verifier

Documentation

Overview

Package verifier ensures that only allowed containers (images) are launched

Index

• Constants
• func Init(cwlPath string)
• type Conf
• type RequestDescInfo
• type RequestVerifierConf
• type ResponseVerifierConf
• type VerificationImpl
  • func GetInstance() *VerificationImpl
  • func (VerificationImpl) ContainerIsInWhiteList(containerName string) error
  • func (verifier *VerificationImpl) RequestVerifierConf(containerInfo RequestVerifierConf) ResponseVerifierConf

Constants

const (
	ErrorNone         = "ERROR_NONE"
	InvalidParameter  = "INVALID_PARAMETER"
	SecureMgrError    = "INTERNAL_SECUREMGR_ERROR"
	NotAllowedCommand = "NOT_ALLOWED_COMMAND"
)

cwl - Container White List

Functions

func Init

func Init(cwlPath string)

Init sets the environments for securemgr

Types

type Conf

type Conf interface {
	RequestVerifierConf(containerInfo RequestVerifierConf) ResponseVerifierConf
}

Conf is the interface implemented by external REST API

type RequestDescInfo

type RequestDescInfo struct {
	//ContainerName string
	ContainerHash string
}

RequestDescInfo describes the requested container

type RequestVerifierConf

type RequestVerifierConf struct {
	SecureInsName string
	CmdType       string
	Desc          []RequestDescInfo
}

RequestVerifierConf describes the request configuration

type ResponseVerifierConf

type ResponseVerifierConf struct {
	Message       string
	SecureCmpName string
}

ResponseVerifierConf describes the verifier configuration response

type VerificationImpl

type VerificationImpl struct{}

VerificationImpl structure

func GetInstance

func GetInstance() *VerificationImpl

GetInstance gives the VerificationImpl singletone instance

func (VerificationImpl) ContainerIsInWhiteList

func (VerificationImpl) ContainerIsInWhiteList(containerName string) error

ContainerIsInWhiteList checks if the containerName is in containerWhiteList

func (*VerificationImpl) RequestVerifierConf

func (verifier *VerificationImpl) RequestVerifierConf(containerInfo RequestVerifierConf) ResponseVerifierConf

RequestVerifierConf is Verifier configuration request handler