istio: istio.io/istio/mixer/template/authorization Index | Files

package authorization

import "istio.io/istio/mixer/template/authorization"

Index

Package Files

template_handler.gen.go template_handler_service.pb.go

Constants

const TemplateName = "authorization"

Fully qualified name of the template

Variables

var (
    ErrInvalidLengthTemplateHandlerService = fmt.Errorf("proto: negative length found during unmarshaling")
    ErrIntOverflowTemplateHandlerService   = fmt.Errorf("proto: integer overflow")
)

func RegisterHandleAuthorizationServiceServer Uses

func RegisterHandleAuthorizationServiceServer(s *grpc.Server, srv HandleAuthorizationServiceServer)

type Action Uses

type Action struct {

    // Namespace the target action is taking place in.
    Namespace string

    // The Service the action is being taken on.
    Service string

    // What action is being taken.
    Method string

    // HTTP REST path within the service
    Path string

    // Additional data about the action for use in policy.
    Properties map[string]interface{}
}

An action defines "how a resource is accessed".

type ActionInstanceParam Uses

type ActionInstanceParam struct {
    // Namespace the target action is taking place in.
    Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
    // The Service the action is being taken on.
    Service string `protobuf:"bytes,2,opt,name=service,proto3" json:"service,omitempty"`
    // What action is being taken.
    Method string `protobuf:"bytes,3,opt,name=method,proto3" json:"method,omitempty"`
    // HTTP REST path within the service
    Path string `protobuf:"bytes,4,opt,name=path,proto3" json:"path,omitempty"`
    // Additional data about the action for use in policy.
    Properties map[string]string `protobuf:"bytes,5,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
}

An action defines "how a resource is accessed".

func (*ActionInstanceParam) Descriptor Uses

func (*ActionInstanceParam) Descriptor() ([]byte, []int)

func (*ActionInstanceParam) Marshal Uses

func (m *ActionInstanceParam) Marshal() (dAtA []byte, err error)

func (*ActionInstanceParam) MarshalTo Uses

func (m *ActionInstanceParam) MarshalTo(dAtA []byte) (int, error)

func (*ActionInstanceParam) MarshalToSizedBuffer Uses

func (m *ActionInstanceParam) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ActionInstanceParam) ProtoMessage Uses

func (*ActionInstanceParam) ProtoMessage()

func (*ActionInstanceParam) Reset Uses

func (m *ActionInstanceParam) Reset()

func (*ActionInstanceParam) Size Uses

func (m *ActionInstanceParam) Size() (n int)

func (*ActionInstanceParam) String Uses

func (this *ActionInstanceParam) String() string

func (*ActionInstanceParam) Unmarshal Uses

func (m *ActionInstanceParam) Unmarshal(dAtA []byte) error

func (*ActionInstanceParam) XXX_DiscardUnknown Uses

func (m *ActionInstanceParam) XXX_DiscardUnknown()

func (*ActionInstanceParam) XXX_Marshal Uses

func (m *ActionInstanceParam) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ActionInstanceParam) XXX_Merge Uses

func (m *ActionInstanceParam) XXX_Merge(src proto.Message)

func (*ActionInstanceParam) XXX_Size Uses

func (m *ActionInstanceParam) XXX_Size() int

func (*ActionInstanceParam) XXX_Unmarshal Uses

func (m *ActionInstanceParam) XXX_Unmarshal(b []byte) error

type ActionMsg Uses

type ActionMsg struct {
    // Namespace the target action is taking place in.
    Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
    // The Service the action is being taken on.
    Service string `protobuf:"bytes,2,opt,name=service,proto3" json:"service,omitempty"`
    // What action is being taken.
    Method string `protobuf:"bytes,3,opt,name=method,proto3" json:"method,omitempty"`
    // HTTP REST path within the service
    Path string `protobuf:"bytes,4,opt,name=path,proto3" json:"path,omitempty"`
    // Additional data about the action for use in policy.
    Properties map[string]*v1beta1.Value `protobuf:"bytes,5,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
}

An action defines "how a resource is accessed".

