utils

Documentation

Index

• Constants
• Variables
• func EnsureRouteAction(out *envoyroute.Route) error
• func NewSslConfigTranslator() *sslConfigTranslator
• func PathAsString(matcher *v1.Matcher) string
• func SanitizeForEnvoy(ctx context.Context, resourceName, resourceTypeName string) string
• func SortRoutesByPath(routes []*v1.Route)
• type CertSource
• type SslConfigTranslator

Constants

const (
	MetadataPluginName = "envoy.grpc_credentials.file_based_metadata"
)

Variables

var (
	TlsVersionNotFoundError = func(v v1.SslParameters_ProtocolVersion) error {
		return errors.Errorf("tls version %v not found", v)
	}

	SslSecretNotFoundError = func(err error) error {
		return errors.Wrapf(err, "SSL secret not found")
	}

	NotTlsSecretError = func(ref core.ResourceRef) error {
		return errors.Errorf("%v is not a TLS secret", ref)
	}

	NoCertificateFoundError = errors.New("no certificate information found")
)

var (
	InvalidRouteActionError = errors.New("cannot use this plugin on non-Route_Route route actions")
)

Functions

func EnsureRouteAction

func EnsureRouteAction(out *envoyroute.Route) error

func NewSslConfigTranslator

func NewSslConfigTranslator() *sslConfigTranslator

func PathAsString

func PathAsString(matcher *v1.Matcher) string

func SanitizeForEnvoy

func SanitizeForEnvoy(ctx context.Context, resourceName, resourceTypeName string) string

func SortRoutesByPath

func SortRoutesByPath(routes []*v1.Route)

opinionated method to sort routes by convention routes are sorted in the following way: 1. exact path < regex path < path prefix 2. longer path string < shorter path string

Types

type CertSource

type CertSource interface {
	GetSecretRef() *core.ResourceRef
	GetSslFiles() *v1.SSLFiles
	GetSds() *v1.SDSConfig
	GetVerifySubjectAltName() []string
	GetParameters() *v1.SslParameters
}

type SslConfigTranslator

type SslConfigTranslator interface {
	ResolveUpstreamSslConfig(secrets v1.SecretList, uc *v1.UpstreamSslConfig) (*envoyauth.UpstreamTlsContext, error)
	ResolveDownstreamSslConfig(secrets v1.SecretList, dc *v1.SslConfig) (*envoyauth.DownstreamTlsContext, error)
	ResolveCommonSslConfig(cs CertSource, secrets v1.SecretList) (*envoyauth.CommonTlsContext, error)
}