Struct SshPolicy 

pub struct SshPolicy {
    pub rules: Vec<SshRule>,
}

An owned Tailscale SSH policy. Mirrors tailcfg.SSHPolicy.

Fields

rules: Vec<SshRule>

Rules evaluated in order; the first matching rule decides the connection.

Implementations

impl SshPolicy

pub fn from_serde(p: &SSHPolicy<'_>) -> Self

Build the owned policy from the borrowed wire view parsed off the netmap.

pub fn evaluate_at_unix( &self, id: &SshConnIdentity, requested_user: &str, now_unix_secs: i64, ) -> SshDecision

Evaluate this policy as of a wall-clock time given in Unix seconds.

Convenience wrapper over evaluate for callers that cannot construct a chrono::DateTime<Utc> (the workspace pins chrono without its clock feature, so Utc::now() is unavailable outside crates that carry chrono). An out-of-range timestamp is clamped to the Unix epoch — for rule-expiry that at worst treats a rule as already-expired (fail-closed).

pub fn evaluate( &self, id: &SshConnIdentity, requested_user: &str, now: DateTime<Utc>, ) -> SshDecision

Evaluate this policy against an incoming connection requesting requested_user, as of now. Returns the first matching rule’s outcome, or a default-deny.

This is the Rust analogue of Go evalSSHPolicy: first-match-wins over the ordered rules, default-deny when nothing matches.

Trait Implementations

impl Clone for SshPolicy

fn clone(&self) -> SshPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SshPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SshPolicy

fn default() -> SshPolicy

Returns the “default value” for a type.

impl Eq for SshPolicy

impl PartialEq for SshPolicy

fn eq(&self, other: &SshPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SshPolicy