authorization

Documentation

Index

• type MtlsEnabledChecker
  • func (c MtlsEnabledChecker) Check() models.IstioValidations
  • func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set, namespace string) bool
• type NamespaceMethodChecker
  • func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)
• type NoHostChecker
  • func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)
• type PrincipalsChecker
  • func (pc PrincipalsChecker) Check() ([]*models.IstioCheck, bool)

Types

type MtlsEnabledChecker

type MtlsEnabledChecker struct {
	AuthorizationPolicies []*security_v1.AuthorizationPolicy
	MtlsDetails           kubernetes.MTLSDetails
	ServiceEntries        []networking_v1.ServiceEntry
	RegistryServices      []*kubernetes.RegistryService
}

func (MtlsEnabledChecker) Check

func (c MtlsEnabledChecker) Check() models.IstioValidations

Checks if mTLS is enabled, mark all Authz Policies with error

func (MtlsEnabledChecker) IsMtlsEnabledFor

func (c MtlsEnabledChecker) IsMtlsEnabledFor(labels labels.Set, namespace string) bool

type NamespaceMethodChecker

type NamespaceMethodChecker struct {
	AuthorizationPolicy *security_v1.AuthorizationPolicy
	Namespaces          models.NamespaceNames
}

func (NamespaceMethodChecker) Check

func (ap NamespaceMethodChecker) Check() ([]*models.IstioCheck, bool)

type NoHostChecker

type NoHostChecker struct {
	AuthorizationPolicy *security_v1.AuthorizationPolicy
	Namespaces          models.Namespaces
	ServiceEntries      map[string][]string
	VirtualServices     []*networking_v1.VirtualService
	RegistryServices    []*kubernetes.RegistryService
	PolicyAllowAny      bool
}

func (NoHostChecker) Check

func (n NoHostChecker) Check() ([]*models.IstioCheck, bool)

type PrincipalsChecker

type PrincipalsChecker struct {
	AuthorizationPolicy *security_v1.AuthorizationPolicy
	Cluster             string
	ServiceAccounts     map[string][]string
}

func (PrincipalsChecker) Check

func (pc PrincipalsChecker) Check() ([]*models.IstioCheck, bool)