envoy_config_rbac_v3

package
v0.9.8 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 4, 2020 License: Apache-2.0 Imports: 22 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var File_envoy_config_rbac_v3_rbac_proto protoreflect.FileDescriptor
View Source
var RBAC_Action_name = map[int32]string{
	0: "ALLOW",
	1: "DENY",
	2: "LOG",
}
View Source
var RBAC_Action_value = map[string]int32{
	"ALLOW": 0,
	"DENY":  1,
	"LOG":   2,
}

Functions

This section is empty.

Types

type Permission

type Permission struct {

	// Types that are assignable to Rule:
	//	*Permission_AndRules
	//	*Permission_OrRules
	//	*Permission_Any
	//	*Permission_Header
	//	*Permission_UrlPath
	//	*Permission_DestinationIp
	//	*Permission_DestinationPort
	//	*Permission_Metadata
	//	*Permission_NotRule
	//	*Permission_RequestedServerName
	Rule isPermission_Rule `protobuf_oneof:"rule"`
	// contains filtered or unexported fields
}

func (*Permission) Descriptor deprecated

func (*Permission) Descriptor() ([]byte, []int)

Deprecated: Use Permission.ProtoReflect.Descriptor instead.

func (*Permission) GetAndRules

func (x *Permission) GetAndRules() *Permission_Set

func (*Permission) GetAny

func (x *Permission) GetAny() bool

func (*Permission) GetDestinationIp

func (x *Permission) GetDestinationIp() *v32.CidrRange

func (*Permission) GetDestinationPort

func (x *Permission) GetDestinationPort() uint32

func (*Permission) GetHeader

func (x *Permission) GetHeader() *v3.HeaderMatcher

func (*Permission) GetMetadata

func (x *Permission) GetMetadata() *v31.MetadataMatcher

func (*Permission) GetNotRule

func (x *Permission) GetNotRule() *Permission

func (*Permission) GetOrRules

func (x *Permission) GetOrRules() *Permission_Set

func (*Permission) GetRequestedServerName

func (x *Permission) GetRequestedServerName() *v31.StringMatcher

func (*Permission) GetRule

func (m *Permission) GetRule() isPermission_Rule

func (*Permission) GetUrlPath

func (x *Permission) GetUrlPath() *v31.PathMatcher

func (*Permission) ProtoMessage

func (*Permission) ProtoMessage()

func (*Permission) ProtoReflect added in v0.9.7

func (x *Permission) ProtoReflect() protoreflect.Message

func (*Permission) Reset

func (x *Permission) Reset()

func (*Permission) String

func (x *Permission) String() string

func (*Permission) Validate

func (m *Permission) Validate() error

Validate checks the field values on Permission with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type PermissionValidationError

type PermissionValidationError struct {
	// contains filtered or unexported fields
}

PermissionValidationError is the validation error returned by Permission.Validate if the designated constraints aren't met.

func (PermissionValidationError) Cause

func (e PermissionValidationError) Cause() error

Cause function returns cause value.

func (PermissionValidationError) Error

Error satisfies the builtin error interface

func (PermissionValidationError) ErrorName

func (e PermissionValidationError) ErrorName() string

ErrorName returns error name.

func (PermissionValidationError) Field

Field function returns field value.

func (PermissionValidationError) Key

Key function returns key value.

func (PermissionValidationError) Reason

func (e PermissionValidationError) Reason() string

Reason function returns reason value.

type Permission_AndRules

type Permission_AndRules struct {
	AndRules *Permission_Set `protobuf:"bytes,1,opt,name=and_rules,json=andRules,proto3,oneof"`
}

type Permission_Any

type Permission_Any struct {
	Any bool `protobuf:"varint,3,opt,name=any,proto3,oneof"`
}

type Permission_DestinationIp

type Permission_DestinationIp struct {
	DestinationIp *v32.CidrRange `protobuf:"bytes,5,opt,name=destination_ip,json=destinationIp,proto3,oneof"`
}

type Permission_DestinationPort

type Permission_DestinationPort struct {
	DestinationPort uint32 `protobuf:"varint,6,opt,name=destination_port,json=destinationPort,proto3,oneof"`
}

