peerauthentications

Documentation

Index

• type DisabledMeshWideChecker
  • func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)
• type DisabledNamespaceWideChecker
  • func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)
• type MeshMtlsChecker
  • func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)
• type NamespaceMtlsChecker
  • func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Types

type DisabledMeshWideChecker

type DisabledMeshWideChecker struct {
	PeerAuthn        *security_v1beta.PeerAuthentication
	DestinationRules []*networking_v1beta1.DestinationRule
}

func (DisabledMeshWideChecker) Check

func (c DisabledMeshWideChecker) Check() ([]*models.IstioCheck, bool)

type DisabledNamespaceWideChecker

type DisabledNamespaceWideChecker struct {
	PeerAuthn        *security_v1beta.PeerAuthentication
	DestinationRules []*networking_v1beta1.DestinationRule
}

func (DisabledNamespaceWideChecker) Check

func (c DisabledNamespaceWideChecker) Check() ([]*models.IstioCheck, bool)

type MeshMtlsChecker

type MeshMtlsChecker struct {
	MeshPolicy    *security_v1beta.PeerAuthentication
	MTLSDetails   kubernetes.MTLSDetails
	IsServiceMesh bool
}

Note that MeshMtlsChecker will work with MeshPolicy resources

func (MeshMtlsChecker) Check

func (t MeshMtlsChecker) Check() ([]*models.IstioCheck, bool)

type NamespaceMtlsChecker

type NamespaceMtlsChecker struct {
	PeerAuthn   *security_v1beta.PeerAuthentication
	MTLSDetails kubernetes.MTLSDetails
}

func (NamespaceMtlsChecker) Check

func (t NamespaceMtlsChecker) Check() ([]*models.IstioCheck, bool)

Checks if a PeerAuthn enabling namespace-wide has a Destination Rule enabling mTLS too