matcher

package

Go to main page

Versions in this module

v0

v0.0.7

Jan 20, 2021

v0.0.6

Jan 20, 2021

v0.0.5

Jan 20, 2021

v0.0.4

Jan 20, 2021

v0.0.3

Jan 20, 2021

v0.0.2

Jan 19, 2021

Changes in this version

+ func LabelSelectorTableLines(selector metav1.LabelSelector) string

+ func PortMatcherTableLines(pm PortMatcher) []string

+ func TableExplainer(policies *Policy) *tablewriter.Table

+ func TargetsTableLines(table *tablewriter.Table, targets []*Target, isIngress bool)

type Policy

+ func (np *Policy) SortedTargets() ([]*Target, []*Target)

type SpecificIPMatcher

+ func (sip *SpecificIPMatcher) SortedIPBlocks() []*IPBlockMatcher

type SpecificInternalMatcher

+ func (a *SpecificInternalMatcher) SortedNamespacePods() []*NamespacePodMatcher

v0.0.1

Jan 18, 2021

Changes in this version

+ func BuildIPBlockNamespacePodMatcher(policyNamespace string, peer networkingv1.NetworkPolicyPeer) (*IPBlockMatcher, NamespaceMatcher, PodMatcher)

+ func BuildTarget(netpol *networkingv1.NetworkPolicy) (*Target, *Target)

+ func Explain(policies *Policy) string

+ func ExplainAllPortMatcher(indent string) []string

+ func ExplainIPBlockMatcher(ip *IPBlockMatcher, indent string) []string

+ func ExplainIPMatcher(ip IPMatcher, indent string) []string

+ func ExplainInternalMatcher(i InternalMatcher, indent string) []string

+ func ExplainNamespaceMatcher(pm NamespaceMatcher, indent string) string

+ func ExplainNamespacePod(peer *NamespacePodMatcher, indent string) []string

+ func ExplainPodMatcher(pm PodMatcher, indent string) string

+ func ExplainPortMatcher(pm PortMatcher, indent string) []string

+ func ExplainSourceRules(sourceRules []*networkingv1.NetworkPolicy, indent string) []string

+ func ExplainSpecificPeerMatcher(tp *SpecificPeerMatcher, indent string) []string

+ func ExplainSpecificPortMatcher(spm *SpecificPortMatcher, indent string) []string

+ func ExplainTarget(target *Target, isIngress bool) []string

+ func RunBuilderTests()

+ func RunExplainerTests()

+ func RunPolicyTests()

+ func SerializeLabelSelector(ls metav1.LabelSelector) string

+ type AllIPMatcher struct

+ func (aip *AllIPMatcher) Allows(ip string, portProtocol *PortProtocol) bool

+ func (aip *AllIPMatcher) MarshalJSON() (b []byte, e error)

+ type AllInternalMatcher struct

+ func (a *AllInternalMatcher) Allows(peer *InternalPeer, portProtocol *PortProtocol) bool

+ func (a *AllInternalMatcher) MarshalJSON() (b []byte, e error)

+ type AllNamespaceMatcher struct

+ func (a *AllNamespaceMatcher) Allows(namespace string, namespaceLabels map[string]string) bool

+ func (a *AllNamespaceMatcher) MarshalJSON() (b []byte, e error)

+ func (a *AllNamespaceMatcher) PrimaryKey() string

+ type AllPeerMatcher struct

+ func (aem *AllPeerMatcher) Allows(peer *TrafficPeer, portProtocol *PortProtocol) bool

+ func (aem *AllPeerMatcher) MarshalJSON() (b []byte, e error)

+ type AllPodMatcher struct

+ func (p *AllPodMatcher) Allows(podLabels map[string]string) bool

+ func (p *AllPodMatcher) MarshalJSON() (b []byte, e error)

+ func (p *AllPodMatcher) PrimaryKey() string

+ type AllPortMatcher struct

+ func (ap *AllPortMatcher) Allows(port intstr.IntOrString, protocol v1.Protocol) bool

+ func (ap *AllPortMatcher) MarshalJSON() (b []byte, e error)

+ type AllowedResult struct

+ Egress *DirectionResult

+ Ingress *DirectionResult

+ func (ar *AllowedResult) IsAllowed() bool

+ type DirectionResult struct

+ AllowingTargets []*Target

+ IsAllowed bool

+ MatchingTargets []*Target

+ type ExactNamespaceMatcher struct

+ Namespace string

+ func (p *ExactNamespaceMatcher) Allows(namespace string, namespaceLabels map[string]string) bool

