bundle

Documentation

Index

• Constants
• Variables
• func GenerateOPABundle() error
• func GetRevision() string
• func NewBundleController() *controller
• func RefreshOPABundle()
• type Attribute
• type Attributes
  • func NewFrom(attrs []models.MatchAttribute) Attributes
  • func (a Attributes) LessOrEqual(other Attributes) bool
• type Config
• type ExemptionURLs
• type ResourceBundle
  • func AppendOPAResources(res ResourceBundle, resourceType string, objs []*ResourceSpec) ResourceBundle
  • func (r ResourceBundle) MarshalJSON() ([]byte, error)
• type ResourceBundleService
• type ResourceSpec
• type Rule
• type Rules
  • func (o Rules) Len() int
  • func (o Rules) Less(i, j int) bool
  • func (o Rules) Swap(i, j int)

Constants

const (
	MethodGet    = http.MethodGet
	MethodPost   = http.MethodPost
	MethodPut    = http.MethodPut
	MethodPatch  = http.MethodPatch
	MethodDelete = http.MethodDelete
)

const UpdateKey = "opa_bundle"

Variables

var AllMethods = []string{MethodGet, MethodPost, MethodPut, MethodPatch, MethodDelete}

Functions

func GenerateOPABundle

func GenerateOPABundle() error

func GetRevision

func GetRevision() string

func NewBundleController

func NewBundleController() *controller

func RefreshOPABundle

func RefreshOPABundle()

Types

type Attribute

type Attribute struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type Attributes

type Attributes []*Attribute

func NewFrom

func NewFrom(attrs []models.MatchAttribute) Attributes

func (Attributes) LessOrEqual

func (a Attributes) LessOrEqual(other Attributes) bool

type Config

type Config struct {
	Bundles   []*ResourceBundleService `json:"bundles"`
	Namespace string                   `json:"namespace"`
}

type ExemptionURLs

type ExemptionURLs struct {
	Public     Rules `json:"public"`     // public urls are not controlled by AuthN and AuthZ
	Privileged Rules `json:"privileged"` // privileged urls can only be visited by system admins
	Registered Rules `json:"registered"` // registered urls are the entire list of urls which are controlled by AuthZ, which means that if an url is not in this list, it is not controlled by AuthZ
}

type ResourceBundle

type ResourceBundle map[string]resources

func AppendOPAResources

func AppendOPAResources(res ResourceBundle, resourceType string, objs []*ResourceSpec) ResourceBundle

func (ResourceBundle) MarshalJSON

func (r ResourceBundle) MarshalJSON() ([]byte, error)

type ResourceBundleService

type ResourceBundleService struct {
	Endpoint     string `json:"endpoint"`
	ResourceType string `json:"resourceType"`
}

type ResourceSpec

type ResourceSpec struct {
	ResourceID  string   `json:"resourceID"`
	ProjectName string   `json:"projectName"`
	Spec        []string `json:"spec"`
}

type Rule

type Rule struct {
	Method           string       `json:"method"`
	Endpoint         string       `json:"endpoint"`
	ResourceType     string       `json:"resourceType,omitempty"`
	IDRegex          string       `json:"idRegex,omitempty"`
	MatchAttributes  Attributes   `json:"matchAttributes,omitempty"`
	MatchExpressions []expression `json:"matchExpressions,omitempty"`
}

type Rules

type Rules []*Rule

func (Rules) Len

func (o Rules) Len() int

func (Rules) Less

func (o Rules) Less(i, j int) bool

func (Rules) Swap

func (o Rules) Swap(i, j int)