Documentation
¶
Overview ¶
Package access provides Zero Trust Access operator implementation.
Index ¶
- type AccessOperatorImpl
- func (o *AccessOperatorImpl) CheckPermissions(ctx context.Context) error
- func (o *AccessOperatorImpl) Create(ctx context.Context, resource *storage.ManagedResource) error
- func (o *AccessOperatorImpl) Delete(ctx context.Context, resource *storage.ManagedResource) error
- func (o *AccessOperatorImpl) EnsureAccess(ctx context.Context, binding *types.ResolvedAccessBinding) (*storage.ManagedResource, error)
- func (o *AccessOperatorImpl) Name() string
- func (o *AccessOperatorImpl) Reconcile(ctx context.Context, desired []*types.ParsedContainer) error
- func (o *AccessOperatorImpl) ReconcileBindings(ctx context.Context, bindings []*types.ResolvedAccessBinding) error
- func (o *AccessOperatorImpl) RemoveAccess(ctx context.Context, resource *storage.ManagedResource) error
- func (o *AccessOperatorImpl) Update(ctx context.Context, resource *storage.ManagedResource) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AccessOperatorImpl ¶
type AccessOperatorImpl struct {
// contains filtered or unexported fields
}
AccessOperatorImpl implements the Access operator.
func NewAccessOperator ¶
func NewAccessOperator(credManager *cloudflare.CredentialManager, store storage.Storage) *AccessOperatorImpl
NewAccessOperator creates a new Access operator.
func (*AccessOperatorImpl) CheckPermissions ¶
func (o *AccessOperatorImpl) CheckPermissions(ctx context.Context) error
CheckPermissions probes the Cloudflare Access API to verify the token has sufficient permissions. Returns nil if valid, error otherwise.
func (*AccessOperatorImpl) Create ¶
func (o *AccessOperatorImpl) Create(ctx context.Context, resource *storage.ManagedResource) error
Create creates a resource (part of Operator interface).
func (*AccessOperatorImpl) Delete ¶
func (o *AccessOperatorImpl) Delete(ctx context.Context, resource *storage.ManagedResource) error
Delete deletes a resource (part of Operator interface).
func (*AccessOperatorImpl) EnsureAccess ¶
func (o *AccessOperatorImpl) EnsureAccess(ctx context.Context, binding *types.ResolvedAccessBinding) (*storage.ManagedResource, error)
EnsureAccess creates or updates an Access Application for a resolved binding.
func (*AccessOperatorImpl) Name ¶
func (o *AccessOperatorImpl) Name() string
Name returns the operator name.
func (*AccessOperatorImpl) Reconcile ¶
func (o *AccessOperatorImpl) Reconcile(ctx context.Context, desired []*types.ParsedContainer) error
Reconcile ensures Access Applications match the desired state. This method is called by the reconciler with the list of all desired containers. The reconciler is responsible for resolving access references and creating ResolvedAccessBindings. This operator simply acts on the resolved bindings.
func (*AccessOperatorImpl) ReconcileBindings ¶
func (o *AccessOperatorImpl) ReconcileBindings(ctx context.Context, bindings []*types.ResolvedAccessBinding) error
ReconcileBindings reconciles access bindings (called by the reconciler).
func (*AccessOperatorImpl) RemoveAccess ¶
func (o *AccessOperatorImpl) RemoveAccess(ctx context.Context, resource *storage.ManagedResource) error
RemoveAccess removes an Access Application. If the CF resource was already deleted externally, it still cleans up storage.
func (*AccessOperatorImpl) Update ¶
func (o *AccessOperatorImpl) Update(ctx context.Context, resource *storage.ManagedResource) error
Update updates a resource (part of Operator interface).
Source Files