checker

Documentation

Index

• Constants
• Variables
• func NewRequestCache(store *policystore.PolicyStore, req *authz.CheckRequest) (*requestCache, error)
• func NewServer(ctx context.Context, stores <-chan *policystore.PolicyStore) *authServer
• type Action
• type InvalidDataFromDataPlane
  • func (i *InvalidDataFromDataPlane) Error() string

Constants

const SPIFFE_ID_PATTERN = "^spiffe://[^/]+/ns/([^/]+)/sa/([^/]+)$"

SPIFFE_ID_PATTERN is a regular expression to match SPIFFE ID URIs, e.g. spiffe://cluster.local/ns/default/sa/foo

Variables

var INTERNAL = rpc.Code_value["INTERNAL"]

var INVALID_ARGUMENT = rpc.Code_value["INVALID_ARGUMENT"]

var OK = rpc.Code_value["OK"]

var PERMISSION_DENIED = rpc.Code_value["PERMISSION_DENIED"]

var UNAVAILABLE = rpc.Code_value["UNAVAILABLE"]

Functions

func NewRequestCache

func NewRequestCache(store *policystore.PolicyStore, req *authz.CheckRequest) (*requestCache, error)

func NewServer

func NewServer(ctx context.Context, stores <-chan *policystore.PolicyStore) *authServer

NewServer creates a new authServer and returns a pointer to it.

Types

type Action

type Action int

Action is an enumeration of actions a policy rule can take if it is matched.

const (
	ALLOW Action = iota
	DENY
	LOG
	PASS
	NO_MATCH // Indicates policy did not match request. Cannot be assigned to rule.
)

type InvalidDataFromDataPlane

type InvalidDataFromDataPlane struct {
	// contains filtered or unexported fields
}

InvalidDataFromDataPlane is an error is used when we get data from dataplane (Envoy) which is invalid.

func (*InvalidDataFromDataPlane) Error

func (i *InvalidDataFromDataPlane) Error() string