v1

package
v1.1.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 29, 2021 License: Apache-2.0 Imports: 15 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	StatusCodeMatcher_Comparator_name = map[int32]string{
		0: "EQ",
		1: "GE",
		2: "LE",
	}
	StatusCodeMatcher_Comparator_value = map[string]int32{
		"EQ": 0,
		"GE": 1,
		"LE": 2,
	}
)

Enum value maps for StatusCodeMatcher_Comparator.

View Source
var (
	ApprovalState_name = map[int32]string{
		0: "PENDING",
		1: "ACCEPTED",
		2: "INVALID",
		3: "FAILED",
	}
	ApprovalState_value = map[string]int32{
		"PENDING":  0,
		"ACCEPTED": 1,
		"INVALID":  2,
		"FAILED":   3,
	}
)

Enum value maps for ApprovalState.

View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_certificates_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_keepalive_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_refs_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_request_matchers_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_selectors_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_status_proto protoreflect.FileDescriptor
View Source
var File_github_com_solo_io_gloo_mesh_api_common_v1_string_match_proto protoreflect.FileDescriptor

Functions

This section is empty.

Types

type AppliedIngressGateway added in v1.1.0

type AppliedIngressGateway struct {

	// The Destination on the mesh that acts as an ingress gateway for the mesh.
	DestinationRef *v1.ObjectRef `protobuf:"bytes,1,opt,name=destination_ref,json=destinationRef,proto3" json:"destination_ref,omitempty"`
	// The externally accessible address(es) for this ingress gateway Destination.
	ExternalAddresses []string `protobuf:"bytes,2,rep,name=external_addresses,json=externalAddresses,proto3" json:"external_addresses,omitempty"`
	// The port on the ingress gateway Destination designated for receiving cross cluster traffic.
	Port uint32 `protobuf:"varint,3,opt,name=port,proto3" json:"port,omitempty"`
	// The external facing port on the ingress gateway Destination designated for receiving cross cluster traffic.
	// May differ from the destination_port if the Kubernetes Service is of type NodePort.
	ExternalPort uint32 `protobuf:"varint,4,opt,name=external_port,json=externalPort,proto3" json:"external_port,omitempty"`
	// contains filtered or unexported fields
}

func (*AppliedIngressGateway) Descriptor deprecated added in v1.1.0

func (*AppliedIngressGateway) Descriptor() ([]byte, []int)

Deprecated: Use AppliedIngressGateway.ProtoReflect.Descriptor instead.

func (*AppliedIngressGateway) Equal added in v1.1.0

func (m *AppliedIngressGateway) Equal(that interface{}) bool

Equal function

func (*AppliedIngressGateway) GetDestinationRef added in v1.1.0

func (x *AppliedIngressGateway) GetDestinationRef() *v1.ObjectRef

func (*AppliedIngressGateway) GetExternalAddresses added in v1.1.0

func (x *AppliedIngressGateway) GetExternalAddresses() []string

func (*AppliedIngressGateway) GetExternalPort added in v1.1.0

func (x *AppliedIngressGateway) GetExternalPort() uint32

func (*AppliedIngressGateway) GetPort added in v1.1.0

func (x *AppliedIngressGateway) GetPort() uint32

func (*AppliedIngressGateway) ProtoMessage added in v1.1.0

func (*AppliedIngressGateway) ProtoMessage()

func (*AppliedIngressGateway) ProtoReflect added in v1.1.0

func (x *AppliedIngressGateway) ProtoReflect() protoreflect.Message

func (*AppliedIngressGateway) Reset added in v1.1.0

func (x *AppliedIngressGateway) Reset()

func (*AppliedIngressGateway) String added in v1.1.0

func (x *AppliedIngressGateway) String() string

type ApprovalState

type ApprovalState int32

State of a Policy resource reflected in the status by Gloo Mesh while processing a resource.