func (*ActionMsg) Descriptor Uses

func (*ActionMsg) Descriptor() ([]byte, []int)

func (*ActionMsg) Marshal Uses

func (m *ActionMsg) Marshal() (dAtA []byte, err error)

func (*ActionMsg) MarshalTo Uses

func (m *ActionMsg) MarshalTo(dAtA []byte) (int, error)

func (*ActionMsg) MarshalToSizedBuffer Uses

func (m *ActionMsg) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ActionMsg) ProtoMessage Uses

func (*ActionMsg) ProtoMessage()

func (*ActionMsg) Reset Uses

func (m *ActionMsg) Reset()

func (*ActionMsg) Size Uses

func (m *ActionMsg) Size() (n int)

func (*ActionMsg) String Uses

func (this *ActionMsg) String() string

func (*ActionMsg) Unmarshal Uses

func (m *ActionMsg) Unmarshal(dAtA []byte) error

func (*ActionMsg) XXX_DiscardUnknown Uses

func (m *ActionMsg) XXX_DiscardUnknown()

func (*ActionMsg) XXX_Marshal Uses

func (m *ActionMsg) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ActionMsg) XXX_Merge Uses

func (m *ActionMsg) XXX_Merge(src proto.Message)

func (*ActionMsg) XXX_Size Uses

func (m *ActionMsg) XXX_Size() int

func (*ActionMsg) XXX_Unmarshal Uses

func (m *ActionMsg) XXX_Unmarshal(b []byte) error

type ActionType Uses

type ActionType struct {
    // Additional data about the action for use in policy.
    Properties map[string]v1beta1.ValueType `protobuf:"bytes,5,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"varint,2,opt,name=value,proto3,enum=istio.policy.v1beta1.ValueType"`
}

An action defines "how a resource is accessed".

func (*ActionType) Descriptor Uses

func (*ActionType) Descriptor() ([]byte, []int)

func (*ActionType) Marshal Uses

func (m *ActionType) Marshal() (dAtA []byte, err error)

func (*ActionType) MarshalTo Uses

func (m *ActionType) MarshalTo(dAtA []byte) (int, error)

func (*ActionType) MarshalToSizedBuffer Uses

func (m *ActionType) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ActionType) ProtoMessage Uses

func (*ActionType) ProtoMessage()

func (*ActionType) Reset Uses

func (m *ActionType) Reset()

func (*ActionType) Size Uses

func (m *ActionType) Size() (n int)

func (*ActionType) String Uses

func (this *ActionType) String() string

func (*ActionType) Unmarshal Uses

func (m *ActionType) Unmarshal(dAtA []byte) error

func (*ActionType) XXX_DiscardUnknown Uses

func (m *ActionType) XXX_DiscardUnknown()

func (*ActionType) XXX_Marshal Uses

func (m *ActionType) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ActionType) XXX_Merge Uses

func (m *ActionType) XXX_Merge(src proto.Message)

func (*ActionType) XXX_Size Uses

func (m *ActionType) XXX_Size() int

func (*ActionType) XXX_Unmarshal Uses

func (m *ActionType) XXX_Unmarshal(b []byte) error

type HandleAuthorizationRequest Uses

type HandleAuthorizationRequest struct {
    // 'authorization' instance.
    Instance *InstanceMsg `protobuf:"bytes,1,opt,name=instance,proto3" json:"instance,omitempty"`
    // Adapter specific handler configuration.
    //
    // Note: Backends can also implement [InfrastructureBackend][https://istio.io/docs/reference/config/mixer/istio.mixer.adapter.model.v1beta1.html#InfrastructureBackend]
    // service and therefore opt to receive handler configuration during session creation through [InfrastructureBackend.CreateSession][TODO: Link to this fragment]
    // call. In that case, adapter_config will have type_url as 'google.protobuf.Any.type_url' and would contain string
    // value of session_id (returned from InfrastructureBackend.CreateSession).
    AdapterConfig *types.Any `protobuf:"bytes,2,opt,name=adapter_config,json=adapterConfig,proto3" json:"adapter_config,omitempty"`
    // Id to dedupe identical requests from Mixer.
    DedupId string `protobuf:"bytes,3,opt,name=dedup_id,json=dedupId,proto3" json:"dedup_id,omitempty"`
}

Request message for HandleAuthorization method.

