authorize

Documentation

Overview

Package authorize provides authz checks for incoming or returning connections.

Index

• func NewMonitorConnectionServer(opts ...Option) networkservice.MonitorConnectionServer
• type MonitorOpaInput
• type Option
  • func Any() Option
  • func WithPolicies(p ...Policy) Option
  • func WithSpiffeIDConnectionMap(s *genericsync.Map[spiffeid.ID, *genericsync.Map[string, struct{}]]) Option
• type Policy

Functions

func NewMonitorConnectionServer

func NewMonitorConnectionServer(opts ...Option) networkservice.MonitorConnectionServer

NewMonitorConnectionServer - returns a new authorization networkservicemesh.MonitorConnectionServer

Types

type MonitorOpaInput

type MonitorOpaInput struct {
	SpiffeIDConnectionMap map[string][]string `json:"spiffe_id_connection_map"`
	SelectorConnectionIds []string            `json:"selector_connection_ids"`
	ServiceSpiffeID       string              `json:"service_spiffe_id"`
}

MonitorOpaInput - used to pass complex structure to monitor policies

type Option

type Option func(*options)

Option is authorization option for monitor connection server

func Any

func Any() Option

Any authorizes any call of request/close

func WithPolicies

func WithPolicies(p ...Policy) Option

WithPolicies sets custom policies

func WithSpiffeIDConnectionMap

func WithSpiffeIDConnectionMap(s *genericsync.Map[spiffeid.ID, *genericsync.Map[string, struct{}]]) Option

WithSpiffeIDConnectionMap sets map to keep spiffeIDConnectionMap to authorize connections with MonitorServer

type Policy

type Policy interface {
	// Name returns policy name
	Name() string
	// Check checks authorization
	Check(ctx context.Context, input interface{}) error
}

Policy represents authorization policy for monitor connection.