security

Documentation

Index

• type Credentials
  • func (c *Credentials) GetHTTPAuthHeader() (headerName string, headerValue string, err error)
  • func (c *Credentials) Obfuscate()
  • func (c *Credentials) ValidateCredentials() error
• type Identity
  • func (i *Identity) Obfuscate()
• type TLS

Types

type Credentials

type Credentials struct {
	Username   string `yaml:",omitempty"`
	Passphrase string `yaml:",omitempty"`
	Token      string `yaml:",omitempty"`
}

Credentials provides information when needing to authenticate to remote endpoints. Credentials are either a username/password or a bearer token, but not both.

func (*Credentials) GetHTTPAuthHeader

func (c *Credentials) GetHTTPAuthHeader() (headerName string, headerValue string, err error)

GetHTTPAuthHeader provides the authentication ehader name and value (can be empty), or an error

func (*Credentials) Obfuscate

func (c *Credentials) Obfuscate()

func (*Credentials) ValidateCredentials

func (c *Credentials) ValidateCredentials() error

ValidateCredentials makes sure that if username is provided, so is passphrase (and vice versa) and also makes sure if username/passphrase is provided that token is not (and vice versa). It is valid to have nothing defined (no username, passphrase, nor token), but if nothing is defined, this usually means the person who installed Kiali most likely forgot to set credentials - therefore access should always be denied.

type Identity

type Identity struct {
	CertFile       string `yaml:"cert_file"`
	PrivateKeyFile string `yaml:"private_key_file"`
}

Identity security details about a client.

func (*Identity) Obfuscate

func (i *Identity) Obfuscate()

type TLS

type TLS struct {
	SkipCertificateValidation bool `yaml:"skip_certificate_validation,omitempty"`
}

TLS options - SkipCertificateValidation will disable server certificate verification - the client will accept any certificate presented by the server and any host name in that certificate.