type Permission_Header

type Permission_Header struct {
	Header *v3.HeaderMatcher `protobuf:"bytes,4,opt,name=header,proto3,oneof"`
}

type Permission_Metadata

type Permission_Metadata struct {
	Metadata *v31.MetadataMatcher `protobuf:"bytes,7,opt,name=metadata,proto3,oneof"`
}

type Permission_NotRule

type Permission_NotRule struct {
	NotRule *Permission `protobuf:"bytes,8,opt,name=not_rule,json=notRule,proto3,oneof"`
}

type Permission_OrRules

type Permission_OrRules struct {
	OrRules *Permission_Set `protobuf:"bytes,2,opt,name=or_rules,json=orRules,proto3,oneof"`
}

type Permission_RequestedServerName

type Permission_RequestedServerName struct {
	RequestedServerName *v31.StringMatcher `protobuf:"bytes,9,opt,name=requested_server_name,json=requestedServerName,proto3,oneof"`
}

type Permission_Set

type Permission_Set struct {
	Rules []*Permission `protobuf:"bytes,1,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

func (*Permission_Set) Descriptor deprecated

func (*Permission_Set) Descriptor() ([]byte, []int)

Deprecated: Use Permission_Set.ProtoReflect.Descriptor instead.

func (*Permission_Set) GetRules

func (x *Permission_Set) GetRules() []*Permission

func (*Permission_Set) ProtoMessage

func (*Permission_Set) ProtoMessage()

func (*Permission_Set) ProtoReflect added in v0.9.7

func (x *Permission_Set) ProtoReflect() protoreflect.Message

func (*Permission_Set) Reset

func (x *Permission_Set) Reset()

func (*Permission_Set) String

func (x *Permission_Set) String() string

func (*Permission_Set) Validate

func (m *Permission_Set) Validate() error

Validate checks the field values on Permission_Set with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type Permission_SetValidationError

type Permission_SetValidationError struct {
	// contains filtered or unexported fields
}

Permission_SetValidationError is the validation error returned by Permission_Set.Validate if the designated constraints aren't met.

func (Permission_SetValidationError) Cause

Cause function returns cause value.

func (Permission_SetValidationError) Error

Error satisfies the builtin error interface

func (Permission_SetValidationError) ErrorName

func (e Permission_SetValidationError) ErrorName() string

ErrorName returns error name.

func (Permission_SetValidationError) Field

Field function returns field value.

func (Permission_SetValidationError) Key

Key function returns key value.

func (Permission_SetValidationError) Reason

Reason function returns reason value.

type Permission_UrlPath

type Permission_UrlPath struct {
	UrlPath *v31.PathMatcher `protobuf:"bytes,10,opt,name=url_path,json=urlPath,proto3,oneof"`
}

type Policy

type Policy struct {
	Permissions      []*Permission         `protobuf:"bytes,1,rep,name=permissions,proto3" json:"permissions,omitempty"`
	Principals       []*Principal          `protobuf:"bytes,2,rep,name=principals,proto3" json:"principals,omitempty"`
	Condition        *v1alpha1.Expr        `protobuf:"bytes,3,opt,name=condition,proto3" json:"condition,omitempty"`
	CheckedCondition *v1alpha1.CheckedExpr `protobuf:"bytes,4,opt,name=checked_condition,json=checkedCondition,proto3" json:"checked_condition,omitempty"`
	// contains filtered or unexported fields
}

func (*Policy) Descriptor deprecated

func (*Policy) Descriptor() ([]byte, []int)

Deprecated: Use Policy.ProtoReflect.Descriptor instead.

func (*Policy) GetCheckedCondition added in v0.9.7

func (x *Policy) GetCheckedCondition() *v1alpha1.CheckedExpr

func (*Policy) GetCondition

func (x *Policy) GetCondition() *v1alpha1.Expr

func (*Policy) GetPermissions

func (x *Policy) GetPermissions() []*Permission

func (*Policy) GetPrincipals

func (x *Policy) GetPrincipals() []*Principal

func (*Policy) ProtoMessage

func (*Policy) ProtoMessage()

func (*Policy) ProtoReflect added in v0.9.7

func (x *Policy) ProtoReflect() protoreflect.Message

func (*Policy) Reset

func (x *Policy) Reset()

func (*Policy) String

func (x *Policy) String() string

func (*Policy) Validate

func (m *Policy) Validate() error

Validate checks the field values on Policy with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type PolicyValidationError

type PolicyValidationError struct {
	// contains filtered or unexported fields
}

PolicyValidationError is the validation error returned by Policy.Validate if the designated constraints aren't met.

func (PolicyValidationError) Cause

func (e PolicyValidationError) Cause() error

Cause function returns cause value.

func (PolicyValidationError) Error

func (e PolicyValidationError) Error() string

Error satisfies the builtin error interface

func (PolicyValidationError) ErrorName

func (e PolicyValidationError) ErrorName() string

ErrorName returns error name.

func (PolicyValidationError) Field

func (e PolicyValidationError) Field() string

Field function returns field value.

func (PolicyValidationError) Key

func (e PolicyValidationError) Key() bool

Key function returns key value.

func (PolicyValidationError) Reason

func (e PolicyValidationError) Reason() string

Reason function returns reason value.

type Principal

type Principal struct {

	// Types that are assignable to Identifier:
	//	*Principal_AndIds
	//	*Principal_OrIds
	//	*Principal_Any
	//	*Principal_Authenticated_
	//	*Principal_SourceIp
	//	*Principal_DirectRemoteIp
	//	*Principal_RemoteIp
	//	*Principal_Header
	//	*Principal_UrlPath
	//	*Principal_Metadata
	//	*Principal_NotId
	Identifier isPrincipal_Identifier `protobuf_oneof:"identifier"`
	// contains filtered or unexported fields
}

func (*Principal) Descriptor deprecated

func (*Principal) Descriptor() ([]byte, []int)

Deprecated: Use Principal.ProtoReflect.Descriptor instead.

func (*Principal) GetAndIds

func (x *Principal) GetAndIds() *Principal_Set

func (*Principal) GetAny

func (x *Principal) GetAny() bool

func (*Principal) GetAuthenticated

func (x *Principal) GetAuthenticated() *Principal_Authenticated

func (*Principal) GetDirectRemoteIp

func (x *Principal) GetDirectRemoteIp() *v32.CidrRange

func (*Principal) GetHeader

func (x *Principal) GetHeader() *v3.HeaderMatcher

func (*Principal) GetIdentifier

func (m *Principal) GetIdentifier() isPrincipal_Identifier

func (*Principal) GetMetadata

func (x *Principal) GetMetadata() *v31.MetadataMatcher

func (*Principal) GetNotId

func (x *Principal) GetNotId() *Principal

func (*Principal) GetOrIds

func (x *Principal) GetOrIds() *Principal_Set

func (*Principal) GetRemoteIp

func (x *Principal) GetRemoteIp() *v32.CidrRange

func (*Principal) GetSourceIp deprecated

func (x *Principal) GetSourceIp() *v32.CidrRange

Deprecated: Do not use.

func (*Principal) GetUrlPath

func (x *Principal) GetUrlPath() *v31.PathMatcher

func (*Principal) ProtoMessage

func (*Principal) ProtoMessage()

func (*Principal) ProtoReflect added in v0.9.7

func (x *Principal) ProtoReflect() protoreflect.Message

func (*Principal) Reset

func (x *Principal) Reset()

func (*Principal) String

func (x *Principal) String() string

func (*Principal) Validate

func (m *Principal) Validate() error

Validate checks the field values on Principal with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type PrincipalValidationError

type PrincipalValidationError struct {
	// contains filtered or unexported fields
}

PrincipalValidationError is the validation error returned by Principal.Validate if the designated constraints aren't met.

func (PrincipalValidationError) Cause

func (e PrincipalValidationError) Cause() error

Cause function returns cause value.

func (PrincipalValidationError) Error

func (e PrincipalValidationError) Error() string

Error satisfies the builtin error interface

func (PrincipalValidationError) ErrorName

func (e PrincipalValidationError) ErrorName() string

ErrorName returns error name.

func (PrincipalValidationError) Field

func (e PrincipalValidationError) Field() string

Field function returns field value.

func (PrincipalValidationError) Key

Key function returns key value.

func (PrincipalValidationError) Reason

func (e PrincipalValidationError) Reason() string

Reason function returns reason value.

type Principal_AndIds

type Principal_AndIds struct {
	AndIds *Principal_Set `protobuf:"bytes,1,opt,name=and_ids,json=andIds,proto3,oneof"`
}

type Principal_Any

type Principal_Any struct {
	Any bool `protobuf:"varint,3,opt,name=any,proto3,oneof"`
}

type Principal_Authenticated

type Principal_Authenticated struct {
	PrincipalName *v31.StringMatcher `protobuf:"bytes,2,opt,name=principal_name,json=principalName,proto3" json:"principal_name,omitempty"`
	// contains filtered or unexported fields
}

func (*Principal_Authenticated) Descriptor deprecated

func (*Principal_Authenticated) Descriptor() ([]byte, []int)

Deprecated: Use Principal_Authenticated.ProtoReflect.Descriptor instead.

func (*Principal_Authenticated) GetPrincipalName

func (x *Principal_Authenticated) GetPrincipalName() *v31.StringMatcher

func (*Principal_Authenticated) ProtoMessage

func (*Principal_Authenticated) ProtoMessage()

func (*Principal_Authenticated) ProtoReflect added in v0.9.7

func (x *Principal_Authenticated) ProtoReflect() protoreflect.Message

func (*Principal_Authenticated) Reset

func (x *Principal_Authenticated) Reset()

func (*Principal_Authenticated) String

func (x *Principal_Authenticated) String() string

func (*Principal_Authenticated) Validate

func (m *Principal_Authenticated) Validate() error

Validate checks the field values on Principal_Authenticated with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type Principal_AuthenticatedValidationError

type Principal_AuthenticatedValidationError struct {
	// contains filtered or unexported fields
}

Principal_AuthenticatedValidationError is the validation error returned by Principal_Authenticated.Validate if the designated constraints aren't met.

func (Principal_AuthenticatedValidationError) Cause

Cause function returns cause value.

func (Principal_AuthenticatedValidationError) Error

Error satisfies the builtin error interface

func (Principal_AuthenticatedValidationError) ErrorName

ErrorName returns error name.

func (Principal_AuthenticatedValidationError) Field

Field function returns field value.

func (Principal_AuthenticatedValidationError) Key

Key function returns key value.

func (Principal_AuthenticatedValidationError) Reason

Reason function returns reason value.

type Principal_Authenticated_

type Principal_Authenticated_ struct {
	Authenticated *Principal_Authenticated `protobuf:"bytes,4,opt,name=authenticated,proto3,oneof"`
}

type Principal_DirectRemoteIp

type Principal_DirectRemoteIp struct {
	DirectRemoteIp *v32.CidrRange `protobuf:"bytes,10,opt,name=direct_remote_ip,json=directRemoteIp,proto3,oneof"`
}

type Principal_Header

type Principal_Header struct {
	Header *v3.HeaderMatcher `protobuf:"bytes,6,opt,name=header,proto3,oneof"`
}

type Principal_Metadata

type Principal_Metadata struct {
	Metadata *v31.MetadataMatcher `protobuf:"bytes,7,opt,name=metadata,proto3,oneof"`
}

type Principal_NotId

type Principal_NotId struct {
	NotId *Principal `protobuf:"bytes,8,opt,name=not_id,json=notId,proto3,oneof"`
}

type Principal_OrIds

type Principal_OrIds struct {
	OrIds *Principal_Set `protobuf:"bytes,2,opt,name=or_ids,json=orIds,proto3,oneof"`
}

type Principal_RemoteIp

type Principal_RemoteIp struct {
	RemoteIp *v32.CidrRange `protobuf:"bytes,11,opt,name=remote_ip,json=remoteIp,proto3,oneof"`
}

type Principal_Set

type Principal_Set struct {
	Ids []*Principal `protobuf:"bytes,1,rep,name=ids,proto3" json:"ids,omitempty"`
	// contains filtered or unexported fields
}

func (*Principal_Set) Descriptor deprecated

func (*Principal_Set) Descriptor() ([]byte, []int)

Deprecated: Use Principal_Set.ProtoReflect.Descriptor instead.

