authz

Documentation

Index

• func CreateControllers(mgr *Manager, controllerManager ctrl.Manager, crdMode bool) error
• func RegisterHandlers(manager *Manager, srv *utilhttp.Server)
• type Manager
  • func NewManager(peerTLS *tls.ParsedCertData) (*Manager, error)
  • func (m *Manager) AddAccessPolicy(policy *api.Policy) error
  • func (m *Manager) AddExport(export *v1alpha1.Export)
  • func (m *Manager) AddImport(imp *v1alpha1.Import)
  • func (m *Manager) AddLBPolicy(policy *api.Policy) error
  • func (m *Manager) AddPeer(pr *v1alpha1.Peer)
  • func (m *Manager) DeleteAccessPolicy(policy *api.Policy) error
  • func (m *Manager) DeleteExport(name types.NamespacedName)
  • func (m *Manager) DeleteImport(name types.NamespacedName) error
  • func (m *Manager) DeleteLBPolicy(policy *api.Policy) error
  • func (m *Manager) DeletePeer(name string)

Functions

func CreateControllers

func CreateControllers(mgr *Manager, controllerManager ctrl.Manager, crdMode bool) error

CreateControllers creates the various k8s controllers used to update the xDS manager.

func RegisterHandlers

func RegisterHandlers(manager *Manager, srv *utilhttp.Server)

RegisterHandlers registers the HTTP handlers for dataplane authz requests.

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager manages the authorization dataplane connections.

func NewManager

func NewManager(peerTLS *tls.ParsedCertData) (*Manager, error)

NewManager returns a new authorization manager.

func (*Manager) AddAccessPolicy

func (m *Manager) AddAccessPolicy(policy *api.Policy) error

AddAccessPolicy adds an access policy to allow/deny specific connections. TODO: switch from api.Policy to v1alpha1.Policy.

func (*Manager) AddExport

func (m *Manager) AddExport(export *v1alpha1.Export)

AddExport defines a new route target for ingress dataplane connections.

func (*Manager) AddImport

func (m *Manager) AddImport(imp *v1alpha1.Import)

AddImport adds a listening socket for an imported remote service.

func (*Manager) AddLBPolicy

func (m *Manager) AddLBPolicy(policy *api.Policy) error

AddLBPolicy adds a load-balancing policy to set a load-balancing scheme for specific connections. TODO: merge this with AddImport.

func (*Manager) AddPeer

func (m *Manager) AddPeer(pr *v1alpha1.Peer)

AddPeer defines a new route target for egress dataplane connections.

func (*Manager) DeleteAccessPolicy

func (m *Manager) DeleteAccessPolicy(policy *api.Policy) error

DeleteAccessPolicy removes an access policy to allow/deny specific connections. TODO: switch from api.Policy to v1alpha1.Policy.

func (*Manager) DeleteExport

func (m *Manager) DeleteExport(name types.NamespacedName)

DeleteExport removes the possibility for ingress dataplane connections to access a given service.

func (*Manager) DeleteImport

func (m *Manager) DeleteImport(name types.NamespacedName) error

DeleteImport removes the listening socket of a previously imported service.

func (*Manager) DeleteLBPolicy

func (m *Manager) DeleteLBPolicy(policy *api.Policy) error

DeleteLBPolicy removes a load-balancing policy. TODO: merge this with DeleteImport.

func (*Manager) DeletePeer

func (m *Manager) DeletePeer(name string)

DeletePeer removes the possibility for egress dataplane connections to be routed to a given peer.