+ func (p *ExactNamespaceMatcher) MarshalJSON() (b []byte, e error)

+ func (p *ExactNamespaceMatcher) PrimaryKey() string

+ type IPBlockMatcher struct

+ IPBlock *networkingv1.IPBlock

+ Port PortMatcher

+ func (i *IPBlockMatcher) Allows(ip string, portProtocol *PortProtocol) bool

+ func (i *IPBlockMatcher) Combine(other *IPBlockMatcher) *IPBlockMatcher

+ func (i *IPBlockMatcher) MarshalJSON() (b []byte, e error)

+ func (i *IPBlockMatcher) PrimaryKey() string

+ type IPMatcher interface

+ Allows func(ip string, portProtocol *PortProtocol) bool

+ func CombineIPMatchers(a IPMatcher, b IPMatcher) IPMatcher

+ type InternalMatcher interface

+ Allows func(peer *InternalPeer, portProtocol *PortProtocol) bool

+ func CombineInternalMatchers(a InternalMatcher, b InternalMatcher) InternalMatcher

+ type InternalPeer struct

+ Namespace string

+ NamespaceLabels map[string]string

+ PodLabels map[string]string

+ type LabelSelectorNamespaceMatcher struct

+ Selector metav1.LabelSelector

+ func (p *LabelSelectorNamespaceMatcher) Allows(namespace string, namespaceLabels map[string]string) bool

+ func (p *LabelSelectorNamespaceMatcher) MarshalJSON() (b []byte, e error)

+ func (p *LabelSelectorNamespaceMatcher) PrimaryKey() string

+ type LabelSelectorPodMatcher struct

+ Selector metav1.LabelSelector

+ func (p *LabelSelectorPodMatcher) Allows(podLabels map[string]string) bool

+ func (p *LabelSelectorPodMatcher) MarshalJSON() (b []byte, e error)

+ func (p *LabelSelectorPodMatcher) PrimaryKey() string

+ type NamespaceMatcher interface

+ Allows func(namespace string, namespaceLabels map[string]string) bool

+ PrimaryKey func() string

+ type NamespacePodMatcher struct

+ Namespace NamespaceMatcher

+ Pod PodMatcher

+ Port PortMatcher

+ func (ppm *NamespacePodMatcher) Allows(peer *InternalPeer, portProtocol *PortProtocol) bool

+ func (ppm *NamespacePodMatcher) Combine(otherPort PortMatcher) *NamespacePodMatcher

+ func (ppm *NamespacePodMatcher) PrimaryKey() string

+ type NoneIPMatcher struct

+ func (aip *NoneIPMatcher) Allows(ip string, portProtocol *PortProtocol) bool

+ func (aip *NoneIPMatcher) MarshalJSON() (b []byte, e error)

+ type NoneInternalMatcher struct

+ func (n *NoneInternalMatcher) Allows(peer *InternalPeer, portProtocol *PortProtocol) bool

+ func (n *NoneInternalMatcher) MarshalJSON() (b []byte, e error)

+ type NonePeerMatcher struct

+ func (nem *NonePeerMatcher) Allows(peer *TrafficPeer, portProtocol *PortProtocol) bool

+ func (nem *NonePeerMatcher) MarshalJSON() (b []byte, e error)

+ type NonePortMatcher struct

+ func (n *NonePortMatcher) Allows(port intstr.IntOrString, protocol v1.Protocol) bool

+ func (n *NonePortMatcher) MarshalJSON() (b []byte, e error)

+ type PeerMatcher interface

+ Allows func(peer *TrafficPeer, portProtocol *PortProtocol) bool

+ func BuildEgressMatcher(policyNamespace string, egresses []networkingv1.NetworkPolicyEgressRule) PeerMatcher

+ func BuildIngressMatcher(policyNamespace string, ingresses []networkingv1.NetworkPolicyIngressRule) PeerMatcher

+ func BuildPeerMatcher(policyNamespace string, npPorts []networkingv1.NetworkPolicyPort, ...) PeerMatcher

