config

Documentation

Index

• type CIDRConfig
• type CommandConfig
• type Config
  • func DefaultConfig() *Config
  • func NewConfig(configPath string) (*Config, error)
  • func (c *Config) EnableDNSProxy() bool
  • func (c *Config) IsOnlyContainer(target string) bool
  • func (c *Config) IsRestrictedMode(target string) bool
  • func (c *Config) Validate() error
• type DNSProxyConfig
• type DomainConfig
• type GIDConfig
• type LogConfig
• type RestrictedFileAccessConfig
• type RestrictedMountConfig
• type RestrictedNetworkConfig
• type UIDConfig

Types

type CIDRConfig

type CIDRConfig struct {
	Allow []string `yaml:"allow"`
	Deny  []string `yaml:"deny"`
}

type CommandConfig

type CommandConfig struct {
	Allow []string `yaml:"allow"`
	Deny  []string `yaml:"deny"`
}

type Config

type Config struct {
	RestrictedNetworkConfig    `yaml:"network"`
	RestrictedFileAccessConfig `yaml:"files"`
	RestrictedMountConfig      `yaml:"mount"`
	DNSProxyConfig             `yaml:"dns_proxy"`
	Log                        LogConfig
}

func DefaultConfig

func DefaultConfig() *Config

func NewConfig

func NewConfig(configPath string) (*Config, error)

func (*Config) EnableDNSProxy

func (c *Config) EnableDNSProxy() bool

func (*Config) IsOnlyContainer

func (c *Config) IsOnlyContainer(target string) bool

func (*Config) IsRestrictedMode

func (c *Config) IsRestrictedMode(target string) bool

func (*Config) Validate

func (c *Config) Validate() error

type DNSProxyConfig

type DNSProxyConfig struct {
	Enable        bool     `yaml:"enable"`
	Upstreams     []string `yaml:"upstreams"`
	BindAddresses []string `yaml:"bind"`
}

type DomainConfig

type DomainConfig struct {
	Allow    []string `yaml:"allow"`
	Deny     []string `yaml:"deny"`
	Interval uint     `yaml:"interval"` // deprecated
}

type GIDConfig

type GIDConfig struct {
	Allow []uint `yaml:"allow"`
	Deny  []uint `yaml:"deny"`
}

type LogConfig

type LogConfig struct {
	Format  string            `yaml:"format"`
	Output  string            `yaml:"output"`
	MaxSize int               `yaml:"max_size"`
	MaxAge  int               `yaml:"max_age"`
	Labels  map[string]string `yaml:"labels"`
}

type RestrictedFileAccessConfig

type RestrictedFileAccessConfig struct {
	Enable bool
	Mode   string   `yaml:"mode"`
	Target string   `yaml:"target"`
	Allow  []string `yaml:"allow"`
	Deny   []string `yaml:"deny"`
}

type RestrictedMountConfig

type RestrictedMountConfig struct {
	Enable         bool
	Mode           string   `yaml:"mode"`
	Target         string   `yaml:"target"`
	DenySourcePath []string `yaml:"deny"`
}

type RestrictedNetworkConfig

type RestrictedNetworkConfig struct {
	Enable  bool
	Mode    string        `yaml:"mode"`
	Target  string        `yaml:"target"`
	Command CommandConfig `yaml:"command"`
	CIDR    CIDRConfig    `yaml:"cidr"`
	Domain  DomainConfig  `yaml:"domain"`
	UID     UIDConfig     `yaml:"uid"`
	GID     GIDConfig     `yaml:"gid"`
}

type UIDConfig

type UIDConfig struct {
	Allow []uint `yaml:"allow"`
	Deny  []uint `yaml:"deny"`
}