sentinel

package

v1.2.3 Latest Latest Go to latest Published: Sep 13, 2018 License: MPL-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/ShimmerGlass/consul

Links

Open Source Insights

Documentation ¶

Index ¶

func ScopeCatalogUpsert(node *api.Node, service *api.AgentService) map[string]interface{}
func ScopeKVUpsert(key string, value []byte, flags uint64) map[string]interface{}
type Evaluator
- func New(logger *log.Logger) Evaluator
type ScopeFn

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ScopeCatalogUpsert ¶

func ScopeCatalogUpsert(node *api.Node, service *api.AgentService) map[string]interface{}

ScopeCatalogUpsert returns the standard sentinel scope for a catalog create or update. Service is allowed to be nil.

func ScopeKVUpsert ¶

func ScopeKVUpsert(key string, value []byte, flags uint64) map[string]interface{}

ScopeKVUpsert returns the standard sentinel scope for a KV create or update.

Types ¶

type Evaluator ¶

type Evaluator interface {
	Compile(policy string) error
	Execute(policy string, enforcementLevel string, data map[string]interface{}) bool
}

Evaluator wraps the Sentinel evaluator from the HashiCorp Sentinel policy engine.

func New ¶

func New(logger *log.Logger) Evaluator

New returns a new instance of the Sentinel code engine. This is only available in Consul Enterprise so this version always returns nil.

type ScopeFn ¶

type ScopeFn func() map[string]interface{}

ScopeFn is a callback that provides a sentinel scope. This is a callback so that if we don't run sentinel for some reason (not enabled or a basic policy check means we don't have to) then we don't spend the effort to make the map.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL