policy

Documentation

Index

• Constants
• func LoadPolicyFromFile(filePath string) (*auditinternal.Policy, error)
• type Checker
  • func FakeChecker(level audit.Level, stage []audit.Stage) Checker
  • func NewChecker(policy *audit.Policy) Checker

Constants

const (
	// DefaultAuditLevel is the default level to audit at, if no policy rules are matched.
	DefaultAuditLevel = audit.LevelNone
)

Functions

func LoadPolicyFromFile

func LoadPolicyFromFile(filePath string) (*auditinternal.Policy, error)

Types

type Checker

type Checker interface {
	// Check the audit level for a request with the given authorizer attributes.
	LevelAndStages(authorizer.Attributes) (audit.Level, []audit.Stage)
}

Checker exposes methods for checking the policy rules.

func FakeChecker

func FakeChecker(level audit.Level, stage []audit.Stage) Checker

FakeChecker creates a checker that returns a constant level for all requests (for testing).

func NewChecker

func NewChecker(policy *audit.Policy) Checker

NewChecker creates a new policy checker.