audit

type AccessLogEntryMaker func() (*auditv1.AccessLogEntry, error)

type AccessLogIterator interface {
	Next() (*auditv1.AccessLogEntry, error)
}

type CheckResourcesFilter struct {
	// IgnoreAllowAll ignores responses that don't contain an EFFECT_DENY.
	IgnoreAllowAll bool `yaml:"ignoreAllowAll" conf:",example=false"`
}

type Conf struct {
	// contains filtered or unexported fields
}

type Constructor func(context.Context, *config.Wrapper, DecisionLogEntryFilter) (Log, error)

type DecisionLogEntryFilter func(*auditv1.DecisionLogEntry) *auditv1.DecisionLogEntry

type DecisionLogEntryMaker func() (*auditv1.DecisionLogEntry, error)

type DecisionLogFilters struct {
	// CheckResources defines the filters that apply to CheckResources calls.
	CheckResources CheckResourcesFilter `yaml:"checkResources"`
	// PlanResources defines the filters that apply to PlanResources calls.
	PlanResources PlanResourcesFilter `yaml:"planResources"`
}

type DecisionLogIterator interface {
	Next() (*auditv1.DecisionLogEntry, error)
}

type ExcludeMethod func(string) bool

type ID string

type IDBytes = ulid.ULID

type IDGen struct {
	// contains filtered or unexported fields
}

type IncludeKeysMethod func(string) bool

type Info interface {
	Backend() string
	Enabled() bool
}

type Log interface {
	Info
	io.Closer
	WriteAccessLogEntry(context.Context, AccessLogEntryMaker) error
	WriteDecisionLogEntry(context.Context, DecisionLogEntryMaker) error
}

type MetadataExtractor func(context.Context) map[string]*auditv1.MetaValues

type PlanResourcesFilter struct {
	// IgnoreAll prevents any plan responses from being logged. Takes precedence over other filters.
	IgnoreAll bool `yaml:"ignoreAll" conf:",example=false"`
	// IgnoreAlwaysAllow ignores ALWAYS_ALLOWED plans.
	IgnoreAlwaysAllow bool `yaml:"ignoreAlwaysAllow" conf:",example=false"`
}

type QueryableLog interface {
	Log
	LastNAccessLogEntries(context.Context, uint) AccessLogIterator
	LastNDecisionLogEntries(context.Context, uint) DecisionLogIterator
	AccessLogEntriesBetween(context.Context, time.Time, time.Time) AccessLogIterator
	DecisionLogEntriesBetween(context.Context, time.Time, time.Time) DecisionLogIterator
	AccessLogEntryByID(context.Context, ID) AccessLogIterator
	DecisionLogEntryByID(context.Context, ID) DecisionLogIterator
}