-
Notifications
You must be signed in to change notification settings - Fork 280
/
policy.go
50 lines (41 loc) · 1.26 KB
/
policy.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
// Package policy contains an implementation of the Pomerium Policy Language.
package policy
import (
"io"
"github.com/open-policy-agent/opa/format"
"github.com/pomerium/pomerium/pkg/policy/criteria"
"github.com/pomerium/pomerium/pkg/policy/generator"
"github.com/pomerium/pomerium/pkg/policy/parser"
)
// re-exported types
type (
// A Criterion generates rego rules based on data.
Criterion = generator.Criterion
// A CriterionConstructor is a function which returns a Criterion for a Generator.
CriterionConstructor = generator.CriterionConstructor
)
// GenerateRegoFromReader generates a rego script from raw Pomerium Policy Language.
func GenerateRegoFromReader(r io.Reader) (string, error) {
ppl, err := parser.ParseYAML(r)
if err != nil {
return "", err
}
return GenerateRegoFromPolicy(ppl)
}
// GenerateRegoFromPolicy generates a rego script from a Pomerium Policy Language policy.
func GenerateRegoFromPolicy(p *parser.Policy) (string, error) {
var gOpts []generator.Option
for _, ctor := range criteria.All() {
gOpts = append(gOpts, generator.WithCriterion(ctor))
}
g := generator.New(gOpts...)
mod, err := g.Generate(p)
if err != nil {
return "", err
}
bs, err := format.Ast(mod)
if err != nil {
return "", err
}
return string(bs), err
}