checkers

Documentation

Index

• Constants
• func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)
• func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations
• type AuthorizationPolicyChecker
  • func (a AuthorizationPolicyChecker) Check() models.IstioValidations
• type Checker
• type DestinationRulesChecker
  • func (in DestinationRulesChecker) Check() models.IstioValidations
• type GatewayChecker
  • func (g GatewayChecker) Check() models.IstioValidations
• type GroupChecker
• type NoServiceChecker
  • func (in NoServiceChecker) Check() models.IstioValidations
• type PeerAuthenticationChecker
  • func (m PeerAuthenticationChecker) Check() models.IstioValidations
• type RequestAuthenticationChecker
  • func (m RequestAuthenticationChecker) Check() models.IstioValidations
• type ServiceChecker
  • func (sc ServiceChecker) Check() models.IstioValidations
• type ServiceEntryChecker
  • func (s ServiceEntryChecker) Check() models.IstioValidations
• type SidecarChecker
  • func (s SidecarChecker) Check() models.IstioValidations
• type VirtualServiceChecker
  • func (in VirtualServiceChecker) Check() models.IstioValidations

Constants

const AuthorizationPolicyCheckerType = "authorizationpolicy"

const DestinationRuleCheckerType = "destinationrule"

const GatewayCheckerType = "gateway"

const PeerAuthenticationCheckerType = "peerauthentication"

const RequestAuthenticationCheckerType = "requestauthentication"

const ServiceCheckerType = "service"

const ServiceEntryCheckerType = "serviceentry"

const ServiceRoleCheckerType = "servicerole"

const SidecarCheckerType = "sidecar"

const VirtualCheckerType = "virtualservice"

Functions

func EmptyValidValidation

func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)

func EmptyValidValidations

func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations

EmptyValidValidation returns a stub validation object which can be used by checkers

Types

type AuthorizationPolicyChecker

type AuthorizationPolicyChecker struct {
	AuthorizationPolicies   []security_v1beta.AuthorizationPolicy
	Namespace               string
	Namespaces              models.Namespaces
	ServiceEntries          []networking_v1alpha3.ServiceEntry
	ExportedServiceEntries  []networking_v1alpha3.ServiceEntry
	ServiceList             models.ServiceList
	WorkloadList            models.WorkloadList
	MtlsDetails             kubernetes.MTLSDetails
	VirtualServices         []networking_v1alpha3.VirtualService
	ExportedVirtualServices []networking_v1alpha3.VirtualService
	RegistryStatus          []*kubernetes.RegistryStatus
}

func (AuthorizationPolicyChecker) Check

func (a AuthorizationPolicyChecker) Check() models.IstioValidations

type Checker

type Checker interface {
	Check() ([]*models.IstioCheck, bool)
}

type DestinationRulesChecker

type DestinationRulesChecker struct {
	DestinationRules         []networking_v1alpha3.DestinationRule
	ExportedDestinationRules []networking_v1alpha3.DestinationRule
	MTLSDetails              kubernetes.MTLSDetails
	ServiceEntries           []networking_v1alpha3.ServiceEntry
	ExportedServiceEntries   []networking_v1alpha3.ServiceEntry
	Namespaces               []models.Namespace
}

func (DestinationRulesChecker) Check

func (in DestinationRulesChecker) Check() models.IstioValidations

type GatewayChecker

type GatewayChecker struct {
	GatewaysPerNamespace  [][]networking_v1alpha3.Gateway
	Namespace             string
	WorkloadsPerNamespace map[string]models.WorkloadList
}

func (GatewayChecker) Check

func (g GatewayChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type GroupChecker

type GroupChecker interface {
	Check() models.IstioValidations
}

type NoServiceChecker

type NoServiceChecker struct {
	Namespace            string
	Namespaces           models.Namespaces
	IstioConfigList      models.IstioConfigList
	ExportedResources    *kubernetes.ExportedResources
	ServiceList          models.ServiceList
	WorkloadList         models.WorkloadList
	GatewaysPerNamespace [][]networking_v1alpha3.Gateway
	AuthorizationDetails *kubernetes.RBACDetails
	RegistryStatus       []*kubernetes.RegistryStatus
}

func (NoServiceChecker) Check

func (in NoServiceChecker) Check() models.IstioValidations

type PeerAuthenticationChecker

type PeerAuthenticationChecker struct {
	PeerAuthentications []security_v1beta.PeerAuthentication
	MTLSDetails         kubernetes.MTLSDetails
	WorkloadList        models.WorkloadList
}

func (PeerAuthenticationChecker) Check

func (m PeerAuthenticationChecker) Check() models.IstioValidations

type RequestAuthenticationChecker

type RequestAuthenticationChecker struct {
	RequestAuthentications []security_v1beta.RequestAuthentication
	WorkloadList           models.WorkloadList
}

func (RequestAuthenticationChecker) Check

func (m RequestAuthenticationChecker) Check() models.IstioValidations

type ServiceChecker

type ServiceChecker struct {
	Services    []v1.Service
	Deployments []apps_v1.Deployment
	Pods        []core_v1.Pod
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() models.IstioValidations

type ServiceEntryChecker

type ServiceEntryChecker struct {
	ServiceEntries         []networking_v1alpha3.ServiceEntry
	ExportedServiceEntries []networking_v1alpha3.ServiceEntry
	Namespaces             models.Namespaces
	WorkloadEntries        []networking_v1alpha3.WorkloadEntry
}

func (ServiceEntryChecker) Check

func (s ServiceEntryChecker) Check() models.IstioValidations

type SidecarChecker

type SidecarChecker struct {
	Sidecars               []networking_v1alpha3.Sidecar
	ServiceEntries         []networking_v1alpha3.ServiceEntry
	ExportedServiceEntries []networking_v1alpha3.ServiceEntry
	ServiceList            models.ServiceList
	Namespaces             models.Namespaces
	WorkloadList           models.WorkloadList
}

func (SidecarChecker) Check

func (s SidecarChecker) Check() models.IstioValidations

type VirtualServiceChecker

type VirtualServiceChecker struct {
	Namespace                string
	Namespaces               models.Namespaces
	DestinationRules         []networking_v1alpha3.DestinationRule
	VirtualServices          []networking_v1alpha3.VirtualService
	ExportedVirtualServices  []networking_v1alpha3.VirtualService
	ExportedDestinationRules []networking_v1alpha3.DestinationRule
}

func (VirtualServiceChecker) Check

func (in VirtualServiceChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.