Documentation
¶
Index ¶
Constants ¶
View Source
const DestinationRulesCheckerType = "destinationrule"
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type DisabledNamespaceWideMTLSChecker ¶ added in v0.17.0
type DisabledNamespaceWideMTLSChecker struct {
DestinationRule kubernetes.IstioObject
MTLSDetails kubernetes.MTLSDetails
}
func (DisabledNamespaceWideMTLSChecker) Check ¶ added in v0.17.0
func (m DisabledNamespaceWideMTLSChecker) Check() ([]*models.IstioCheck, bool)
Check if a the Policy is allows non-mtls traffic when DestinationRule explicitly disables mTLS ns-wide
type MeshWideMTLSChecker ¶
type MeshWideMTLSChecker struct {
DestinationRule kubernetes.IstioObject
MTLSDetails kubernetes.MTLSDetails
}
func (MeshWideMTLSChecker) Check ¶
func (m MeshWideMTLSChecker) Check() ([]*models.IstioCheck, bool)
type MultiMatchChecker ¶
type MultiMatchChecker struct {
DestinationRules []kubernetes.IstioObject
}
func (MultiMatchChecker) Check ¶
func (m MultiMatchChecker) Check() models.IstioValidations
Check validates that no two destinationRules target the same host+subset combination
type NamespaceWideMTLSChecker ¶ added in v0.17.0
type NamespaceWideMTLSChecker struct {
DestinationRule kubernetes.IstioObject
MTLSDetails kubernetes.MTLSDetails
}
func (NamespaceWideMTLSChecker) Check ¶ added in v0.17.0
func (m NamespaceWideMTLSChecker) Check() ([]*models.IstioCheck, bool)
type NoDestinationChecker ¶
type NoDestinationChecker struct {
Namespace string
WorkloadList models.WorkloadList
DestinationRule kubernetes.IstioObject
ServiceEntries map[string][]string
Services []v1.Service
}
func (NoDestinationChecker) Check ¶
func (n NoDestinationChecker) Check() ([]*models.IstioCheck, bool)
Check parses the DestinationRule definitions and verifies that they point to an existing service, including any subset definitions
type TrafficPolicyChecker ¶
type TrafficPolicyChecker struct {
DestinationRules []kubernetes.IstioObject
MTLSDetails kubernetes.MTLSDetails
}
func (TrafficPolicyChecker) Check ¶
func (t TrafficPolicyChecker) Check() models.IstioValidations
Click to show internal directories.
Click to hide internal directories.