authorize

Documentation

Overview

Package authorize provides authz checks for incoming or returning connections.

Package authorize provides authz checks for incoming or returning connections.

Code generated by "-output sync_map.gen.go -type spiffeIDResourcesMap<github.com/spiffe/go-spiffe/v2/spiffeid.ID,*github.com/networkservicemesh/sdk/pkg/tools/stringset.StringSet> -output sync_map.gen.go -type spiffeIDResourcesMap<github.com/spiffe/go-spiffe/v2/spiffeid.ID,*github.com/networkservicemesh/sdk/pkg/tools/stringset.StringSet>"; DO NOT EDIT.

Index

• func NewNetworkServiceEndpointRegistryServer(opts ...Option) registry.NetworkServiceEndpointRegistryServer
• func NewNetworkServiceRegistryServer(opts ...Option) registry.NetworkServiceRegistryServer
• type Option
  • func Any() Option
  • func WithPolicies(p ...Policy) Option
  • func WithSpiffeIDResourcesMap(m *spiffeIDResourcesMap) Option
• type Policy
• type RegistryOpaInput

Functions

func NewNetworkServiceEndpointRegistryServer

func NewNetworkServiceEndpointRegistryServer(opts ...Option) registry.NetworkServiceEndpointRegistryServer

NewNetworkServiceEndpointRegistryServer - returns a new authorization registry.NetworkServiceEndpointRegistryServer Authorize registry server checks spiffeID of NSE.

func NewNetworkServiceRegistryServer

func NewNetworkServiceRegistryServer(opts ...Option) registry.NetworkServiceRegistryServer

NewNetworkServiceRegistryServer - returns a new authorization registry.NetworkServiceRegistryServer Authorize registry server checks spiffeID of NS.

Types

type Option

type Option func(*options)

Option is authorization option for server

func Any

func Any() Option

Any authorizes any call of request/close

func WithPolicies

func WithPolicies(p ...Policy) Option

WithPolicies sets custom policies for registry

func WithSpiffeIDResourcesMap

func WithSpiffeIDResourcesMap(m *spiffeIDResourcesMap) Option

WithSpiffeIDResourcesMap sets map to keep spiffeIDResourcesMap to authorize connections with Registry Authorize Chain Element

type Policy

type Policy interface {
	// Check checks authorization
	Check(ctx context.Context, input interface{}) error
}

Policy represents authorization policy for network service.

type RegistryOpaInput

type RegistryOpaInput struct {
	SpiffeID             string              `json:"spiffe_id"`
	ResourceName         string              `json:"resource_name"`
	SpiffeIDResourcesMap map[string][]string `json:"spiffe_id_resources_map"`
}

RegistryOpaInput represents input for policies in authorizNSEServer and authorizeNSServer