func (*HandleAuthorizationRequest) Descriptor Uses

func (*HandleAuthorizationRequest) Descriptor() ([]byte, []int)

func (*HandleAuthorizationRequest) Marshal Uses

func (m *HandleAuthorizationRequest) Marshal() (dAtA []byte, err error)

func (*HandleAuthorizationRequest) MarshalTo Uses

func (m *HandleAuthorizationRequest) MarshalTo(dAtA []byte) (int, error)

func (*HandleAuthorizationRequest) MarshalToSizedBuffer Uses

func (m *HandleAuthorizationRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*HandleAuthorizationRequest) ProtoMessage Uses

func (*HandleAuthorizationRequest) ProtoMessage()

func (*HandleAuthorizationRequest) Reset Uses

func (m *HandleAuthorizationRequest) Reset()

func (*HandleAuthorizationRequest) Size Uses

func (m *HandleAuthorizationRequest) Size() (n int)

func (*HandleAuthorizationRequest) String Uses

func (this *HandleAuthorizationRequest) String() string

func (*HandleAuthorizationRequest) Unmarshal Uses

func (m *HandleAuthorizationRequest) Unmarshal(dAtA []byte) error

func (*HandleAuthorizationRequest) XXX_DiscardUnknown Uses

func (m *HandleAuthorizationRequest) XXX_DiscardUnknown()

func (*HandleAuthorizationRequest) XXX_Marshal Uses

func (m *HandleAuthorizationRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*HandleAuthorizationRequest) XXX_Merge Uses

func (m *HandleAuthorizationRequest) XXX_Merge(src proto.Message)

func (*HandleAuthorizationRequest) XXX_Size Uses

func (m *HandleAuthorizationRequest) XXX_Size() int

func (*HandleAuthorizationRequest) XXX_Unmarshal Uses

func (m *HandleAuthorizationRequest) XXX_Unmarshal(b []byte) error

type HandleAuthorizationServiceClient Uses

type HandleAuthorizationServiceClient interface {
    // HandleAuthorization is called by Mixer at request-time to deliver 'authorization' instances to the backend.
    HandleAuthorization(ctx context.Context, in *HandleAuthorizationRequest, opts ...grpc.CallOption) (*v1beta11.CheckResult, error)
}

HandleAuthorizationServiceClient is the client API for HandleAuthorizationService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewHandleAuthorizationServiceClient Uses

func NewHandleAuthorizationServiceClient(cc *grpc.ClientConn) HandleAuthorizationServiceClient

type HandleAuthorizationServiceServer Uses

type HandleAuthorizationServiceServer interface {
    // HandleAuthorization is called by Mixer at request-time to deliver 'authorization' instances to the backend.
    HandleAuthorization(context.Context, *HandleAuthorizationRequest) (*v1beta11.CheckResult, error)
}

HandleAuthorizationServiceServer is the server API for HandleAuthorizationService service.

type Handler Uses

type Handler interface {
    adapter.Handler

    // HandleAuthorization is called by Mixer at request time to deliver instances to
    // to an adapter.
    HandleAuthorization(context.Context, *Instance) (adapter.CheckResult, error)
}

Handler must be implemented by adapter code if it wants to process data associated with the 'authorization' template.

Mixer uses this interface to call into the adapter at request time in order to dispatch created instances to the adapter. Adapters take the incoming instances and do what they need to achieve their primary function.

The name of each instance can be used as a key into the Type map supplied to the adapter at configuration time via the method 'SetAuthorizationTypes'. These Type associated with an instance describes the shape of the instance

type HandlerBuilder Uses

type HandlerBuilder interface {
    adapter.HandlerBuilder

    // SetAuthorizationTypes is invoked by Mixer to pass the template-specific Type information for instances that an adapter
    // may receive at runtime. The type information describes the shape of the instance.
    SetAuthorizationTypes(map[string]*Type)
}

HandlerBuilder must be implemented by adapters if they want to process data associated with the 'authorization' template.

Mixer uses this interface to call into the adapter at configuration time to configure it with adapter-specific configuration as well as all template-specific type information.

type Instance Uses

type Instance struct {
    // Name of the instance as specified in configuration.
    Name string

    // A subject contains a list of attributes that identify
    // the caller identity.
    Subject *Subject

    // An action defines "how a resource is accessed".
    Action *Action
}

Instance is constructed by Mixer for the 'authorization' template.

