checkers

Documentation

Index

• Constants
• func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)
• func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations
• type AuthorizationPolicyChecker
  • func (a AuthorizationPolicyChecker) Check() models.IstioValidations
• type Checker
• type DestinationRulesChecker
  • func (in DestinationRulesChecker) Check() models.IstioValidations
• type GatewayChecker
  • func (g GatewayChecker) Check() models.IstioValidations
• type GroupChecker
• type NoServiceChecker
  • func (in NoServiceChecker) Check() models.IstioValidations
• type PeerAuthenticationChecker
  • func (m PeerAuthenticationChecker) Check() models.IstioValidations
• type RequestAuthenticationChecker
  • func (m RequestAuthenticationChecker) Check() models.IstioValidations
• type ServiceChecker
  • func (sc ServiceChecker) Check() models.IstioValidations
• type ServiceEntryChecker
  • func (s ServiceEntryChecker) Check() models.IstioValidations
• type ServiceRoleBindChecker
  • func (s ServiceRoleBindChecker) Check() models.IstioValidations
• type SidecarChecker
  • func (s SidecarChecker) Check() models.IstioValidations
• type VirtualServiceChecker
  • func (in VirtualServiceChecker) Check() models.IstioValidations

Constants

const AuthorizationPolicyCheckerType = "authorizationpolicy"

const DestinationRuleCheckerType = "destinationrule"

const GatewayCheckerType = "gateway"

const PeerAuthenticationCheckerType = "peerauthentication"

const RequestAuthenticationCheckerType = "requestauthentication"

const ServiceCheckerType = "service"

const ServiceEntryCheckerType = "serviceentry"

const ServiceRoleBindingCheckerType = "servicerolebinding"

const ServiceRoleCheckerType = "servicerole"

const SidecarCheckerType = "sidecar"

const VirtualCheckerType = "virtualservice"

Functions

func EmptyValidValidation

func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)

func EmptyValidValidations

func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations

EmptyValidValidation returns a stub validation object which can be used by checkers

Types

type AuthorizationPolicyChecker

type AuthorizationPolicyChecker struct {
	AuthorizationPolicies []kubernetes.IstioObject
	Namespace             string
	Namespaces            models.Namespaces
	ServiceEntries        []kubernetes.IstioObject
	Services              []core_v1.Service
	WorkloadList          models.WorkloadList
	MtlsDetails           kubernetes.MTLSDetails
	VirtualServices       []kubernetes.IstioObject
}

func (AuthorizationPolicyChecker) Check

func (a AuthorizationPolicyChecker) Check() models.IstioValidations

type Checker

type Checker interface {
	Check() ([]*models.IstioCheck, bool)
}

type DestinationRulesChecker

type DestinationRulesChecker struct {
	DestinationRules []kubernetes.IstioObject
	MTLSDetails      kubernetes.MTLSDetails
	ServiceEntries   []kubernetes.IstioObject
	Namespaces       []models.Namespace
}

func (DestinationRulesChecker) Check

func (in DestinationRulesChecker) Check() models.IstioValidations

type GatewayChecker

type GatewayChecker struct {
	GatewaysPerNamespace [][]kubernetes.IstioObject
	Namespace            string
	WorkloadList         models.WorkloadList
}

func (GatewayChecker) Check

func (g GatewayChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type GroupChecker

type GroupChecker interface {
	Check() models.IstioValidations
}

type NoServiceChecker

type NoServiceChecker struct {
	Namespace            string
	Namespaces           models.Namespaces
	IstioDetails         *kubernetes.IstioDetails
	Services             []core_v1.Service
	WorkloadList         models.WorkloadList
	GatewaysPerNamespace [][]kubernetes.IstioObject
	AuthorizationDetails *kubernetes.RBACDetails
}

func (NoServiceChecker) Check

func (in NoServiceChecker) Check() models.IstioValidations

type PeerAuthenticationChecker

type PeerAuthenticationChecker struct {
	PeerAuthentications []kubernetes.IstioObject
	MTLSDetails         kubernetes.MTLSDetails
	WorkloadList        models.WorkloadList
}

func (PeerAuthenticationChecker) Check

func (m PeerAuthenticationChecker) Check() models.IstioValidations

type RequestAuthenticationChecker

type RequestAuthenticationChecker struct {
	RequestAuthentications []kubernetes.IstioObject
	WorkloadList           models.WorkloadList
}

func (RequestAuthenticationChecker) Check

func (m RequestAuthenticationChecker) Check() models.IstioValidations

type ServiceChecker

type ServiceChecker struct {
	Services    []v1.Service
	Deployments []apps_v1.Deployment
	Pods        []core_v1.Pod
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() models.IstioValidations

type ServiceEntryChecker

type ServiceEntryChecker struct {
	ServiceEntries []kubernetes.IstioObject
}

func (ServiceEntryChecker) Check

func (s ServiceEntryChecker) Check() models.IstioValidations

type ServiceRoleBindChecker

type ServiceRoleBindChecker struct {
	RBACDetails kubernetes.RBACDetails
}

func (ServiceRoleBindChecker) Check

func (s ServiceRoleBindChecker) Check() models.IstioValidations

type SidecarChecker

type SidecarChecker struct {
	Sidecars       []kubernetes.IstioObject
	ServiceEntries []kubernetes.IstioObject
	Services       []core_v1.Service
	Namespaces     models.Namespaces
	WorkloadList   models.WorkloadList
}

func (SidecarChecker) Check

func (s SidecarChecker) Check() models.IstioValidations

type VirtualServiceChecker

type VirtualServiceChecker struct {
	Namespace        string
	Namespaces       models.Namespaces
	DestinationRules []kubernetes.IstioObject
	VirtualServices  []kubernetes.IstioObject
}

func (VirtualServiceChecker) Check

func (in VirtualServiceChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.