checkers

Documentation

Index

• Constants
• func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)
• func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations
• type AuthorizationPolicyChecker
  • func (a AuthorizationPolicyChecker) Check() models.IstioValidations
  • func (a AuthorizationPolicyChecker) ServiceAccountNames(clusterName string) []string
• type Checker
• type DestinationRulesChecker
  • func (in DestinationRulesChecker) Check() models.IstioValidations
• type GatewayChecker
  • func (g GatewayChecker) Check() models.IstioValidations
• type GroupChecker
• type K8sGatewayChecker
  • func (g K8sGatewayChecker) Check() models.IstioValidations
• type K8sHTTPRouteChecker
  • func (in K8sHTTPRouteChecker) Check() models.IstioValidations
• type NoServiceChecker
  • func (in NoServiceChecker) Check() models.IstioValidations
• type PeerAuthenticationChecker
  • func (m PeerAuthenticationChecker) Check() models.IstioValidations
• type RequestAuthenticationChecker
  • func (m RequestAuthenticationChecker) Check() models.IstioValidations
• type ServiceChecker
  • func (sc ServiceChecker) Check() models.IstioValidations
• type ServiceEntryChecker
  • func (s ServiceEntryChecker) Check() models.IstioValidations
• type SidecarChecker
  • func (s SidecarChecker) Check() models.IstioValidations
• type TelemetryChecker
  • func (in TelemetryChecker) Check() models.IstioValidations
• type VirtualServiceChecker
  • func (in VirtualServiceChecker) Check() models.IstioValidations
• type WasmPluginChecker
  • func (in WasmPluginChecker) Check() models.IstioValidations
• type WorkloadChecker
  • func (w WorkloadChecker) Check() models.IstioValidations

Constants

const AuthorizationPolicyCheckerType = "authorizationpolicy"

const DestinationRuleCheckerType = "destinationrule"

const GatewayCheckerType = "gateway"

const K8sGatewayCheckerType = "k8sgateway"

const K8sHTTPRouteCheckerType = "k8shttproute"

const PeerAuthenticationCheckerType = "peerauthentication"

const RequestAuthenticationCheckerType = "requestauthentication"

const ServiceCheckerType = "service"

const ServiceEntryCheckerType = "serviceentry"

const ServiceRoleCheckerType = "servicerole"

const SidecarCheckerType = "sidecar"

const TelemetryCheckerType = "telemetry"

const VirtualCheckerType = "virtualservice"

const WasmPluginCheckerType = "wasmplugin"

const WorkloadCheckerType = "workload"

Functions

func EmptyValidValidation

func EmptyValidValidation(name, namespace, objectType string) (models.IstioValidationKey, *models.IstioValidation)

func EmptyValidValidations

func EmptyValidValidations(name, namespace, objectType string) models.IstioValidations

EmptyValidValidation returns a stub validation object which can be used by checkers

Types

type AuthorizationPolicyChecker

type AuthorizationPolicyChecker struct {
	AuthorizationPolicies []*security_v1beta.AuthorizationPolicy
	Namespaces            models.Namespaces
	ServiceEntries        []*networking_v1beta1.ServiceEntry
	WorkloadsPerNamespace map[string]models.WorkloadList
	MtlsDetails           kubernetes.MTLSDetails
	VirtualServices       []*networking_v1beta1.VirtualService
	RegistryServices      []*kubernetes.RegistryService
	PolicyAllowAny        bool
}

func (AuthorizationPolicyChecker) Check

func (a AuthorizationPolicyChecker) Check() models.IstioValidations

func (AuthorizationPolicyChecker) ServiceAccountNames

func (a AuthorizationPolicyChecker) ServiceAccountNames(clusterName string) []string

ServiceAccountNames returns a list of names of the ServiceAccounts retrieved from Registry Services.

type Checker

type Checker interface {
	Check() ([]*models.IstioCheck, bool)
}

type DestinationRulesChecker

type DestinationRulesChecker struct {
	DestinationRules []*networking_v1beta1.DestinationRule
	MTLSDetails      kubernetes.MTLSDetails
	ServiceEntries   []*networking_v1beta1.ServiceEntry
	Namespaces       []models.Namespace
}

func (DestinationRulesChecker) Check

func (in DestinationRulesChecker) Check() models.IstioValidations

type GatewayChecker

type GatewayChecker struct {
	Gateways              []*networking_v1beta1.Gateway
	WorkloadsPerNamespace map[string]models.WorkloadList
	IsGatewayToNamespace  bool
}

