opa

Documentation

Index

• func NewInProcessAuthorizer(query string, paths []string, opts ...Option) (rbac.Authorizer, error)
• func NewRESTAuthorizer(u *url.URL, opts ...Option) rbac.Authorizer
• type Input
• type Option
  • func LoggerOption(logger log.Logger) Option
  • func RegistererOption(r prometheus.Registerer) Option

Functions

func NewInProcessAuthorizer

func NewInProcessAuthorizer(query string, paths []string, opts ...Option) (rbac.Authorizer, error)

NewInProcessAuthorizer creates a new rbac.Authorizer that works in-process.

func NewRESTAuthorizer

func NewRESTAuthorizer(u *url.URL, opts ...Option) rbac.Authorizer

NewRESTAuthorizer creates a new rbac.Authorizer that works against an OPA endpoint.

Types

type Input

type Input struct {
	Groups     []string        `json:"groups"`
	Permission rbac.Permission `json:"permission"`
	Resource   string          `json:"resource"`
	Subject    string          `json:"subject"`
	Tenant     string          `json:"tenant"`
}

Input models the data that is used for OPA input documents.

type Option

type Option func(c *config)

Option modifies the configuration of an OPA authorizer.

func LoggerOption

func LoggerOption(logger log.Logger) Option

LoggerOption sets a custom logger for the authorizer.

func RegistererOption

func RegistererOption(r prometheus.Registerer) Option

RegistererOption sets a Prometheus registerer for the authorizer.