const (
	// Resources are in a Pending state before they have been processed by Gloo Mesh.
	ApprovalState_PENDING ApprovalState = 0
	// Resources are in a Accepted state when they are valid and have been applied successfully to
	// the Gloo Mesh configuration.
	ApprovalState_ACCEPTED ApprovalState = 1
	// Resources are in an Invalid state when they contain incorrect configuration parameters,
	// such as missing required values or invalid resource references.
	// An invalid state can also result when a resource's configuration is valid
	// but conflicts with another resource which was accepted in an earlier point in time.
	ApprovalState_INVALID ApprovalState = 2
	// Resources are in a Failed state when they contain correct configuration parameters,
	// but the server encountered an error trying to synchronize the system to
	// the desired state.
	ApprovalState_FAILED ApprovalState = 3
)

func (ApprovalState) Descriptor

func (ApprovalState) Enum

func (x ApprovalState) Enum() *ApprovalState

func (ApprovalState) EnumDescriptor deprecated

func (ApprovalState) EnumDescriptor() ([]byte, []int)

Deprecated: Use ApprovalState.Descriptor instead.

func (ApprovalState) Number

func (ApprovalState) String

func (x ApprovalState) String() string

func (ApprovalState) Type

type CommonCertOptions added in v1.1.0

type CommonCertOptions struct {

	// Number of days before root cert expires. Defaults to 365.
	TtlDays uint32 `protobuf:"varint,1,opt,name=ttl_days,json=ttlDays,proto3" json:"ttl_days,omitempty"`
	// Size in bytes of the root cert's private key. Defaults to 4096.
	RsaKeySizeBytes uint32 `protobuf:"varint,2,opt,name=rsa_key_size_bytes,json=rsaKeySizeBytes,proto3" json:"rsa_key_size_bytes,omitempty"`
	// Root cert organization name. Defaults to "gloo-mesh".
	OrgName string `protobuf:"bytes,3,opt,name=org_name,json=orgName,proto3" json:"org_name,omitempty"`
	// contains filtered or unexported fields
}

Configuration for generating a self-signed root certificate. Uses the X.509 format, RFC5280.

func (*CommonCertOptions) Descriptor deprecated added in v1.1.0

func (*CommonCertOptions) Descriptor() ([]byte, []int)

Deprecated: Use CommonCertOptions.ProtoReflect.Descriptor instead.

func (*CommonCertOptions) GetOrgName added in v1.1.0

func (x *CommonCertOptions) GetOrgName() string

func (*CommonCertOptions) GetRsaKeySizeBytes added in v1.1.0

func (x *CommonCertOptions) GetRsaKeySizeBytes() uint32

func (*CommonCertOptions) GetTtlDays added in v1.1.0

func (x *CommonCertOptions) GetTtlDays() uint32

func (*CommonCertOptions) ProtoMessage added in v1.1.0

func (*CommonCertOptions) ProtoMessage()

func (*CommonCertOptions) ProtoReflect added in v1.1.0

func (x *CommonCertOptions) ProtoReflect() protoreflect.Message

func (*CommonCertOptions) Reset added in v1.1.0

func (x *CommonCertOptions) Reset()

func (*CommonCertOptions) String added in v1.1.0

func (x *CommonCertOptions) String() string

type DestinationSelector

type DestinationSelector struct {

	// Match Kubernetes Services by their labels, namespaces, and/or clusters.
	KubeServiceMatcher *DestinationSelector_KubeServiceMatcher `protobuf:"bytes,1,opt,name=kube_service_matcher,json=kubeServiceMatcher,proto3" json:"kube_service_matcher,omitempty"`
	// Match Kubernetes Services by direct reference.
	KubeServiceRefs *DestinationSelector_KubeServiceRefs `protobuf:"bytes,2,opt,name=kube_service_refs,json=kubeServiceRefs,proto3" json:"kube_service_refs,omitempty"`
	// contains filtered or unexported fields
}

Select Destinations using one or more platform-specific selectors.

func (*DestinationSelector) Descriptor deprecated

func (*DestinationSelector) Descriptor() ([]byte, []int)

Deprecated: Use DestinationSelector.ProtoReflect.Descriptor instead.

