy or ServiceMeshPolicy, it depends of the parent checker
	MeshPolicy    kubernetes.IstioObject
	MTLSDetails   kubernetes.MTLSDetails
	IsServiceMesh bool
}

Note that MeshMtlsChecker will work with MeshPolicy and ServiceMeshPolicy resources

func (MeshMtlsChecker) Check

func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)

type NamespaceMtlsChecker

type NamespaceMtlsChecker struct {
	PeerAuthn   kubernetes.IstioObject
	MTLSDetails kubernetes.MTLSDetails
}

func (NamespaceMtlsChecker) Check

func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Checks if a PeerAuthn enabling namespace-wide has a Destination Rule enabling mTLS too