securitygroup

Feb 10, 2025

Changes in this version

+ const MaxSecurityRuleDestinationIPsPerGroup

+ const MaxSecurityRuleSourceIPsPerGroup

+ const MaxSecurityRulesPerGroup

+ const SecurityRuleNamePrefix

+ const SecurityRuleNameSep

+ const ServiceTagInternet

+ var ErrInvalidSecurityGroup = fmt.Errorf("invalid SecurityGroup object")

+ var ErrSecurityRuleDestinationAddressesNotFromSameIPFamily = fmt.Errorf("security rule destination addresses must be from the same IP family")

+ var ErrSecurityRulePriorityExhausted = fmt.Errorf("security rule priority exhausted")

+ var ErrSecurityRuleSourceAddressesNotFromSameIPFamily = fmt.Errorf("security rule source addresses must be from the same IP family")

+ var ErrSecurityRuleSourceAndDestinationNotFromSameIPFamily = fmt.Errorf(...)

+ func GenerateAllowSecurityRuleName(protocol armnetwork.SecurityRuleProtocol, ipFamily iputil.Family, ...) string

+ func GenerateDenyAllSecurityRuleName(ipFamily iputil.Family) string

+ func ListDestinationPortRanges(r *armnetwork.SecurityRule) ([]int32, error)

+ func ListDestinationPrefixes(r *armnetwork.SecurityRule) []string

+ func ListSourcePrefixes(r *armnetwork.SecurityRule) []string

+ func NormalizeDestinationPortRanges(dstPorts []int32) []string

+ func NormalizeSecurityRuleAddressPrefixes(vs []string) []string

+ func ProtocolFromKubernetes(p v1.Protocol) (armnetwork.SecurityRuleProtocol, error)

+ func SetDestinationPrefixes(r *armnetwork.SecurityRule, prefixes []string)

+ type MockRepository struct

+ func NewMockRepository(ctrl *gomock.Controller) *MockRepository

+ func (m *MockRepository) CreateOrUpdateSecurityGroup(ctx context.Context, sg *armnetwork.SecurityGroup) error

+ func (m *MockRepository) EXPECT() *MockRepositoryMockRecorder

+ func (m *MockRepository) GetSecurityGroup(ctx context.Context) (*armnetwork.SecurityGroup, error)

+ type MockRepositoryMockRecorder struct

+ func (mr *MockRepositoryMockRecorder) CreateOrUpdateSecurityGroup(ctx, sg any) *gomock.Call

+ func (mr *MockRepositoryMockRecorder) GetSecurityGroup(ctx any) *gomock.Call

+ type Repository interface

+ CreateOrUpdateSecurityGroup func(ctx context.Context, sg *armnetwork.SecurityGroup) error

+ GetSecurityGroup func(ctx context.Context) (*armnetwork.SecurityGroup, error)

+ func NewSecurityGroupRepo(securityGroupResourceGroup string, securityGroupName string, ...) (Repository, error)

+ type RuleHelper struct

+ func NewSecurityGroupHelper(logger logr.Logger, sg *armnetwork.SecurityGroup) (*RuleHelper, error)

+ func (helper *RuleHelper) AddRuleForAllowedIPRanges(ipRanges []netip.Prefix, protocol armnetwork.SecurityRuleProtocol, ...) error

+ func (helper *RuleHelper) AddRuleForAllowedServiceTag(serviceTag string, protocol armnetwork.SecurityRuleProtocol, ...) error

+ func (helper *RuleHelper) AddRuleForDenyAll(dstAddresses []netip.Addr) error

+ func (helper *RuleHelper) RemoveDestinationFromRules(protocol armnetwork.SecurityRuleProtocol, dstPrefixes []string, ...) error

+ func (helper *RuleHelper) SecurityGroup() (*armnetwork.SecurityGroup, bool, error)