func (*DestinationSelector) Equal

func (m *DestinationSelector) Equal(that interface{}) bool

Equal function

func (*DestinationSelector) GetKubeServiceMatcher

func (x *DestinationSelector) GetKubeServiceMatcher() *DestinationSelector_KubeServiceMatcher

func (*DestinationSelector) GetKubeServiceRefs

func (*DestinationSelector) ProtoMessage

func (*DestinationSelector) ProtoMessage()

func (*DestinationSelector) ProtoReflect

func (x *DestinationSelector) ProtoReflect() protoreflect.Message

func (*DestinationSelector) Reset

func (x *DestinationSelector) Reset()

func (*DestinationSelector) String

func (x *DestinationSelector) String() string

type DestinationSelector_KubeServiceMatcher

type DestinationSelector_KubeServiceMatcher struct {

	//
	//If specified, a match requires all labels to exist on a Kubernetes Service.
	//When used in a networking policy, omission matches any labels.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any label key and/or value.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	//
	//If specified, match Kubernetes Services if they exist in one of the specified namespaces.
	//When used in a networking policy, omission matches any namespace.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any namespace.
	Namespaces []string `protobuf:"bytes,2,rep,name=namespaces,proto3" json:"namespaces,omitempty"`
	//
	//If specified, match Kubernetes Services if they exist in one of the specified clusters.
	//When used in a networking policy, omission matches any cluster.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any cluster.
	Clusters []string `protobuf:"bytes,3,rep,name=clusters,proto3" json:"clusters,omitempty"`
	// contains filtered or unexported fields
}

Match Kubernetes Services by their labels, namespaces, and/or clusters.

func (*DestinationSelector_KubeServiceMatcher) Descriptor deprecated

func (*DestinationSelector_KubeServiceMatcher) Descriptor() ([]byte, []int)

Deprecated: Use DestinationSelector_KubeServiceMatcher.ProtoReflect.Descriptor instead.

func (*DestinationSelector_KubeServiceMatcher) Equal

func (m *DestinationSelector_KubeServiceMatcher) Equal(that interface{}) bool

Equal function

func (*DestinationSelector_KubeServiceMatcher) GetClusters

func (*DestinationSelector_KubeServiceMatcher) GetLabels

func (*DestinationSelector_KubeServiceMatcher) GetNamespaces

func (x *DestinationSelector_KubeServiceMatcher) GetNamespaces() []string

func (*DestinationSelector_KubeServiceMatcher) ProtoMessage

func (*DestinationSelector_KubeServiceMatcher) ProtoReflect

func (*DestinationSelector_KubeServiceMatcher) Reset

func (*DestinationSelector_KubeServiceMatcher) String

type DestinationSelector_KubeServiceRefs

type DestinationSelector_KubeServiceRefs struct {

	//
	//Match Kubernetes Services by direct reference. All fields are required.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any value for the given field.
	Services []*v1.ClusterObjectRef `protobuf:"bytes,1,rep,name=services,proto3" json:"services,omitempty"`
	// contains filtered or unexported fields
}

Match Kubernetes Services by direct reference.

func (*DestinationSelector_KubeServiceRefs) Descriptor deprecated

func (*DestinationSelector_KubeServiceRefs) Descriptor() ([]byte, []int)

Deprecated: Use DestinationSelector_KubeServiceRefs.ProtoReflect.Descriptor instead.

func (*DestinationSelector_KubeServiceRefs) Equal

func (m *DestinationSelector_KubeServiceRefs) Equal(that interface{}) bool

Equal function

func (*DestinationSelector_KubeServiceRefs) GetServices

func (*DestinationSelector_KubeServiceRefs) ProtoMessage

func (*DestinationSelector_KubeServiceRefs) ProtoMessage()

func (*DestinationSelector_KubeServiceRefs) ProtoReflect

func (*DestinationSelector_KubeServiceRefs) Reset

func (*DestinationSelector_KubeServiceRefs) String

type HeaderMatcher

type HeaderMatcher struct {

	// Specify the name of the header in the request.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Specify the value of the header. If the value is absent a request that
	// has the name header will match, regardless of the header’s value.
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// Specify whether the header value should be treated as regex.
	Regex bool `protobuf:"varint,3,opt,name=regex,proto3" json:"regex,omitempty"`
	//
	//If set to true, the result of the match will be inverted. Defaults to false.
	//
	//Examples:
	//
	//- name=foo, invert_match=true: matches if no header named `foo` is present
	//- name=foo, value=bar, invert_match=true: matches if no header named `foo` with value `bar` is present
	//- name=foo, value=“\d{3}“, regex=true, invert_match=true: matches if no header named `foo` with a value consisting of three integers is present.
	InvertMatch bool `protobuf:"varint,4,opt,name=invert_match,json=invertMatch,proto3" json:"invert_match,omitempty"`
	// contains filtered or unexported fields
}

Describes a matcher against HTTP request headers.

func (*HeaderMatcher) Descriptor deprecated

func (*HeaderMatcher) Descriptor() ([]byte, []int)

Deprecated: Use HeaderMatcher.ProtoReflect.Descriptor instead.

func (*HeaderMatcher) GetInvertMatch

func (x *HeaderMatcher) GetInvertMatch() bool

func (*HeaderMatcher) GetName

func (x *HeaderMatcher) GetName() string

func (*HeaderMatcher) GetRegex

func (x *HeaderMatcher) GetRegex() bool

func (*HeaderMatcher) GetValue

func (x *HeaderMatcher) GetValue() string

func (*HeaderMatcher) ProtoMessage

func (*HeaderMatcher) ProtoMessage()

func (*HeaderMatcher) ProtoReflect

func (x *HeaderMatcher) ProtoReflect() protoreflect.Message

func (*HeaderMatcher) Reset

func (x *HeaderMatcher) Reset()

func (*HeaderMatcher) String

func (x *HeaderMatcher) String() string

type HttpMatcher added in v1.1.0

type HttpMatcher struct {

	// The name assigned to a match. The match's name will be
	// concatenated with the parent route's name and will be logged in
	// the access logs for requests matching this route.
	Name string `protobuf:"bytes,8,opt,name=name,proto3" json:"name,omitempty"`
	// Specify match criteria against the targeted path.
	//
	// Types that are assignable to PathSpecifier:
	//	*HttpMatcher_Prefix
	//	*HttpMatcher_Exact
	//	*HttpMatcher_Regex
	PathSpecifier isHttpMatcher_PathSpecifier `protobuf_oneof:"path_specifier"`
	// Specify a set of headers which requests must match in entirety (all headers must match).
	Headers []*HeaderMatcher `protobuf:"bytes,4,rep,name=headers,proto3" json:"headers,omitempty"`
	// Specify a set of URL query parameters which requests must match in entirety (all query params must match).
	QueryParameters []*HttpMatcher_QueryParameterMatcher `protobuf:"bytes,5,rep,name=query_parameters,json=queryParameters,proto3" json:"query_parameters,omitempty"`
	// Specify an HTTP method to match against.
	Method string `protobuf:"bytes,6,opt,name=method,proto3" json:"method,omitempty"`
	// contains filtered or unexported fields
}

Specify HTTP request level match criteria. All specified conditions must be satisfied for a match to occur.

func (*HttpMatcher) Descriptor deprecated added in v1.1.0

func (*HttpMatcher) Descriptor() ([]byte, []int)

Deprecated: Use HttpMatcher.ProtoReflect.Descriptor instead.

func (*HttpMatcher) GetExact added in v1.1.0

func (x *HttpMatcher) GetExact() string

func (*HttpMatcher) GetHeaders added in v1.1.0

func (x *HttpMatcher) GetHeaders() []*HeaderMatcher

func (*HttpMatcher) GetMethod added in v1.1.0

func (x *HttpMatcher) GetMethod() string

func (*HttpMatcher) GetName added in v1.1.0

func (x *HttpMatcher) GetName() string

func (*HttpMatcher) GetPathSpecifier added in v1.1.0

func (m *HttpMatcher) GetPathSpecifier() isHttpMatcher_PathSpecifier

func (*HttpMatcher) GetPrefix added in v1.1.0

func (x *HttpMatcher) GetPrefix() string

func (*HttpMatcher) GetQueryParameters added in v1.1.0

func (x *HttpMatcher) GetQueryParameters() []*HttpMatcher_QueryParameterMatcher

func (*HttpMatcher) GetRegex added in v1.1.0

func (x *HttpMatcher) GetRegex() string

func (*HttpMatcher) ProtoMessage added in v1.1.0

func (*HttpMatcher) ProtoMessage()

func (*HttpMatcher) ProtoReflect added in v1.1.0

func (x *HttpMatcher) ProtoReflect() protoreflect.Message

func (*HttpMatcher) Reset added in v1.1.0

func (x *HttpMatcher) Reset()

func (*HttpMatcher) String added in v1.1.0

func (x *HttpMatcher) String() string

type HttpMatcher_Exact added in v1.1.0

type HttpMatcher_Exact struct {
	// If specified, the targeted path must exactly match the value.
	Exact string `protobuf:"bytes,2,opt,name=exact,proto3,oneof"`
}

