The highest tagged major version is v2.

policy

package

v1.6.21 Latest Latest Go to latest Published: Sep 18, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openziti/ziti

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type ApiSessionEnforcer
- func NewSessionEnforcer(appEnv *env.AppEnv, frequency time.Duration, sessionTimeout time.Duration) *ApiSessionEnforcer
- func (s *ApiSessionEnforcer) Run() error
type RevocationEnforcer
- func NewRevocationEnforcer(appEnv *env.AppEnv, frequency time.Duration, dispatcher command.Dispatcher) *RevocationEnforcer
- func (e *RevocationEnforcer) Run() error
type ServicePolicyEnforcer
- func NewServicePolicyEnforcer(appEnv *env.AppEnv, f time.Duration) *ServicePolicyEnforcer
- func (enforcer *ServicePolicyEnforcer) Run() error

Constants ¶

View Source

const (
	ApiSessionEnforcerRun    = "api.session.enforcer.run"
	ApiSessionEnforcerDelete = "api.session.enforcer.delete"
)

View Source

const (
	RevocationEnforcerRun    = "revocation.enforcer.run"
	RevocationEnforcerDelete = "revocation.enforcer.delete"
	RevocationEnforcerSource = "revocation.enforcer"
)

View Source

const (
	SessionPolicyEnforcerRun          = "service.policy.enforcer.run"
	SessionPolicyEnforcerEvent        = "service.policy.enforcer.event"
	SessionPolicyEnforcerEventDeletes = "service.policy.enforcer.event.deletes"
	SessionPolicyEnforcerRunDeletes   = "service.policy.enforcer.run.deletes"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type ApiSessionEnforcer ¶

type ApiSessionEnforcer struct {
	*runner.BaseOperation
	// contains filtered or unexported fields
}

func NewSessionEnforcer ¶

func NewSessionEnforcer(appEnv *env.AppEnv, frequency time.Duration, sessionTimeout time.Duration) *ApiSessionEnforcer

func (*ApiSessionEnforcer) Run ¶

func (s *ApiSessionEnforcer) Run() error

type RevocationEnforcer ¶ added in v1.6.15

type RevocationEnforcer struct {
	*runner.BaseOperation
	// contains filtered or unexported fields
}

RevocationEnforcer periodically purges expired revocation records from the controller database and router data models. It only runs on the raft leader (or in a leaderless configuration) to avoid redundant batch-delete dispatches.

func NewRevocationEnforcer ¶ added in v1.6.15

func NewRevocationEnforcer(appEnv *env.AppEnv, frequency time.Duration, dispatcher command.Dispatcher) *RevocationEnforcer

NewRevocationEnforcer creates a RevocationEnforcer that runs at the given frequency.

func (*RevocationEnforcer) Run ¶ added in v1.6.15

func (e *RevocationEnforcer) Run() error

Run deletes all expired revocation entries. It is a no-op on non-leader nodes.

type ServicePolicyEnforcer ¶

type ServicePolicyEnforcer struct {
	*runner.BaseOperation
	// contains filtered or unexported fields
}

func NewServicePolicyEnforcer ¶

func NewServicePolicyEnforcer(appEnv *env.AppEnv, f time.Duration) *ServicePolicyEnforcer

func (*ServicePolicyEnforcer) Run ¶

func (enforcer *ServicePolicyEnforcer) Run() error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL