authz

Documentation

Overview

The auth package provides support for checking the authentication and authorization policy applied in the mesh. It aims to increase the debuggability and observability of auth policies. Note: this is still under active development and is not ready for real use.

Index

• func AuthZ(ctx cli.Context) *cobra.Command
• func Print(writer io.Writer, listeners []*listener.Listener)
• type Analyzer
  • func NewAnalyzer(envoyConfig *configdump.Wrapper) (*Analyzer, error)
  • func (a *Analyzer) Print(writer io.Writer)

Functions

func AuthZ

func AuthZ(ctx cli.Context) *cobra.Command

AuthZ groups commands used for inspecting and interacting the authorization policy. Note: this is still under active development and is not ready for real use.

func Print

func Print(writer io.Writer, listeners []*listener.Listener)

Print prints the AuthorizationPolicy in the listener.

Types

type Analyzer

type Analyzer struct {
	// contains filtered or unexported fields
}

Analyzer that can be used to check authorization policy.

func NewAnalyzer

func NewAnalyzer(envoyConfig *configdump.Wrapper) (*Analyzer, error)

NewAnalyzer creates a new analyzer for a given pod based on its envoy config.

func (*Analyzer) Print

func (a *Analyzer) Print(writer io.Writer)

Print print the analysis results.