+ func CombinePeerMatchers(a PeerMatcher, b PeerMatcher) PeerMatcher

+ type PodMatcher interface

+ Allows func(podLabels map[string]string) bool

+ PrimaryKey func() string

+ type Policy struct

+ Egress map[string]*Target

+ Ingress map[string]*Target

+ func BuildNetworkPolicies(netpols []*networkingv1.NetworkPolicy) *Policy

+ func BuildNetworkPolicy(policy *networkingv1.NetworkPolicy) *Policy

+ func NewPolicy() *Policy

+ func (np *Policy) AddTarget(isIngress bool, target *Target) *Target

+ func (np *Policy) IsIngressOrEgressAllowed(traffic *Traffic, isIngress bool) *DirectionResult

+ func (np *Policy) IsTrafficAllowed(traffic *Traffic) *AllowedResult

+ func (np *Policy) TargetsApplyingToPod(isIngress bool, namespace string, podLabels map[string]string) []*Target

+ type PortMatcher interface

+ Allows func(port intstr.IntOrString, protocol v1.Protocol) bool

+ func BuildPortMatcher(npPorts []networkingv1.NetworkPolicyPort) PortMatcher

+ func CombinePortMatchers(a PortMatcher, b PortMatcher) PortMatcher

+ type PortProtocol struct

+ Port intstr.IntOrString

+ Protocol v1.Protocol

+ type PortProtocolMatcher struct

+ Port *intstr.IntOrString

+ Protocol v1.Protocol

+ func (ppm *PortProtocolMatcher) Allows(port intstr.IntOrString, protocol v1.Protocol) bool

+ type SpecificIPMatcher struct

+ IPBlocks map[string]*IPBlockMatcher

+ PortsForAllIPs PortMatcher

+ func NewSpecificIPMatcher(portsForAllIPs PortMatcher, blocks ...*IPBlockMatcher) *SpecificIPMatcher

+ func (sip *SpecificIPMatcher) AddIPMatcher(ip *IPBlockMatcher)

+ func (sip *SpecificIPMatcher) Allows(ip string, portProtocol *PortProtocol) bool

+ func (sip *SpecificIPMatcher) Combine(other *SpecificIPMatcher) *SpecificIPMatcher

+ func (sip *SpecificIPMatcher) MarshalJSON() (b []byte, e error)

+ type SpecificInternalMatcher struct

+ NamespacePods map[string]*NamespacePodMatcher

+ func NewSpecificInternalMatcher(matchers ...*NamespacePodMatcher) *SpecificInternalMatcher

+ func (a *SpecificInternalMatcher) Add(newMatcher *NamespacePodMatcher)

+ func (a *SpecificInternalMatcher) Allows(peer *InternalPeer, portProtocol *PortProtocol) bool

+ func (a *SpecificInternalMatcher) MarshalJSON() (b []byte, e error)

+ type SpecificPeerMatcher struct

+ IP IPMatcher

+ Internal InternalMatcher

+ func (em *SpecificPeerMatcher) Allows(peer *TrafficPeer, portProtocol *PortProtocol) bool

+ func (em *SpecificPeerMatcher) Combine(other *SpecificPeerMatcher) *SpecificPeerMatcher

+ func (em *SpecificPeerMatcher) MarshalJSON() (b []byte, e error)

+ type SpecificPortMatcher struct

+ Ports []*PortProtocolMatcher

+ func (epp *SpecificPortMatcher) Allows(port intstr.IntOrString, protocol v1.Protocol) bool

+ func (epp *SpecificPortMatcher) MarshalJSON() (b []byte, e error)

+ type Target struct

+ Namespace string

+ Peer PeerMatcher

+ PodSelector metav1.LabelSelector

+ SourceRules []*networkingv1.NetworkPolicy

+ func CombineTargetsIgnoringPrimaryKey(namespace string, podSelector metav1.LabelSelector, targets []*Target) *Target

+ func (t *Target) Combine(other *Target) *Target

+ func (t *Target) GetPrimaryKey() string

+ func (t *Target) IsMatch(namespace string, podLabels map[string]string) bool

+ func (t *Target) String() string

+ type Traffic struct

+ Destination *TrafficPeer

+ PortProtocol *PortProtocol

+ Source *TrafficPeer

+ type TrafficPeer struct

+ IP string

+ Internal *InternalPeer

+ func (p *TrafficPeer) IsExternal() bool

+ func (p *TrafficPeer) Namespace() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL