Help us shape the future of Go! Take the 2026 Go Developer Survey

security

package
v0.3.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 28, 2026 License: Apache-2.0 Imports: 3 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CapabilityManifestJSON

func CapabilityManifestJSON() []byte

Types

type Capability

type Capability struct {
	ID                   string `json:"id"`
	ServiceType          string `json:"service_type"`
	TailnetTransport     string `json:"tailnet_transport"`
	TSLinkTLSTermination string `json:"tslink_tls_termination"`
	BackendHop           string `json:"backend_hop"`
	WhoIsPropagation     string `json:"whois_propagation"`
	WhoIsCache           string `json:"whois_cache"`
	AllowAuthorization   string `json:"allow_authorization"`
	PublicExposure       string `json:"public_exposure"`
	LogSink              string `json:"log_sink"`
	LogSchema            string `json:"log_schema"`
	HostIsolation        string `json:"host_isolation"`
	ComplianceStatus     string `json:"compliance_status"`
}

type CapabilityManifest

type CapabilityManifest struct {
	SchemaVersion int          `json:"schema_version"`
	Product       string       `json:"product"`
	Capabilities  []Capability `json:"capabilities"`
}

func LoadCapabilityManifest

func LoadCapabilityManifest() (CapabilityManifest, error)

func (CapabilityManifest) Validate

func (m CapabilityManifest) Validate() error

type RemoteSideEffectPlan

type RemoteSideEffectPlan struct {
	SchemaVersion int      `json:"schema_version"`
	ID            string   `json:"id"`
	Operation     string   `json:"operation"`
	RemoteSystem  string   `json:"remote_system"`
	Mutates       bool     `json:"mutates"`
	Default       string   `json:"default"`
	OptInFlag     string   `json:"opt_in_flag,omitempty"`
	DisableFlag   string   `json:"disable_flag,omitempty"`
	Resources     []string `json:"resources"`
	Boundaries    []string `json:"boundaries"`
}

func ACLMutationPlan

func ACLMutationPlan(operation string, resources []string, enabled bool) RemoteSideEffectPlan

func FunnelAutoProvisionPlan

func FunnelAutoProvisionPlan(target string, owners []string, enabled bool) RemoteSideEffectPlan

FunnelAutoProvisionPlan describes the one default-on remote mutation used to make an acknowledged Funnel service autonomous. Unlike ordinary ACL tag management, this operation has a daemon/service off switch instead of an opt-in flag.

func InviteMutationPlan

func InviteMutationPlan(kind, operation, inviteID, service string, deviceID int64) RemoteSideEffectPlan

InviteMutationPlan describes one explicit outward-facing invite operation. Invite URLs and recipient PII are intentionally excluded from resources. The typed inputs make it impossible for callers to pass either accidentally.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL