readmodel

package

Go to main page

Versions in this module

v0

v0.5.1

Oct 29, 2026

v0.5.0

Oct 28, 2026

Changes in this version

+ const RetiredRank

+ var ErrUnknownLifecycle = errors.New("readmodel: lifecycle must be active or retired")

+ type CredentialLifecycle string

+ const CredentialInGrace

+ const CredentialPastGrace

+ const CredentialValid

type CredentialStatus

+ LastPresented *registry.PresentedCredential

+ Lifecycle CredentialLifecycle

+ RenewableUntil time.Time

+ Serial string

+ type Lifecycle string

+ const LifecycleActive

+ const LifecycleRetired

type Reader

+ RenewalGrace time.Duration

type StatusCount

+ Retired bool

type Workload

+ Lifecycle Lifecycle

+ RetiredAt *time.Time

type WorkloadCounts

+ Retired int64

type WorkloadPageQuery

+ Retired bool

type WorkloadsRequest

+ Lifecycle Lifecycle

v0.4.3

Oct 21, 2026

v0.4.2

Oct 20, 2026

v0.4.1

Oct 18, 2026

v0.4.0

Oct 18, 2026

v0.3.0

Oct 17, 2026

v0.2.0

Oct 16, 2026

Changes in this version

+ const TelemetryLiveWindows

+ func OwnedTableStateName(s innerwallv1.OwnedTableState) string

type CredentialStatus

+ LastLateRenewal *registry.LateRenewal

type Health

+ ClockSkew *registry.ClockSkew

+ LastFlowReportAt *time.Time

+ OwnedTable innerwallv1.OwnedTableState

+ OwnedTableAbsentSince *time.Time

+ TelemetryLive bool

type Reader

+ FlowWindow time.Duration

+ func (s *Reader) CountWorkloads(ctx context.Context) (*WorkloadCounts, error)

type RollupRequest

+ Endpoint flowstore.Endpoint

+ type StatusCount struct

+ Removed bool

+ SyncState innerwallv1.SyncState

+ Workloads int64

type Store

+ CountWorkloadsByStatus func(ctx context.Context) ([]StatusCount, error)

+ type WorkloadCounts struct

+ BySync map[innerwallv1.SyncState]int64

+ Removed int64

+ Total int64

v0.1.0

Oct 6, 2026

Changes in this version

+ const DefaultGapLimit

+ const DefaultRange

+ const DefaultWorkloadPageLimit

+ const MaxGapLimit

+ const MaxWorkloadPageLimit

+ var ErrInvalidCursor = errors.New("readmodel: the cursor is not one this read issued")

+ var ErrInvalidRange = errors.New("readmodel: the end of the range must be after its start")

+ var ErrInvalidService = errors.New("readmodel: a service is <protocol>/<port>, or icmp")

+ var ErrWorkloadRequired = errors.New("readmodel: a workload is required")

+ func GapKindName(k innerwallv1.EvidenceGapKind) string

+ func GapSourceName(s innerwallv1.EvidenceSource) string

+ func IsUnknown(err error) bool

+ func ParseSyncState(s string) (innerwallv1.SyncState, error)

+ func ParseVerdict(s string) (innerwallv1.PolicyDecision, error)

+ func SyncStateName(s innerwallv1.SyncState) string

+ func TerminalVerdict(mode innerwallv1.EnforcementMode) innerwallv1.PolicyDecision

+ func VerdictName(d innerwallv1.PolicyDecision) string

+ type Counters struct

+ ByteCount uint64

+ ConnectionCount uint64

+ FlowCount int64

+ type CredentialState string

+ const CredentialExpired

+ const CredentialRenewalFailed

+ const CredentialRenews

+ type CredentialStatus struct

+ ExpiresAt time.Time

+ LastError string

+ LastRenewedAt *time.Time

+ State CredentialState

+ type Flow struct

+ ByteCount uint64

+ ConnectionCount uint64

+ Direction innerwallv1.Direction

+ DstAddress netip.Addr

+ FirstSeen time.Time

+ ID int64

+ LastSeen time.Time

+ Peer PeerRef

+ ProcessName string

+ Rule *RuleRef

+ Service Service

+ SrcAddress netip.Addr

+ Verdict innerwallv1.PolicyDecision

+ WindowEnd time.Time

+ WindowStart time.Time

+ type FlowsPage struct

+ Flows []Flow

+ NextCursor string

+ Range Range

+ Workload WorkloadRef

+ type FlowsRequest struct

+ Cursor string

+ Direction innerwallv1.Direction

+ From time.Time

+ Limit int

+ Peer string

+ Service *Service

+ To time.Time

+ Verdict innerwallv1.PolicyDecision

+ Workload identity.WorkloadID

+ type Gap struct

+ Count *uint64

+ From time.Time

+ Kind innerwallv1.EvidenceGapKind

+ Source innerwallv1.EvidenceSource

+ To time.Time

+ Workload WorkloadRef

+ type Gaps struct

+ Gaps []Gap

+ Range Range

+ Truncated bool

+ type GapsRequest struct

+ From time.Time

+ Limit int

+ Selector policy.Selector

+ To time.Time

+ Workload *identity.WorkloadID

+ type GroupKeys struct

+ Dst *WorkloadRef

+ Peer *PeerRef

+ Rule *RuleRef

+ Service *Service

+ Src *PeerRef

+ type Health struct

+ Credential CredentialStatus

+ DroppedFlowRecords uint64

+ LastSeenAt *time.Time

+ SourceOverruns uint64

+ type PeerRef struct

+ Key string

+ Kind flowstore.PeerKind

+ Labels map[string]string

+ Name string

+ type Range struct

+ From time.Time

+ To time.Time

+ type Reader struct

+ Flows flowstore.FlowStore

+ Now func() time.Time

+ Store Store

+ func (s *Reader) Gaps(ctx context.Context, req GapsRequest) (*Gaps, error)

