securitygroup

Jul 9, 2024

Changes in this version

+ func ProtocolFromKubernetes(p v1.Protocol) (network.SecurityRuleProtocol, error)

Jun 6, 2024

Changes in this version

+ func SetDestinationPrefixes(r *network.SecurityRule, prefixes []string)

May 1, 2024

Changes in this version

+ func ListDestinationPortRanges(r *network.SecurityRule) ([]int32, error)

+ func ListDestinationPrefixes(r *network.SecurityRule) []string

+ func ListSourcePrefixes(r *network.SecurityRule) []string

type RuleHelper

+ func (helper *RuleHelper) RemoveDestinationFromRules(protocol network.SecurityRuleProtocol, dstPrefixes []string, ...) error

Jan 17, 2024

Changes in this version

+ const MaxSecurityRuleDestinationIPsPerGroup

+ const MaxSecurityRuleSourceIPsPerGroup

+ const MaxSecurityRulesPerGroup

+ const SecurityRuleNamePrefix

+ const SecurityRuleNameSep

+ const ServiceTagInternet

+ var ErrInvalidSecurityGroup = fmt.Errorf("invalid SecurityGroup object")

+ var ErrSecurityRuleDestinationAddressesNotFromSameIPFamily = fmt.Errorf("security rule destination addresses must be from the same IP family")

+ var ErrSecurityRulePriorityExhausted = fmt.Errorf("security rule priority exhausted")

+ var ErrSecurityRuleSourceAddressesNotFromSameIPFamily = fmt.Errorf("security rule source addresses must be from the same IP family")

+ var ErrSecurityRuleSourceAndDestinationNotFromSameIPFamily = fmt.Errorf(...)

+ func GenerateAllowSecurityRuleName(protocol network.SecurityRuleProtocol, ipFamily iputil.Family, ...) string

+ func GenerateDenyAllSecurityRuleName(ipFamily iputil.Family) string

+ func NormalizeDestinationPortRanges(dstPorts []int32) []string

+ func NormalizeSecurityRuleAddressPrefixes(vs []string) []string

+ type RuleHelper struct

+ func NewSecurityGroupHelper(sg *network.SecurityGroup) (*RuleHelper, error)

+ func (helper *RuleHelper) AddRuleForAllowedIPRanges(ipRanges []netip.Prefix, protocol network.SecurityRuleProtocol, ...) error

+ func (helper *RuleHelper) AddRuleForAllowedServiceTag(serviceTag string, protocol network.SecurityRuleProtocol, ...) error

+ func (helper *RuleHelper) AddRuleForDenyAll(dstAddresses []netip.Addr) error

+ func (helper *RuleHelper) RemoveDestinationPrefixesFromRules(prefixes []string)

+ func (helper *RuleHelper) SecurityGroup() (*network.SecurityGroup, bool, error)