The `authorization` template defines parameters for performing policy enforcement within Istio. It is primarily concerned with enabling Mixer adapters to make decisions about who is allowed to do what. In this template, the "who" is defined in a Subject message. The "what" is defined in an Action message. During a Mixer Check call, these values will be populated based on configuration from request attributes and passed to individual authorization adapters to adjudicate.

type InstanceMsg Uses

type InstanceMsg struct {
    // Name of the instance as specified in configuration.
    Name string `protobuf:"bytes,72295727,opt,name=name,proto3" json:"name,omitempty"`
    // A subject contains a list of attributes that identify
    // the caller identity.
    Subject *SubjectMsg `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
    // An action defines "how a resource is accessed".
    Action *ActionMsg `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
}

Contains instance payload for 'authorization' template. This is passed to infrastructure backends during request-time through HandleAuthorizationService.HandleAuthorization.

func (*InstanceMsg) Descriptor Uses

func (*InstanceMsg) Descriptor() ([]byte, []int)

func (*InstanceMsg) Marshal Uses

func (m *InstanceMsg) Marshal() (dAtA []byte, err error)

func (*InstanceMsg) MarshalTo Uses

func (m *InstanceMsg) MarshalTo(dAtA []byte) (int, error)

func (*InstanceMsg) MarshalToSizedBuffer Uses

func (m *InstanceMsg) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*InstanceMsg) ProtoMessage Uses

func (*InstanceMsg) ProtoMessage()

func (*InstanceMsg) Reset Uses

func (m *InstanceMsg) Reset()

func (*InstanceMsg) Size Uses

func (m *InstanceMsg) Size() (n int)

func (*InstanceMsg) String Uses

func (this *InstanceMsg) String() string

func (*InstanceMsg) Unmarshal Uses

func (m *InstanceMsg) Unmarshal(dAtA []byte) error

func (*InstanceMsg) XXX_DiscardUnknown Uses

func (m *InstanceMsg) XXX_DiscardUnknown()

func (*InstanceMsg) XXX_Marshal Uses

func (m *InstanceMsg) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*InstanceMsg) XXX_Merge Uses

func (m *InstanceMsg) XXX_Merge(src proto.Message)

func (*InstanceMsg) XXX_Size Uses

func (m *InstanceMsg) XXX_Size() int

func (*InstanceMsg) XXX_Unmarshal Uses

func (m *InstanceMsg) XXX_Unmarshal(b []byte) error

type InstanceParam Uses

type InstanceParam struct {
    // A subject contains a list of attributes that identify
    // the caller identity.
    Subject *SubjectInstanceParam `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
    // An action defines "how a resource is accessed".
    Action *ActionInstanceParam `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
}

Represents instance configuration schema for 'authorization' template.

func (*InstanceParam) Descriptor Uses

func (*InstanceParam) Descriptor() ([]byte, []int)

func (*InstanceParam) Marshal Uses

func (m *InstanceParam) Marshal() (dAtA []byte, err error)

func (*InstanceParam) MarshalTo Uses

func (m *InstanceParam) MarshalTo(dAtA []byte) (int, error)

func (*InstanceParam) MarshalToSizedBuffer Uses

func (m *InstanceParam) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*InstanceParam) ProtoMessage Uses

func (*InstanceParam) ProtoMessage()

func (*InstanceParam) Reset Uses

func (m *InstanceParam) Reset()

func (*InstanceParam) Size Uses

func (m *InstanceParam) Size() (n int)

func (*InstanceParam) String Uses

func (this *InstanceParam) String() string

func (*InstanceParam) Unmarshal Uses

func (m *InstanceParam) Unmarshal(dAtA []byte) error

func (*InstanceParam) XXX_DiscardUnknown Uses

func (m *InstanceParam) XXX_DiscardUnknown()

func (*InstanceParam) XXX_Marshal Uses

func (m *InstanceParam) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*InstanceParam) XXX_Merge Uses

func (m *InstanceParam) XXX_Merge(src proto.Message)

func (*InstanceParam) XXX_Size Uses

func (m *InstanceParam) XXX_Size() int

func (*InstanceParam) XXX_Unmarshal Uses

func (m *InstanceParam) XXX_Unmarshal(b []byte) error

type Subject Uses

type Subject struct {

    // The user name/ID that the subject represents.
    User string

    // Groups the subject belongs to depending on the authentication mechanism,
    // "groups" are normally populated from JWT claim or client certificate.
    // The operator can define how it is populated when creating an instance of
    // the template.
    Groups string

    // Additional attributes about the subject.
    Properties map[string]interface{}
}

A subject contains a list of attributes that identify the caller identity.

type SubjectInstanceParam Uses

type SubjectInstanceParam struct {
    // The user name/ID that the subject represents.
    User string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
    // Groups the subject belongs to depending on the authentication mechanism,
    // "groups" are normally populated from JWT claim or client certificate.
    // The operator can define how it is populated when creating an instance of
    // the template.
    Groups string `protobuf:"bytes,2,opt,name=groups,proto3" json:"groups,omitempty"`
    // Additional attributes about the subject.
    Properties map[string]string `protobuf:"bytes,3,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
}

A subject contains a list of attributes that identify the caller identity.

func (*SubjectInstanceParam) Descriptor Uses

func (*SubjectInstanceParam) Descriptor() ([]byte, []int)

func (*SubjectInstanceParam) Marshal Uses

func (m *SubjectInstanceParam) Marshal() (dAtA []byte, err error)

func (*SubjectInstanceParam) MarshalTo Uses

func (m *SubjectInstanceParam) MarshalTo(dAtA []byte) (int, error)

func (*SubjectInstanceParam) MarshalToSizedBuffer Uses

func (m *SubjectInstanceParam) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SubjectInstanceParam) ProtoMessage Uses

func (*SubjectInstanceParam) ProtoMessage()

func (*SubjectInstanceParam) Reset Uses

func (m *SubjectInstanceParam) Reset()

func (*SubjectInstanceParam) Size Uses

func (m *SubjectInstanceParam) Size() (n int)

func (*SubjectInstanceParam) String Uses

func (this *SubjectInstanceParam) String() string

func (*SubjectInstanceParam) Unmarshal Uses

func (m *SubjectInstanceParam) Unmarshal(dAtA []byte) error

func (*SubjectInstanceParam) XXX_DiscardUnknown Uses

func (m *SubjectInstanceParam) XXX_DiscardUnknown()

func (*SubjectInstanceParam) XXX_Marshal Uses

func (m *SubjectInstanceParam) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SubjectInstanceParam) XXX_Merge Uses

func (m *SubjectInstanceParam) XXX_Merge(src proto.Message)

func (*SubjectInstanceParam) XXX_Size Uses

func (m *SubjectInstanceParam) XXX_Size() int

func (*SubjectInstanceParam) XXX_Unmarshal Uses

func (m *SubjectInstanceParam) XXX_Unmarshal(b []byte) error

type SubjectMsg Uses

type SubjectMsg struct {
    // The user name/ID that the subject represents.
    User string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
    // Groups the subject belongs to depending on the authentication mechanism,
    // "groups" are normally populated from JWT claim or client certificate.
    // The operator can define how it is populated when creating an instance of
    // the template.
    Groups string `protobuf:"bytes,2,opt,name=groups,proto3" json:"groups,omitempty"`
    // Additional attributes about the subject.
    Properties map[string]*v1beta1.Value `protobuf:"bytes,3,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
}

A subject contains a list of attributes that identify the caller identity.

func (*SubjectMsg) Descriptor Uses

func (*SubjectMsg) Descriptor() ([]byte, []int)

func (*SubjectMsg) Marshal Uses

func (m *SubjectMsg) Marshal() (dAtA []byte, err error)

func (*SubjectMsg) MarshalTo Uses

func (m *SubjectMsg) MarshalTo(dAtA []byte) (int, error)

func (*SubjectMsg) MarshalToSizedBuffer Uses

func (m *SubjectMsg) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SubjectMsg) ProtoMessage Uses

func (*SubjectMsg) ProtoMessage()

func (*SubjectMsg) Reset Uses

func (m *SubjectMsg) Reset()

func (*SubjectMsg) Size Uses

func (m *SubjectMsg) Size() (n int)

func (*SubjectMsg) String Uses

func (this *SubjectMsg) String() string

func (*SubjectMsg) Unmarshal Uses

func (m *SubjectMsg) Unmarshal(dAtA []byte) error

func (*SubjectMsg) XXX_DiscardUnknown Uses

func (m *SubjectMsg) XXX_DiscardUnknown()

func (*SubjectMsg) XXX_Marshal Uses

func (m *SubjectMsg) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SubjectMsg) XXX_Merge Uses

