authorization

Documentation

Index

• type MtlsEnabledChecker
  • func (c MtlsEnabledChecker) Check() models.IstioValidations
  • func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set) bool
• type NamespaceMethodChecker
  • func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)
• type NoHostChecker
  • func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)

Types

type MtlsEnabledChecker

type MtlsEnabledChecker struct {
	Namespace             string
	AuthorizationPolicies []kubernetes.IstioObject
	MtlsDetails           kubernetes.MTLSDetails
	Services              []v1.Service
	ServiceEntries        []kubernetes.IstioObject
}

func (MtlsEnabledChecker) Check

func (c MtlsEnabledChecker) Check() models.IstioValidations

Checks if mTLS is enabled, mark all Authz Policies with error

func (MtlsEnabledChecker) IsMtlsEnabledFor

func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set) bool

type NamespaceMethodChecker

type NamespaceMethodChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespaces          models.NamespaceNames
}

func (NamespaceMethodChecker) Check

func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)

type NoHostChecker

type NoHostChecker struct {
	AuthorizationPolicy kubernetes.IstioObject
	Namespace           string
	Namespaces          models.Namespaces
	ServiceEntries      map[string][]string
	Services            []core_v1.Service
	VirtualServices     []kubernetes.IstioObject
	RegistryStatus      []*kubernetes.RegistryStatus
}

func (NoHostChecker) Check

func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)