+ func (s *Reader) GetWorkload(ctx context.Context, id identity.WorkloadID) (*Workload, error)

+ func (s *Reader) ListFlows(ctx context.Context, req FlowsRequest) (*FlowsPage, error)

+ func (s *Reader) ListWorkloads(ctx context.Context, req WorkloadsRequest) (*WorkloadsPage, error)

+ func (s *Reader) RenderedPolicy(ctx context.Context, id identity.WorkloadID) (*RenderedPolicy, error)

+ func (s *Reader) Rollup(ctx context.Context, req RollupRequest) (*Rollup, error)

+ type RenderedPolicy struct

+ Mode innerwallv1.EnforcementMode

+ RenderedAt *time.Time

+ Rules []RenderedRule

+ TerminalVerdict innerwallv1.PolicyDecision

+ Version uint64

+ Workload WorkloadRef

+ type RenderedRule struct

+ AuthoredRuleID string

+ CreatedAt *time.Time

+ Description string

+ ID string

+ PeerCIDRs []string

+ Ports []policy.PortRange

+ Protocol innerwallv1.Protocol

+ Ruleset *RulesetRef

+ UpdatedAt *time.Time

+ Verdict innerwallv1.PolicyDecision

+ type Rollup struct

+ EffectiveFrom *time.Time

+ EffectiveTo *time.Time

+ GroupBy flowstore.GroupBy

+ GroupCount int64

+ Groups []RollupGroup

+ Range Range

+ Totals Counters

+ Truncated bool

+ type RollupGroup struct

+ FirstSeen time.Time

+ Keys GroupKeys

+ LastSeen time.Time

+ WorkloadCount *int64

+ type RollupRequest struct

+ Direction innerwallv1.Direction

+ From time.Time

+ GroupBy flowstore.GroupBy

+ Limit int

+ Order flowstore.GroupOrder

+ Selector policy.Selector

+ Service *Service

+ To time.Time

+ Verdict innerwallv1.PolicyDecision

+ Workload *identity.WorkloadID

+ type RuleRef struct

+ AuthoredRuleID string

+ ID string

+ Protocol innerwallv1.Protocol

+ type RulesetRef struct

+ ID uuid.UUID

+ Name string

+ type Service struct

+ Port uint16

+ Protocol innerwallv1.Protocol

+ func ParseService(s string) (Service, error)

+ func (s Service) String() string

+ type Store interface

+ GetWorkloadPolicy func(ctx context.Context, id identity.WorkloadID) (*innerwallv1.WorkloadPolicy, error)

+ GetWorkloadRecord func(ctx context.Context, id identity.WorkloadID) (*WorkloadRecord, error)

+ ListAddressGroups func(ctx context.Context) ([]policy.AddressGroup, error)

+ ListRulesets func(ctx context.Context) ([]policy.Ruleset, error)

+ ListWorkloadLabelIndex func(ctx context.Context) (map[identity.WorkloadID]map[string]string, error)

+ ListWorkloadPage func(ctx context.Context, q WorkloadPageQuery) ([]WorkloadRecord, error)

+ ListWorkloads func(ctx context.Context) ([]registry.Workload, error)

+ type SyncStatus struct

+ AppliedVersion uint64

+ Error string

+ LastAckedAt *time.Time

+ LastApplyFailedAt *time.Time

+ LastSnapshotSentAt *time.Time

+ LatestRenderedAt *time.Time

+ LatestVersion uint64

+ State innerwallv1.SyncState

+ type Workload struct

+ Addresses []netip.Addr

+ Agent registry.AgentInfo

+ EnrolledAt time.Time

+ Facts *innerwallv1.HostFacts

+ Health Health

+ Hostname string

+ ID identity.WorkloadID

+ Labels []registry.Label

+ ListeningServices []registry.ListeningService

+ Mode innerwallv1.EnforcementMode

+ Sync SyncStatus

+ type WorkloadCursor struct

+ ID identity.WorkloadID

+ SeenKey time.Time

+ SyncRank int32

+ type WorkloadPageQuery struct

+ After *WorkloadCursor

+ IDs []identity.WorkloadID

+ Limit int

+ Mode innerwallv1.EnforcementMode

+ SyncState innerwallv1.SyncState

+ type WorkloadRecord struct

+ LastRenewedAt *time.Time

+ LatestRenderedAt *time.Time

+ LatestVersion uint64

+ ListeningServices []registry.ListeningService

+ SeenKey time.Time

+ SyncRank int32

+ type WorkloadRef struct

+ Hostname string

+ ID identity.WorkloadID

+ Labels map[string]string

+ type WorkloadsPage struct

+ NextCursor string

+ Workloads []Workload

+ type WorkloadsRequest struct

+ Cursor string

+ Limit int

+ Mode innerwallv1.EnforcementMode

+ Selector policy.Selector

+ SyncState innerwallv1.SyncState

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL