checkers

Documentation

Index

• Constants
• func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)
• func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations
• type AuthorizationPolicyChecker
  • func (a AuthorizationPolicyChecker) Check() models.IstioValidations
• type Checker
• type DestinationRulesChecker
  • func (in DestinationRulesChecker) Check() models.IstioValidations
• type GatewayChecker
  • func (g GatewayChecker) Check() models.IstioValidations
• type GroupChecker
• type NoServiceChecker
  • func (in NoServiceChecker) Check() models.IstioValidations
• type PeerAuthenticationChecker
  • func (m PeerAuthenticationChecker) Check() models.IstioValidations
• type RequestAuthenticationChecker
  • func (m RequestAuthenticationChecker) Check() models.IstioValidations
• type ServiceChecker
  • func (sc ServiceChecker) Check() models.IstioValidations
• type ServiceEntryChecker
  • func (s ServiceEntryChecker) Check() models.IstioValidations
• type SidecarChecker
  • func (s SidecarChecker) Check() models.IstioValidations
• type VirtualServiceChecker
  • func (in VirtualServiceChecker) Check() models.IstioValidations
• type WorkloadChecker
  • func (w WorkloadChecker) Check() models.IstioValidations

Constants

const AuthorizationPolicyCheckerType = "authorizationpolicy"

const DestinationRuleCheckerType = "destinationrule"

const GatewayCheckerType = "gateway"

const PeerAuthenticationCheckerType = "peerauthentication"

const RequestAuthenticationCheckerType = "requestauthentication"

const ServiceCheckerType = "service"

const ServiceEntryCheckerType = "serviceentry"

const ServiceRoleCheckerType = "servicerole"

const SidecarCheckerType = "sidecar"

const VirtualCheckerType = "virtualservice"

const WorkloadCheckerType = "workload"

Functions

func EmptyValidValidation

func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)

func EmptyValidValidations

func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations

EmptyValidValidation returns a stub validation object which can be used by checkers

Types

type AuthorizationPolicyChecker

type AuthorizationPolicyChecker struct {
	AuthorizationPolicies []security_v1beta.AuthorizationPolicy
	Namespace             string
	Namespaces            models.Namespaces
	ServiceEntries        []networking_v1beta1.ServiceEntry
	WorkloadList          models.WorkloadList
	MtlsDetails           kubernetes.MTLSDetails
	VirtualServices       []networking_v1beta1.VirtualService
	RegistryServices      []*kubernetes.RegistryService
}

func (AuthorizationPolicyChecker) Check

func (a AuthorizationPolicyChecker) Check() models.IstioValidations

type Checker

type Checker interface {
	Check() ([]*models.IstioCheck, bool)
}

type DestinationRulesChecker

type DestinationRulesChecker struct {
	DestinationRules []networking_v1beta1.DestinationRule
	MTLSDetails      kubernetes.MTLSDetails
	ServiceEntries   []networking_v1beta1.ServiceEntry
	Namespaces       []models.Namespace
}

func (DestinationRulesChecker) Check

func (in DestinationRulesChecker) Check() models.IstioValidations

type GatewayChecker

type GatewayChecker struct {
	Gateways              []networking_v1beta1.Gateway
	Namespace             string
	WorkloadsPerNamespace map[string]models.WorkloadList
	IsGatewayToNamespace  bool
}

func (GatewayChecker) Check

func (g GatewayChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type GroupChecker

type GroupChecker interface {
	Check() models.IstioValidations
}

type NoServiceChecker

type NoServiceChecker struct {
	Namespace             string
	Namespaces            models.Namespaces
	IstioConfigList       *models.IstioConfigList
	WorkloadsPerNamespace map[string]models.WorkloadList
	AuthorizationDetails  *kubernetes.RBACDetails
	RegistryServices      []*kubernetes.RegistryService
}

func (NoServiceChecker) Check

func (in NoServiceChecker) Check() models.IstioValidations

type PeerAuthenticationChecker

type PeerAuthenticationChecker struct {
	PeerAuthentications []security_v1beta.PeerAuthentication
	MTLSDetails         kubernetes.MTLSDetails
	WorkloadList        models.WorkloadList
}

func (PeerAuthenticationChecker) Check

func (m PeerAuthenticationChecker) Check() models.IstioValidations

type RequestAuthenticationChecker

type RequestAuthenticationChecker struct {
	RequestAuthentications []security_v1beta.RequestAuthentication
	WorkloadList           models.WorkloadList
}

func (RequestAuthenticationChecker) Check

func (m RequestAuthenticationChecker) Check() models.IstioValidations

type ServiceChecker

type ServiceChecker struct {
	Services    []v1.Service
	Deployments []apps_v1.Deployment
	Pods        []core_v1.Pod
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() models.IstioValidations

type ServiceEntryChecker

type ServiceEntryChecker struct {
	ServiceEntries  []networking_v1beta1.ServiceEntry
	Namespaces      models.Namespaces
	WorkloadEntries []networking_v1beta1.WorkloadEntry
}

func (ServiceEntryChecker) Check

func (s ServiceEntryChecker) Check() models.IstioValidations

type SidecarChecker

type SidecarChecker struct {
	Sidecars         []networking_v1beta1.Sidecar
	ServiceEntries   []networking_v1beta1.ServiceEntry
	Namespaces       models.Namespaces
	WorkloadList     models.WorkloadList
	RegistryServices []*kubernetes.RegistryService
}

func (SidecarChecker) Check

func (s SidecarChecker) Check() models.IstioValidations

type VirtualServiceChecker

type VirtualServiceChecker struct {
	Namespace        string
	Namespaces       models.Namespaces
	VirtualServices  []networking_v1beta1.VirtualService
	DestinationRules []networking_v1beta1.DestinationRule
}

func (VirtualServiceChecker) Check

func (in VirtualServiceChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.

type WorkloadChecker

type WorkloadChecker struct {
	Namespace             string
	AuthorizationPolicies []security_v1beta1.AuthorizationPolicy
	WorkloadList          models.WorkloadList
}

func (WorkloadChecker) Check

func (w WorkloadChecker) Check() models.IstioValidations