verifier

Documentation

Index

• func ValidateEgress(vs verifierService, vei ValidateEgressInput) *output.Output
• func VerifyDns(vs verifierService, vdi VerifyDnsInput) *output.Output
• type AwsEgressConfig
• type GcpEgressConfig
• type ValidateEgressInput
• type VerifyDnsInput

Functions

func ValidateEgress

func ValidateEgress(vs verifierService, vei ValidateEgressInput) *output.Output

ValidateEgress pass in a GCP or AWS client that know how to fulfill the above interface

func VerifyDns

func VerifyDns(vs verifierService, vdi VerifyDnsInput) *output.Output

VerifyDns pass in a GCP or AWS client that know how to fulfill the above interface

Types

type AwsEgressConfig

type AwsEgressConfig struct {
	KmsKeyID          string
	SecurityGroupIDs  []string
	TempSecurityGroup string
}

type GcpEgressConfig

type GcpEgressConfig struct {
	Region, Zone, ProjectID, VpcName string
}

type ValidateEgressInput

type ValidateEgressInput struct {
	// Timeout sets the maximum duration an egress endpoint request can take before it aborts and
	// is retried or marked as blocked
	Timeout                 time.Duration
	Ctx                     context.Context
	SubnetID, CloudImageID  string
	EgressListYaml          string
	Proxy                   proxy.ProxyConfig
	Tags                    map[string]string
	AWS                     AwsEgressConfig
	GCP                     GcpEgressConfig
	SkipInstanceTermination bool
	TerminateDebugInstance  string
	ImportKeyPair           string
	ForceTempSecurityGroup  bool

	// InstanceType sets the type or size of the instance (VM) launched into the target subnet. Only
	// instance types using 64-bit X86 or ARM CPUs are supported. For AWS, only instance types using
	// the "Nitro" hypervisor are supported, as other hypervisors don't allow the verifier to gather
	// probe results from the instance's serial console. If no valid InstanceType is provided, the
	// verifier falls back to a supported default using the same CPU architecture as the requested
	// instance type (if applicable) or as specified in the CPUArchitecture field
	InstanceType string

	// Probe controls the behavior of the instance that the verifier launches into the target
	// subnet. Defaults to a curl-based probe (curl.Probe) if unset. legacy.Probe is also available
	// if you'd like the verifier to emulate its pre-1.0 behavior, or you may provide your own
	// implementation of the probes.Probe interface
	Probe probes.Probe

	// CPUArchitecture controls the CPU architecture of the default/fallback cloud instance type.
	// Has no effect if a supported value of InstanceType is provided.
	CPUArchitecture cpu.Architecture

	// PlatformType controls the platform of the default/fallback cloud platform type.
	// Defaults to cloud.AWSClassic if no PlatformType is provided.
	PlatformType cloud.Platform
}

type VerifyDnsInput

type VerifyDnsInput struct {
	Ctx   context.Context
	VpcID string
}