authorization

Documentation

Index

• type BindingChecker
  • func (sc BindingChecker) Check() ([]*models.IstioCheck, bool)
• type MtlsEnabledChecker
  • func (c MtlsEnabledChecker) Check() models.IstioValidations
• type NamespaceMethodChecker
  • func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)
• type NoHostChecker
  • func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)
• type ServiceChecker
  • func (sc ServiceChecker) Check() ([]*models.IstioCheck, bool)

Types

type BindingChecker

type BindingChecker struct {
	ServiceRoles       []kubernetes.IstioObject
	ServiceRoleBinding kubernetes.IstioObject
}

func (BindingChecker) Check

func (sc BindingChecker) Check() ([]*models.IstioCheck, bool)

type MtlsEnabledChecker

type MtlsEnabledChecker struct {
	Namespace             string
	AuthorizationPolicies []kubernetes.IstioObject
	MtlsDetails           kubernetes.MTLSDetails
}

func (MtlsEnabledChecker) Check

func (c MtlsEnabledChecker) Check() models.IstioValidations

Checks if mTLS is enabled, mark all Authz Policies with error

type NamespaceMethodChecker

type NamespaceMethodChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespaces          models.NamespaceNames
}

func (NamespaceMethodChecker) Check

func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)

type NoHostChecker

type NoHostChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespace           string
	Namespaces          models.Namespaces
	ServiceEntries      map[string][]string
	Services            []core_v1.Service
	VirtualServices     []kubernetes.IstioObject
}

func (NoHostChecker) Check

func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)

type ServiceChecker

type ServiceChecker struct {
	ServiceRole kubernetes.IstioObject
	Services    []core_v1.Service
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() ([]*models.IstioCheck, bool)

Check verifies that the services point to existing ones. ServiceRole can only affect the defined namespace, no other even if FQDN is used to point to different namespace