pomerium / pomerium / 20045720966

44%

Build Type

push

github

Committed by web-flow

Commit Message

authorize: ssh upstream policy support (#5945)

Add a field to the UpstreamTunnel config struct accepting a PPL policy
to control which ssh connections can serve as upstreams for a route.

Update the policy evaluator to store a separate upstream policy query.
When building a policy evaluator, prepare both the existing queries and
this new upstream policy query.

Add a field to the RequestSSH struct to signal whether to evaluate the
regular policy or the upstream policy.

Refactor the existing EvaluatePortForward and EvaluateRoute methods to
accept a *config.Policy, for compatibility with the policy evaluator
setup.

Log upstream policy checks at debug level.

Run Details

55 of 116 new or added lines in 5 files covered. (47.41%)

16 existing lines in 5 files now uncovered.

29080 of 54886 relevant lines covered (52.98%)

84.8 hits per line