checker

Documentation

Index

• Constants
• Variables
• func NewRequestCache(store *policystore.PolicyStore, req *authz.CheckRequest) (*requestCache, error)
• func NewServer(store *policystore.PolicyStore) *authServer
• type Action

Constants

const SPIFFE_ID_PATTERN = "^spiffe://[^/]+/ns/([^/]+)/sa/([^/]+)$"

SPIFFE_ID_PATTERN is a regular expression to match SPIFFE ID URIs, e.g. spiffe://cluster.local/ns/default/sa/foo

Variables

var OK = code.Code_value["OK"]

var PERMISSION_DENIED = code.Code_value["PERMISSION_DENIED"]

Functions

func NewRequestCache

func NewRequestCache(store *policystore.PolicyStore, req *authz.CheckRequest) (*requestCache, error)

func NewServer

func NewServer(store *policystore.PolicyStore) *authServer

NewServer creates a new authServer and returns a pointer to it.

Types

type Action

type Action int

Action is an enumeration of actions a policy rule can take if it is matched.

const (
	ALLOW Action = iota
	DENY
	LOG
	PASS
	NO_MATCH // Indicates policy did not match request. Cannot be assigned to rule.
)