authorization

Documentation

Index

• type MtlsEnabledChecker
  • func (c MtlsEnabledChecker) Check() models.IstioValidations
  • func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set) bool
• type NamespaceMethodChecker
  • func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)
• type NoHostChecker
  • func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)

Types

type MtlsEnabledChecker

type MtlsEnabledChecker struct {
	Namespace             string
	AuthorizationPolicies []security_v1beta.AuthorizationPolicy
	MtlsDetails           kubernetes.MTLSDetails
	ServiceList           models.ServiceList
	ServiceEntries        []networking_v1alpha3.ServiceEntry
	RegistryServices      []*kubernetes.RegistryService
}

func (MtlsEnabledChecker) Check

func (c MtlsEnabledChecker) Check() models.IstioValidations

Checks if mTLS is enabled, mark all Authz Policies with error

func (MtlsEnabledChecker) IsMtlsEnabledFor

func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set) bool

type NamespaceMethodChecker

type NamespaceMethodChecker struct {
	AuthorizationPolicy security_v1beta.AuthorizationPolicy
	Namespaces          models.NamespaceNames
}

func (NamespaceMethodChecker) Check

func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)

type NoHostChecker

type NoHostChecker struct {
	AuthorizationPolicy security_v1beta.AuthorizationPolicy
	Namespace           string
	Namespaces          models.Namespaces
	ServiceEntries      map[string][]string
	ServiceList         models.ServiceList
	VirtualServices     []networking_v1alpha3.VirtualService
	RegistryServices    []*kubernetes.RegistryService
}

func (NoHostChecker) Check

func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)