peerauthentications

Documentation

Index

• type DisabledMeshWideChecker
  • func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)
• type DisabledNamespaceWideChecker
  • func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)
• type MeshMtlsChecker
  • func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)
• type NamespaceMtlsChecker
  • func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Types

type DisabledMeshWideChecker

type DisabledMeshWideChecker struct {
	PeerAuthn        security_v1beta.PeerAuthentication
	DestinationRules []networking_v1beta1.DestinationRule
}

func (DisabledMeshWideChecker) Check

func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)

type DisabledNamespaceWideChecker

type DisabledNamespaceWideChecker struct {
	PeerAuthn        security_v1beta.PeerAuthentication
	DestinationRules []networking_v1beta1.DestinationRule
}

func (DisabledNamespaceWideChecker) Check

func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)

type MeshMtlsChecker

type MeshMtlsChecker struct {
	MeshPolicy    security_v1beta.PeerAuthentication
	MTLSDetails   kubernetes.MTLSDetails
	IsServiceMesh bool
}

Note that MeshMtlsChecker will work with MeshPolicy resources

func (MeshMtlsChecker) Check

func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)

type NamespaceMtlsChecker

type NamespaceMtlsChecker struct {
	PeerAuthn   security_v1beta.PeerAuthentication
	MTLSDetails kubernetes.MTLSDetails
}

func (NamespaceMtlsChecker) Check

func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Checks if a PeerAuthn enabling namespace-wide has a Destination Rule enabling mTLS too