Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CapabilityManifestJSON ¶
func CapabilityManifestJSON() []byte
Types ¶
type Capability ¶
type Capability struct {
ID string `json:"id"`
ServiceType string `json:"service_type"`
TailnetTransport string `json:"tailnet_transport"`
TSLinkTLSTermination string `json:"tslink_tls_termination"`
BackendHop string `json:"backend_hop"`
WhoIsPropagation string `json:"whois_propagation"`
WhoIsCache string `json:"whois_cache"`
AllowAuthorization string `json:"allow_authorization"`
PublicExposure string `json:"public_exposure"`
LogSink string `json:"log_sink"`
LogSchema string `json:"log_schema"`
HostIsolation string `json:"host_isolation"`
ComplianceStatus string `json:"compliance_status"`
}
type CapabilityManifest ¶
type CapabilityManifest struct {
SchemaVersion int `json:"schema_version"`
Product string `json:"product"`
Capabilities []Capability `json:"capabilities"`
}
func LoadCapabilityManifest ¶
func LoadCapabilityManifest() (CapabilityManifest, error)
func (CapabilityManifest) Validate ¶
func (m CapabilityManifest) Validate() error
type RemoteSideEffectPlan ¶
type RemoteSideEffectPlan struct {
SchemaVersion int `json:"schema_version"`
ID string `json:"id"`
Operation string `json:"operation"`
RemoteSystem string `json:"remote_system"`
Mutates bool `json:"mutates"`
Default string `json:"default"`
OptInFlag string `json:"opt_in_flag,omitempty"`
DisableFlag string `json:"disable_flag,omitempty"`
Resources []string `json:"resources"`
Boundaries []string `json:"boundaries"`
}
func ACLMutationPlan ¶
func ACLMutationPlan(operation string, resources []string, enabled bool) RemoteSideEffectPlan
func FunnelAutoProvisionPlan ¶
func FunnelAutoProvisionPlan(target string, owners []string, enabled bool) RemoteSideEffectPlan
FunnelAutoProvisionPlan describes the one default-on remote mutation used to make an acknowledged Funnel service autonomous. Unlike ordinary ACL tag management, this operation has a daemon/service off switch instead of an opt-in flag.
func InviteMutationPlan ¶
func InviteMutationPlan(kind, operation, inviteID, service string, deviceID int64) RemoteSideEffectPlan
InviteMutationPlan describes one explicit outward-facing invite operation. Invite URLs and recipient PII are intentionally excluded from resources. The typed inputs make it impossible for callers to pass either accidentally.
Click to show internal directories.
Click to hide internal directories.