policy

Documentation

Overview

Package policy implements plugin that processes and applies K8s Network policies into various destination network stacks. Support for a new network stack can be easily added into the plugin via so-called renderers.

Index

• type Deps
• type Plugin
  • func (p *Plugin) Close() error
  • func (p *Plugin) Init() error

Types

type Deps

type Deps struct {
	local.PluginInfraDeps
	Watcher        datasync.KeyValProtoWatcher /* prefixed for KSR-published K8s state data */
	Contiv         contiv.API                  /* for GetIfName() */
	PolicyCacheAPI cache.PolicyCacheAPI
}

Deps defines dependencies of policy plugin.

type Plugin

type Plugin struct {
	Deps
	// contains filtered or unexported fields
}

Plugin watches configuration of K8s resources (as reflected by KSR into ETCD) for changes in policies, pods and namespaces and applies rules into extendable set of network stacks.

func (*Plugin) Close

func (p *Plugin) Close() error

Close stops the processor and watching.

func (*Plugin) Init

func (p *Plugin) Init() error

Init initializes policy layers and caches and starts watching ETCD for K8s configuration.