policy

Documentation

Index

• Constants
• func AllLevels() sets.String
• func AllStages() sets.String
• func ConvertStagesToStrings(stages []audit.Stage) []string
• func ConvertStringSetToStages(set sets.String) []audit.Stage
• func EnforcePolicy(event *audit.Event, level audit.Level, omitStages []audit.Stage) (*audit.Event, error)
• func InvertStages(stages []audit.Stage) []audit.Stage
• func LoadPolicyFromBytes(policyDef []byte) (*auditinternal.Policy, error)
• func LoadPolicyFromFile(filePath string) (*auditinternal.Policy, error)
• func NewFakePolicyRuleEvaluator(level audit.Level, stage []audit.Stage) auditinternal.PolicyRuleEvaluator
• func NewPolicyRuleEvaluator(policy *audit.Policy) auditinternal.PolicyRuleEvaluator

Constants

const (
	// DefaultAuditLevel is the default level to audit at, if no policy rules are matched.
	DefaultAuditLevel = audit.LevelNone
)

Functions

func AllLevels

func AllLevels() sets.String

AllLevels returns all possible levels

func AllStages

func AllStages() sets.String

AllStages returns all possible stages

func ConvertStagesToStrings

func ConvertStagesToStrings(stages []audit.Stage) []string

ConvertStagesToStrings converts an array of stages to a string array

func ConvertStringSetToStages

func ConvertStringSetToStages(set sets.String) []audit.Stage

ConvertStringSetToStages converts a string set to an array of stages

func EnforcePolicy

func EnforcePolicy(event *audit.Event, level audit.Level, omitStages []audit.Stage) (*audit.Event, error)

EnforcePolicy drops any part of the event that doesn't conform to a policy level or omitStages and sets the event level accordingly

func InvertStages

func InvertStages(stages []audit.Stage) []audit.Stage

InvertStages subtracts the given array of stages from all stages

func LoadPolicyFromBytes

func LoadPolicyFromBytes(policyDef []byte) (*auditinternal.Policy, error)

func LoadPolicyFromFile

func LoadPolicyFromFile(filePath string) (*auditinternal.Policy, error)

func NewFakePolicyRuleEvaluator

func NewFakePolicyRuleEvaluator(level audit.Level, stage []audit.Stage) auditinternal.PolicyRuleEvaluator

NewFakePolicyRuleEvaluator creates a fake policy rule evaluator that returns a constant level for all requests (for testing).

func NewPolicyRuleEvaluator

func NewPolicyRuleEvaluator(policy *audit.Policy) auditinternal.PolicyRuleEvaluator

NewPolicyRuleEvaluator creates a new policy rule evaluator.