policybuilder

Documentation

Index

• func BuildClusterNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, ...) (*v1.ClusterNimbusPolicy, error)
• func BuildNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, ...) (*v1.NimbusPolicy, error)
• func PreprocessExpression(expr string) string
• func ProcessCEL(ctx context.Context, k8sClient client.Client, namespace string, ...) (map[string]string, error)
• func ProcessMatchLabels(any, all []v1.ResourceFilter) (map[string]string, error)

Functions

func BuildClusterNimbusPolicy

func BuildClusterNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, scheme *runtime.Scheme, csib v1.ClusterSecurityIntentBinding) (*v1.ClusterNimbusPolicy, error)

BuildClusterNimbusPolicy generates a ClusterNimbusPolicy based on given SecurityIntents and ClusterSecurityIntentBinding.

func BuildNimbusPolicy

func BuildNimbusPolicy(ctx context.Context, logger logr.Logger, k8sClient client.Client, scheme *runtime.Scheme, sib v1.SecurityIntentBinding) (*v1.NimbusPolicy, error)

BuildNimbusPolicy generates a NimbusPolicy based on given SecurityIntentBinding.

func PreprocessExpression

func PreprocessExpression(expr string) string

func ProcessCEL

func ProcessCEL(ctx context.Context, k8sClient client.Client, namespace string, expressions []string) (map[string]string, error)

ProcessCEL processes CEL expressions to generate matchLabels.

func ProcessMatchLabels

func ProcessMatchLabels(any, all []v1.ResourceFilter) (map[string]string, error)

ProcessMatchLabels processes any/all fields to generate matchLabels.