func (*Principal_Set) GetIds

func (x *Principal_Set) GetIds() []*Principal

func (*Principal_Set) ProtoMessage

func (*Principal_Set) ProtoMessage()

func (*Principal_Set) ProtoReflect added in v0.9.7

func (x *Principal_Set) ProtoReflect() protoreflect.Message

func (*Principal_Set) Reset

func (x *Principal_Set) Reset()

func (*Principal_Set) String

func (x *Principal_Set) String() string

func (*Principal_Set) Validate

func (m *Principal_Set) Validate() error

Validate checks the field values on Principal_Set with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type Principal_SetValidationError

type Principal_SetValidationError struct {
	// contains filtered or unexported fields
}

Principal_SetValidationError is the validation error returned by Principal_Set.Validate if the designated constraints aren't met.

func (Principal_SetValidationError) Cause

Cause function returns cause value.

func (Principal_SetValidationError) Error

Error satisfies the builtin error interface

func (Principal_SetValidationError) ErrorName

func (e Principal_SetValidationError) ErrorName() string

ErrorName returns error name.

func (Principal_SetValidationError) Field

Field function returns field value.

func (Principal_SetValidationError) Key

Key function returns key value.

func (Principal_SetValidationError) Reason

Reason function returns reason value.

type Principal_SourceIp

type Principal_SourceIp struct {
	// Deprecated: Do not use.
	SourceIp *v32.CidrRange `protobuf:"bytes,5,opt,name=source_ip,json=sourceIp,proto3,oneof"`
}

type Principal_UrlPath

type Principal_UrlPath struct {
	UrlPath *v31.PathMatcher `protobuf:"bytes,9,opt,name=url_path,json=urlPath,proto3,oneof"`
}

type RBAC

type RBAC struct {
	Action   RBAC_Action        `protobuf:"varint,1,opt,name=action,proto3,enum=envoy.config.rbac.v3.RBAC_Action" json:"action,omitempty"`
	Policies map[string]*Policy `` /* 157-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*RBAC) Descriptor deprecated

func (*RBAC) Descriptor() ([]byte, []int)

Deprecated: Use RBAC.ProtoReflect.Descriptor instead.

func (*RBAC) GetAction

func (x *RBAC) GetAction() RBAC_Action

func (*RBAC) GetPolicies

func (x *RBAC) GetPolicies() map[string]*Policy

func (*RBAC) ProtoMessage

func (*RBAC) ProtoMessage()

func (*RBAC) ProtoReflect added in v0.9.7

func (x *RBAC) ProtoReflect() protoreflect.Message

func (*RBAC) Reset

func (x *RBAC) Reset()

func (*RBAC) String

func (x *RBAC) String() string

func (*RBAC) Validate

func (m *RBAC) Validate() error

Validate checks the field values on RBAC with the rules defined in the proto definition for this message. If any rules are violated, an error is returned.

type RBACValidationError

type RBACValidationError struct {
	// contains filtered or unexported fields
}

RBACValidationError is the validation error returned by RBAC.Validate if the designated constraints aren't met.

func (RBACValidationError) Cause

func (e RBACValidationError) Cause() error

Cause function returns cause value.

func (RBACValidationError) Error

func (e RBACValidationError) Error() string

Error satisfies the builtin error interface

func (RBACValidationError) ErrorName

func (e RBACValidationError) ErrorName() string

ErrorName returns error name.

func (RBACValidationError) Field

func (e RBACValidationError) Field() string

Field function returns field value.

func (RBACValidationError) Key

func (e RBACValidationError) Key() bool

Key function returns key value.

func (RBACValidationError) Reason

func (e RBACValidationError) Reason() string

Reason function returns reason value.

type RBAC_Action

type RBAC_Action int32
const (
	RBAC_ALLOW RBAC_Action = 0
	RBAC_DENY  RBAC_Action = 1
	RBAC_LOG   RBAC_Action = 2
)

func (RBAC_Action) Descriptor added in v0.9.7

func (RBAC_Action) EnumDescriptor deprecated

func (RBAC_Action) EnumDescriptor() ([]byte, []int)

Deprecated: Use RBAC_Action.Descriptor instead.

func (RBAC_Action) Number added in v0.9.7

func (x RBAC_Action) Number() protoreflect.EnumNumber

func (RBAC_Action) String

func (x RBAC_Action) String() string

func (RBAC_Action) Type added in v0.9.7

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL