Documentation ¶
Index ¶
- Variables
- type ExtAuthz
- func (*ExtAuthz) Descriptor() ([]byte, []int)deprecated
- func (x *ExtAuthz) GetBootstrapMetadataLabelsKey() string
- func (x *ExtAuthz) GetFailureModeAllow() bool
- func (x *ExtAuthz) GetFilterEnabledMetadata() *v31.MetadataMatcher
- func (x *ExtAuthz) GetGrpcService() *v3.GrpcService
- func (x *ExtAuthz) GetIncludePeerCertificate() bool
- func (x *ExtAuthz) GetStatPrefix() string
- func (x *ExtAuthz) GetTransportApiVersion() v3.ApiVersion
- func (*ExtAuthz) ProtoMessage()
- func (x *ExtAuthz) ProtoReflect() protoreflect.Message
- func (x *ExtAuthz) Reset()
- func (x *ExtAuthz) String() string
Constants ¶
This section is empty.
Variables ¶
View Source
var File_envoy_extensions_filters_network_ext_authz_v3_ext_authz_proto protoreflect.FileDescriptor
Functions ¶
This section is empty.
Types ¶
type ExtAuthz ¶
type ExtAuthz struct { // The prefix to use when emitting statistics. StatPrefix string `protobuf:"bytes,1,opt,name=stat_prefix,json=statPrefix,proto3" json:"stat_prefix,omitempty"` // The external authorization gRPC service configuration. // The default timeout is set to 200ms by this filter. GrpcService *v3.GrpcService `protobuf:"bytes,2,opt,name=grpc_service,json=grpcService,proto3" json:"grpc_service,omitempty"` // The filter's behaviour in case the external authorization service does // not respond back. When it is set to true, Envoy will also allow traffic in case of // communication failure between authorization service and the proxy. // Defaults to false. FailureModeAllow bool `protobuf:"varint,3,opt,name=failure_mode_allow,json=failureModeAllow,proto3" json:"failure_mode_allow,omitempty"` // Specifies if the peer certificate is sent to the external service. // // When this field is true, Envoy will include the peer X.509 certificate, if available, in the // :ref:`certificate<envoy_v3_api_field_service.auth.v3.AttributeContext.Peer.certificate>`. IncludePeerCertificate bool `` /* 130-byte string literal not displayed */ // API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and // version of Check{Request,Response} used on the wire. TransportApiVersion v3.ApiVersion `` /* 158-byte string literal not displayed */ // Specifies if the filter is enabled with metadata matcher. // If this field is not specified, the filter will be enabled for all requests. FilterEnabledMetadata *v31.MetadataMatcher `` /* 126-byte string literal not displayed */ // Optional labels that will be passed to :ref:`labels<envoy_v3_api_field_service.auth.v3.AttributeContext.Peer.labels>` in // :ref:`destination<envoy_v3_api_field_service.auth.v3.AttributeContext.destination>`. // The labels will be read from :ref:`metadata<envoy_v3_api_msg_config.core.v3.Node>` with the specified key. BootstrapMetadataLabelsKey string `` /* 143-byte string literal not displayed */ // contains filtered or unexported fields }
External Authorization filter calls out to an external service over the gRPC Authorization API defined by :ref:`CheckRequest <envoy_v3_api_msg_service.auth.v3.CheckRequest>`. A failed check will cause this filter to close the TCP connection. [#next-free-field: 8]
func (*ExtAuthz) GetBootstrapMetadataLabelsKey ¶
func (*ExtAuthz) GetFilterEnabledMetadata ¶
func (x *ExtAuthz) GetFilterEnabledMetadata() *v31.MetadataMatcher
func (*ExtAuthz) GetGrpcService ¶
func (x *ExtAuthz) GetGrpcService() *v3.GrpcService
func (*ExtAuthz) GetTransportApiVersion ¶
func (x *ExtAuthz) GetTransportApiVersion() v3.ApiVersion
func (*ExtAuthz) ProtoReflect ¶
func (x *ExtAuthz) ProtoReflect() protoreflect.Message
Click to show internal directories.
Click to hide internal directories.