v1alpha1

Documentation

Index

• Constants
• func GetMutualTLS(policy *authn_v1alpha1.Policy) *authn_v1alpha1.MutualTls
• func NewPolicyApplier(policy *authn_v1alpha1.Policy) authn.PolicyApplier

Constants

const (
	// JwtFilterName is the name for the Jwt filter. This should be the same
	// as the name defined in
	// https://github.com/istio/proxy/blob/master/src/envoy/http/jwt_auth/http_filter_factory.cc#L50
	JwtFilterName = "jwt-auth"

	// AuthnFilterName is the name for the Istio AuthN filter. This should be the same
	// as the name defined in
	// https://github.com/istio/proxy/blob/master/src/envoy/http/authn/http_filter_factory.cc#L30
	AuthnFilterName = "istio_authn"

	// EnvoyTLSInspectorFilterName is the name for Envoy TLS sniffing listener filter.
	EnvoyTLSInspectorFilterName = "envoy.listener.tls_inspector"
)

Functions

func GetMutualTLS

func GetMutualTLS(policy *authn_v1alpha1.Policy) *authn_v1alpha1.MutualTls

GetMutualTLS returns pointer to mTLS params if the policy use mTLS for (peer) authentication. (note that mTLS params can still be nil). Otherwise, return (false, nil). Callers should ensure the proxy is of sidecar type.

func NewPolicyApplier

func NewPolicyApplier(policy *authn_v1alpha1.Policy) authn.PolicyApplier

NewPolicyApplier returns new applier for v1alpha1 authentication policy.