authorization

Documentation

Index

• type JSONPatternMatching
  • func (jsonAuth *JSONPatternMatching) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)
• type KubernetesAuthz
  • func NewKubernetesAuthz(user common.JSONValue, groups []string, ...) (*KubernetesAuthz, error)
  • func (k *KubernetesAuthz) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)
• type KubernetesAuthzResourceAttributes
• type OPA
  • func NewOPAAuthorization(policyName string, rego string, externalSource OPAExternalSource, nonce int, ...) (*OPA, error)
  • func (opa *OPA) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)
• type OPAExternalSource

Types

type JSONPatternMatching

type JSONPatternMatching struct {
	Rules []common.JSONPatternMatchingRule
}

func (*JSONPatternMatching) Call

func (jsonAuth *JSONPatternMatching) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)

type KubernetesAuthz

type KubernetesAuthz struct {
	User               common.JSONValue
	Groups             []string
	ResourceAttributes *KubernetesAuthzResourceAttributes
	// contains filtered or unexported fields
}

func NewKubernetesAuthz

func NewKubernetesAuthz(user common.JSONValue, groups []string, resourceAttributes *KubernetesAuthzResourceAttributes) (*KubernetesAuthz, error)

func (*KubernetesAuthz) Call

func (k *KubernetesAuthz) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)

type KubernetesAuthzResourceAttributes

type KubernetesAuthzResourceAttributes struct {
	Namespace   common.JSONValue
	Group       common.JSONValue
	Resource    common.JSONValue
	Name        common.JSONValue
	SubResource common.JSONValue
	Verb        common.JSONValue
}

type OPA

type OPA struct {
	Rego              string `yaml:"rego"`
	OPAExternalSource OPAExternalSource
	// contains filtered or unexported fields
}

func NewOPAAuthorization

func NewOPAAuthorization(policyName string, rego string, externalSource OPAExternalSource, nonce int, ctx context.Context) (*OPA, error)

func (*OPA) Call

func (opa *OPA) Call(pipeline common.AuthPipeline, ctx context.Context) (bool, error)

type OPAExternalSource

type OPAExternalSource struct {
	Endpoint     string
	SharedSecret string
	auth_credentials.AuthCredentials
}