func (m *SubjectMsg) XXX_Merge(src proto.Message)

func (*SubjectMsg) XXX_Size Uses

func (m *SubjectMsg) XXX_Size() int

func (*SubjectMsg) XXX_Unmarshal Uses

func (m *SubjectMsg) XXX_Unmarshal(b []byte) error

type SubjectType Uses

type SubjectType struct {
    // Additional attributes about the subject.
    Properties map[string]v1beta1.ValueType `protobuf:"bytes,3,rep,name=properties,proto3" json:"properties,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"varint,2,opt,name=value,proto3,enum=istio.policy.v1beta1.ValueType"`
}

A subject contains a list of attributes that identify the caller identity.

func (*SubjectType) Descriptor Uses

func (*SubjectType) Descriptor() ([]byte, []int)

func (*SubjectType) Marshal Uses

func (m *SubjectType) Marshal() (dAtA []byte, err error)

func (*SubjectType) MarshalTo Uses

func (m *SubjectType) MarshalTo(dAtA []byte) (int, error)

func (*SubjectType) MarshalToSizedBuffer Uses

func (m *SubjectType) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SubjectType) ProtoMessage Uses

func (*SubjectType) ProtoMessage()

func (*SubjectType) Reset Uses

func (m *SubjectType) Reset()

func (*SubjectType) Size Uses

func (m *SubjectType) Size() (n int)

func (*SubjectType) String Uses

func (this *SubjectType) String() string

func (*SubjectType) Unmarshal Uses

func (m *SubjectType) Unmarshal(dAtA []byte) error

func (*SubjectType) XXX_DiscardUnknown Uses

func (m *SubjectType) XXX_DiscardUnknown()

func (*SubjectType) XXX_Marshal Uses

func (m *SubjectType) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SubjectType) XXX_Merge Uses

func (m *SubjectType) XXX_Merge(src proto.Message)

func (*SubjectType) XXX_Size Uses

func (m *SubjectType) XXX_Size() int

func (*SubjectType) XXX_Unmarshal Uses

func (m *SubjectType) XXX_Unmarshal(b []byte) error

type Type Uses

type Type struct {
    // A subject contains a list of attributes that identify
    // the caller identity.
    Subject *SubjectType `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
    // An action defines "how a resource is accessed".
    Action *ActionType `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
}

Contains inferred type information about specific instance of 'authorization' template. This is passed to infrastructure backends during configuration-time through [InfrastructureBackend.CreateSession][TODO: Link to this fragment].

func (*Type) Descriptor Uses

func (*Type) Descriptor() ([]byte, []int)

func (*Type) Marshal Uses

func (m *Type) Marshal() (dAtA []byte, err error)

func (*Type) MarshalTo Uses

func (m *Type) MarshalTo(dAtA []byte) (int, error)

func (*Type) MarshalToSizedBuffer Uses

func (m *Type) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Type) ProtoMessage Uses

func (*Type) ProtoMessage()

func (*Type) Reset Uses

func (m *Type) Reset()

func (*Type) Size Uses

func (m *Type) Size() (n int)

func (*Type) String Uses

func (this *Type) String() string

func (*Type) Unmarshal Uses

func (m *Type) Unmarshal(dAtA []byte) error

func (*Type) XXX_DiscardUnknown Uses

func (m *Type) XXX_DiscardUnknown()

func (*Type) XXX_Marshal Uses

func (m *Type) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Type) XXX_Merge Uses

func (m *Type) XXX_Merge(src proto.Message)

func (*Type) XXX_Size Uses

func (m *Type) XXX_Size() int

func (*Type) XXX_Unmarshal Uses

func (m *Type) XXX_Unmarshal(b []byte) error

type UnimplementedHandleAuthorizationServiceServer Uses

type UnimplementedHandleAuthorizationServiceServer struct {
}

UnimplementedHandleAuthorizationServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedHandleAuthorizationServiceServer) HandleAuthorization Uses

func (*UnimplementedHandleAuthorizationServiceServer) HandleAuthorization(ctx context.Context, req *HandleAuthorizationRequest) (*v1beta11.CheckResult, error)

Package authorization imports 17 packages (graph) and is imported by 6 packages. Updated 2019-10-15. Refresh now. Tools for package owners.