Documentation ¶
Index ¶
- Variables
- type Audience
- type GcpAuthnFilterConfig
- func (*GcpAuthnFilterConfig) Descriptor() ([]byte, []int)deprecated
- func (x *GcpAuthnFilterConfig) GetCacheConfig() *TokenCacheConfig
- func (x *GcpAuthnFilterConfig) GetHttpUri() *v3.HttpUri
- func (x *GcpAuthnFilterConfig) GetRetryPolicy() *v3.RetryPolicy
- func (x *GcpAuthnFilterConfig) GetTokenHeader() *TokenHeader
- func (*GcpAuthnFilterConfig) ProtoMessage()
- func (x *GcpAuthnFilterConfig) ProtoReflect() protoreflect.Message
- func (x *GcpAuthnFilterConfig) Reset()
- func (x *GcpAuthnFilterConfig) String() string
- type TokenCacheConfig
- func (*TokenCacheConfig) Descriptor() ([]byte, []int)deprecated
- func (x *TokenCacheConfig) GetCacheSize() *wrapperspb.UInt64Value
- func (*TokenCacheConfig) ProtoMessage()
- func (x *TokenCacheConfig) ProtoReflect() protoreflect.Message
- func (x *TokenCacheConfig) Reset()
- func (x *TokenCacheConfig) String() string
- type TokenHeader
- func (*TokenHeader) Descriptor() ([]byte, []int)deprecated
- func (x *TokenHeader) GetName() string
- func (x *TokenHeader) GetValuePrefix() string
- func (*TokenHeader) ProtoMessage()
- func (x *TokenHeader) ProtoReflect() protoreflect.Message
- func (x *TokenHeader) Reset()
- func (x *TokenHeader) String() string
Constants ¶
This section is empty.
Variables ¶
View Source
var File_envoy_extensions_filters_http_gcp_authn_v3_gcp_authn_proto protoreflect.FileDescriptor
Functions ¶
This section is empty.
Types ¶
type Audience ¶
type Audience struct { Url string `protobuf:"bytes,1,opt,name=url,proto3" json:"url,omitempty"` // contains filtered or unexported fields }
Audience is the URL of the receiving service that performs token authentication. It will be provided to the filter through cluster's typed_filter_metadata.
func (*Audience) ProtoReflect ¶
func (x *Audience) ProtoReflect() protoreflect.Message
type GcpAuthnFilterConfig ¶
type GcpAuthnFilterConfig struct { // The HTTP URI to fetch tokens from GCE Metadata Server(https://cloud.google.com/compute/docs/metadata/overview). // The URL format is "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=[AUDIENCE]" HttpUri *v3.HttpUri `protobuf:"bytes,1,opt,name=http_uri,json=httpUri,proto3" json:"http_uri,omitempty"` // Retry policy for fetching tokens. This field is optional. RetryPolicy *v3.RetryPolicy `protobuf:"bytes,2,opt,name=retry_policy,json=retryPolicy,proto3" json:"retry_policy,omitempty"` // Token cache configuration. This field is optional. CacheConfig *TokenCacheConfig `protobuf:"bytes,3,opt,name=cache_config,json=cacheConfig,proto3" json:"cache_config,omitempty"` // Request header location to extract the token. By default (i.e. if this field is not specified), the token // is extracted to the Authorization HTTP header, in the format "Authorization: Bearer <token>". TokenHeader *TokenHeader `protobuf:"bytes,4,opt,name=token_header,json=tokenHeader,proto3" json:"token_header,omitempty"` // contains filtered or unexported fields }
Filter configuration.
func (*GcpAuthnFilterConfig) Descriptor
deprecated
func (*GcpAuthnFilterConfig) Descriptor() ([]byte, []int)
Deprecated: Use GcpAuthnFilterConfig.ProtoReflect.Descriptor instead.
func (*GcpAuthnFilterConfig) GetCacheConfig ¶
func (x *GcpAuthnFilterConfig) GetCacheConfig() *TokenCacheConfig
func (*GcpAuthnFilterConfig) GetHttpUri ¶
func (x *GcpAuthnFilterConfig) GetHttpUri() *v3.HttpUri
func (*GcpAuthnFilterConfig) GetRetryPolicy ¶
func (x *GcpAuthnFilterConfig) GetRetryPolicy() *v3.RetryPolicy
func (*GcpAuthnFilterConfig) GetTokenHeader ¶
func (x *GcpAuthnFilterConfig) GetTokenHeader() *TokenHeader
func (*GcpAuthnFilterConfig) ProtoMessage ¶
func (*GcpAuthnFilterConfig) ProtoMessage()
func (*GcpAuthnFilterConfig) ProtoReflect ¶
func (x *GcpAuthnFilterConfig) ProtoReflect() protoreflect.Message
func (*GcpAuthnFilterConfig) Reset ¶
func (x *GcpAuthnFilterConfig) Reset()
func (*GcpAuthnFilterConfig) String ¶
func (x *GcpAuthnFilterConfig) String() string
type TokenCacheConfig ¶
type TokenCacheConfig struct { // The number of cache entries. The maximum number of entries is INT64_MAX as it is constrained by underlying cache implementation. // Default value 0 (i.e., proto3 defaults) disables the cache by default. Other default values will enable the cache. CacheSize *wrapperspb.UInt64Value `protobuf:"bytes,1,opt,name=cache_size,json=cacheSize,proto3" json:"cache_size,omitempty"` // contains filtered or unexported fields }
Token Cache configuration.
func (*TokenCacheConfig) Descriptor
deprecated
func (*TokenCacheConfig) Descriptor() ([]byte, []int)
Deprecated: Use TokenCacheConfig.ProtoReflect.Descriptor instead.
func (*TokenCacheConfig) GetCacheSize ¶
func (x *TokenCacheConfig) GetCacheSize() *wrapperspb.UInt64Value
func (*TokenCacheConfig) ProtoMessage ¶
func (*TokenCacheConfig) ProtoMessage()
func (*TokenCacheConfig) ProtoReflect ¶
func (x *TokenCacheConfig) ProtoReflect() protoreflect.Message
func (*TokenCacheConfig) Reset ¶
func (x *TokenCacheConfig) Reset()
func (*TokenCacheConfig) String ¶
func (x *TokenCacheConfig) String() string
type TokenHeader ¶
type TokenHeader struct { // The HTTP header's name. Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // The header's prefix. The format is "value_prefix<token>" // For example, for "Authorization: Bearer <token>", value_prefix="Bearer " with a space at the // end. ValuePrefix string `protobuf:"bytes,2,opt,name=value_prefix,json=valuePrefix,proto3" json:"value_prefix,omitempty"` // contains filtered or unexported fields }
func (*TokenHeader) Descriptor
deprecated
func (*TokenHeader) Descriptor() ([]byte, []int)
Deprecated: Use TokenHeader.ProtoReflect.Descriptor instead.
func (*TokenHeader) GetName ¶
func (x *TokenHeader) GetName() string
func (*TokenHeader) GetValuePrefix ¶
func (x *TokenHeader) GetValuePrefix() string
func (*TokenHeader) ProtoMessage ¶
func (*TokenHeader) ProtoMessage()
func (*TokenHeader) ProtoReflect ¶
func (x *TokenHeader) ProtoReflect() protoreflect.Message
func (*TokenHeader) Reset ¶
func (x *TokenHeader) Reset()
func (*TokenHeader) String ¶
func (x *TokenHeader) String() string
Click to show internal directories.
Click to hide internal directories.