pub struct SshPolicy {
pub rules: Vec<SshRule>,
}Expand description
An owned Tailscale SSH policy. Mirrors tailcfg.SSHPolicy.
Fields§
§rules: Vec<SshRule>Rules evaluated in order; the first matching rule decides the connection.
Implementations§
Source§impl SshPolicy
impl SshPolicy
Sourcepub fn from_serde(p: &SSHPolicy<'_>) -> SshPolicy
pub fn from_serde(p: &SSHPolicy<'_>) -> SshPolicy
Build the owned policy from the borrowed wire view parsed off the netmap.
Sourcepub fn evaluate_at_unix(
&self,
id: &SshConnIdentity,
requested_user: &str,
now_unix_secs: i64,
) -> SshDecision
pub fn evaluate_at_unix( &self, id: &SshConnIdentity, requested_user: &str, now_unix_secs: i64, ) -> SshDecision
Evaluate this policy as of a wall-clock time given in Unix seconds.
Convenience wrapper over evaluate for callers that cannot construct a
chrono::DateTime<Utc> (the workspace pins chrono without its clock feature, so
Utc::now() is unavailable outside crates that carry chrono). An out-of-range timestamp is
clamped to the Unix epoch — for rule-expiry that at worst treats a rule as already-expired
(fail-closed).
Sourcepub fn evaluate(
&self,
id: &SshConnIdentity,
requested_user: &str,
now: DateTime<Utc>,
) -> SshDecision
pub fn evaluate( &self, id: &SshConnIdentity, requested_user: &str, now: DateTime<Utc>, ) -> SshDecision
Evaluate this policy against an incoming connection requesting requested_user, as of
now. Returns the first matching rule’s outcome, or a default-deny.
This is the Rust analogue of Go evalSSHPolicy: first-match-wins over the ordered rules,
default-deny when nothing matches.
Trait Implementations§
impl Eq for SshPolicy
impl StructuralPartialEq for SshPolicy
Auto Trait Implementations§
impl Freeze for SshPolicy
impl RefUnwindSafe for SshPolicy
impl Send for SshPolicy
impl Sync for SshPolicy
impl Unpin for SshPolicy
impl UnsafeUnpin for SshPolicy
impl UnwindSafe for SshPolicy
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> Downcast for Twhere
T: Any,
impl<T> Downcast for Twhere
T: Any,
Source§fn into_any(self: Box<T>) -> Box<dyn Any>
fn into_any(self: Box<T>) -> Box<dyn Any>
Box<dyn Trait> (where Trait: Downcast) to Box<dyn Any>, which can then be
downcast into Box<dyn ConcreteType> where ConcreteType implements Trait.Source§fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
Rc<Trait> (where Trait: Downcast) to Rc<Any>, which can then be further
downcast into Rc<ConcreteType> where ConcreteType implements Trait.Source§fn as_any(&self) -> &(dyn Any + 'static)
fn as_any(&self) -> &(dyn Any + 'static)
&Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &Any’s vtable from &Trait’s.Source§fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
&mut Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &mut Any’s vtable from &mut Trait’s.Source§impl<T> DowncastSend for T
impl<T> DowncastSend for T
Source§impl<T> DowncastSync for T
impl<T> DowncastSync for T
Source§impl<A, T> DynMessage<A> for T
impl<A, T> DynMessage<A> for T
Source§fn handle_dyn<'a>(
self: Box<T>,
state: &'a mut A,
actor_ref: ActorRef<A>,
tx: Option<Sender<Result<Box<dyn Any + Send>, SendError<Box<dyn Any + Send>, Box<dyn Any + Send>>>>>,
stop: &'a mut bool,
) -> Pin<Box<dyn Future<Output = Result<(), Box<dyn ReplyError>>> + Send + 'a>>
fn handle_dyn<'a>( self: Box<T>, state: &'a mut A, actor_ref: ActorRef<A>, tx: Option<Sender<Result<Box<dyn Any + Send>, SendError<Box<dyn Any + Send>, Box<dyn Any + Send>>>>>, stop: &'a mut bool, ) -> Pin<Box<dyn Future<Output = Result<(), Box<dyn ReplyError>>> + Send + 'a>>
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
key and return true if they are equal.Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
impl<T> ErasedDestructor for Twhere
T: 'static,
impl<A, B, T> HttpServerConnExec<A, B> for Twhere
B: Body,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more