policy

Documentation

Index

• Constants
• func Watch(c metadata.Client, exitCh chan int, doCleanup bool) error
• type NetworkPolicy
  • func NewNetworkPolicy(network *metadata.Network) (*NetworkPolicy, error)
  • func ParseNetworkPolicyStr(npStr string) (*NetworkPolicy, error)
  • func (np *NetworkPolicy) Validate() error
• type NetworkPolicyRule
  • func (rule *NetworkPolicyRule) Validate() error
• type Rule

Constants

const (
	// ActionAllow action for the policy
	ActionAllow string = "allow"
	// ActionDeny action for the policy
	ActionDeny string = "deny"
)

const (
	StrStack   string = "stack"
	StrService string = "service"
	StrLinked  string = "linked"
)

StrStack for 'stack' string StrService for 'service' string StrLink for 'link' string

Functions

func Watch

func Watch(c metadata.Client, exitCh chan int, doCleanup bool) error

Watch is used to monitor metadata for changes

Types

type NetworkPolicy

type NetworkPolicy struct {
	DefaultAction string
	Rules         []NetworkPolicyRule
}

NetworkPolicy ...

func NewNetworkPolicy

func NewNetworkPolicy(network *metadata.Network) (*NetworkPolicy, error)

NewNetworkPolicy takes in the metadata type and converts to local type

func ParseNetworkPolicyStr

func ParseNetworkPolicyStr(npStr string) (*NetworkPolicy, error)

ParseNetworkPolicyStr is used to parse the input yaml representation of the network policy and perform basic validations

func (*NetworkPolicy) Validate

func (np *NetworkPolicy) Validate() error

Validate runs basic validations on the network policy

type NetworkPolicyRule

type NetworkPolicyRule struct {
	metadata.NetworkPolicyRule
}

NetworkPolicyRule ...

func (*NetworkPolicyRule) Validate

func (rule *NetworkPolicyRule) Validate() error

Validate runs basic validations on the policy

type Rule

type Rule struct {
	// contains filtered or unexported fields
}

Rule is used to store the info need to be a iptables rule