func (GatewayChecker) Check

func (g GatewayChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type GroupChecker

type GroupChecker interface {
	Check() models.IstioValidations
}

type K8sGatewayChecker

type K8sGatewayChecker struct {
	K8sGateways []*k8s_networking_v1beta1.Gateway
}

func (K8sGatewayChecker) Check

func (g K8sGatewayChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type K8sHTTPRouteChecker

type K8sHTTPRouteChecker struct {
	K8sHTTPRoutes    []*k8s_networking_v1beta1.HTTPRoute
	K8sGateways      []*k8s_networking_v1beta1.Gateway
	Namespaces       models.Namespaces
	RegistryServices []*kubernetes.RegistryService
}

func (K8sHTTPRouteChecker) Check

func (in K8sHTTPRouteChecker) Check() models.IstioValidations

Check runs checks for the all namespaces actions as well as for the single namespace validations

type NoServiceChecker

type NoServiceChecker struct {
	Namespaces            models.Namespaces
	IstioConfigList       *models.IstioConfigList
	WorkloadsPerNamespace map[string]models.WorkloadList
	AuthorizationDetails  *kubernetes.RBACDetails
	RegistryServices      []*kubernetes.RegistryService
	PolicyAllowAny        bool
}

func (NoServiceChecker) Check

func (in NoServiceChecker) Check() models.IstioValidations

type PeerAuthenticationChecker

type PeerAuthenticationChecker struct {
	PeerAuthentications   []*security_v1beta.PeerAuthentication
	MTLSDetails           kubernetes.MTLSDetails
	WorkloadsPerNamespace map[string]models.WorkloadList
}

func (PeerAuthenticationChecker) Check

func (m PeerAuthenticationChecker) Check() models.IstioValidations

type RequestAuthenticationChecker

type RequestAuthenticationChecker struct {
	RequestAuthentications []*security_v1beta.RequestAuthentication
	WorkloadsPerNamespace  map[string]models.WorkloadList
}

func (RequestAuthenticationChecker) Check

func (m RequestAuthenticationChecker) Check() models.IstioValidations

type ServiceChecker

type ServiceChecker struct {
	Services    []v1.Service
	Deployments []apps_v1.Deployment
	Pods        []core_v1.Pod
}

func (ServiceChecker) Check

func (sc ServiceChecker) Check() models.IstioValidations

type ServiceEntryChecker

type ServiceEntryChecker struct {
	ServiceEntries  []*networking_v1beta1.ServiceEntry
	Namespaces      models.Namespaces
	WorkloadEntries []*networking_v1beta1.WorkloadEntry
}

func (ServiceEntryChecker) Check

func (s ServiceEntryChecker) Check() models.IstioValidations

type SidecarChecker

type SidecarChecker struct {
	Sidecars              []*networking_v1beta1.Sidecar
	ServiceEntries        []*networking_v1beta1.ServiceEntry
	Namespaces            models.Namespaces
	WorkloadsPerNamespace map[string]models.WorkloadList
	RegistryServices      []*kubernetes.RegistryService
}

func (SidecarChecker) Check

func (s SidecarChecker) Check() models.IstioValidations

type TelemetryChecker

type TelemetryChecker struct {
	Namespaces  models.Namespaces
	Telemetries []*v1alpha1.Telemetry
}

func (TelemetryChecker) Check

func (in TelemetryChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.

type VirtualServiceChecker

type VirtualServiceChecker struct {
	Namespaces       models.Namespaces
	VirtualServices  []*networking_v1beta1.VirtualService
	DestinationRules []*networking_v1beta1.DestinationRule
}

func (VirtualServiceChecker) Check

func (in VirtualServiceChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.

type WasmPluginChecker

type WasmPluginChecker struct {
	Namespaces  models.Namespaces
	WasmPlugins []*extentions_v1alpha1.WasmPlugin
}

func (WasmPluginChecker) Check

func (in WasmPluginChecker) Check() models.IstioValidations

An Object Checker runs all checkers for an specific object type (i.e.: pod, route rule,...) It run two kinds of checkers: 1. Individual checks: validating individual objects. 2. Group checks: validating behaviour between configurations.

type WorkloadChecker

type WorkloadChecker struct {
	AuthorizationPolicies []*security_v1beta1.AuthorizationPolicy
	WorkloadsPerNamespace map[string]models.WorkloadList
}

func (WorkloadChecker) Check

func (w WorkloadChecker) Check() models.IstioValidations