type HttpMatcher_Prefix added in v1.1.0

type HttpMatcher_Prefix struct {
	// If specified, the targeted path must begin with the prefix.
	Prefix string `protobuf:"bytes,1,opt,name=prefix,proto3,oneof"`
}

type HttpMatcher_QueryParameterMatcher added in v1.1.0

type HttpMatcher_QueryParameterMatcher struct {

	// Specify the name of a key that must be present in the requested path's query string.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Specify the value of the query parameter keyed on `name`.
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// If true, treat `value` as a regular expression.
	Regex bool `protobuf:"varint,3,opt,name=regex,proto3" json:"regex,omitempty"`
	// contains filtered or unexported fields
}

Specify match criteria against the target URL's query parameters.

func (*HttpMatcher_QueryParameterMatcher) Descriptor deprecated added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) Descriptor() ([]byte, []int)

Deprecated: Use HttpMatcher_QueryParameterMatcher.ProtoReflect.Descriptor instead.

func (*HttpMatcher_QueryParameterMatcher) GetName added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) GetRegex added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) GetValue added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) ProtoMessage added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) ProtoMessage()

func (*HttpMatcher_QueryParameterMatcher) ProtoReflect added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) Reset added in v1.1.0

func (*HttpMatcher_QueryParameterMatcher) String added in v1.1.0

type HttpMatcher_Regex added in v1.1.0

type HttpMatcher_Regex struct {
	// If specified, the targeted path must match the regex.
	Regex string `protobuf:"bytes,3,opt,name=regex,proto3,oneof"`
}

type IdentitySelector

type IdentitySelector struct {

	// Match request identities based on the Kubernetes namespace and cluster.
	KubeIdentityMatcher *IdentitySelector_KubeIdentityMatcher `protobuf:"bytes,1,opt,name=kube_identity_matcher,json=kubeIdentityMatcher,proto3" json:"kube_identity_matcher,omitempty"`
	// Match request identities based on the Kubernetes service account of the request.
	KubeServiceAccountRefs *IdentitySelector_KubeServiceAccountRefs `` /* 131-byte string literal not displayed */
	// Match requests based on the identity of the request. If multiple fields are set, they are ANDed together.
	// More information about the individual values can be found here: https://istio.io/latest/docs/reference/config/security/authorization-policy/#Source
	RequestIdentityMatcher *IdentitySelector_RequestIdentityMatcher `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

Select Destination identities using one or more platform-specific selectors.

func (*IdentitySelector) Descriptor deprecated

func (*IdentitySelector) Descriptor() ([]byte, []int)

Deprecated: Use IdentitySelector.ProtoReflect.Descriptor instead.

func (*IdentitySelector) Equal

func (m *IdentitySelector) Equal(that interface{}) bool

Equal function

func (*IdentitySelector) GetKubeIdentityMatcher

func (x *IdentitySelector) GetKubeIdentityMatcher() *IdentitySelector_KubeIdentityMatcher

func (*IdentitySelector) GetKubeServiceAccountRefs

func (x *IdentitySelector) GetKubeServiceAccountRefs() *IdentitySelector_KubeServiceAccountRefs

func (*IdentitySelector) GetRequestIdentityMatcher added in v1.1.0

func (x *IdentitySelector) GetRequestIdentityMatcher() *IdentitySelector_RequestIdentityMatcher

func (*IdentitySelector) ProtoMessage

func (*IdentitySelector) ProtoMessage()

func (*IdentitySelector) ProtoReflect

func (x *IdentitySelector) ProtoReflect() protoreflect.Message

func (*IdentitySelector) Reset

func (x *IdentitySelector) Reset()

func (*IdentitySelector) String

func (x *IdentitySelector) String() string

type IdentitySelector_KubeIdentityMatcher

type IdentitySelector_KubeIdentityMatcher struct {

	//
	//If specified, match a Kubernetes identity if it exists in one of the specified namespaces.
	//When used in a networking policy, omission matches any namespace.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any namespace.
	Namespaces []string `protobuf:"bytes,1,rep,name=namespaces,proto3" json:"namespaces,omitempty"`
	//
	//If specified, match a Kubernetes identity if it exists in one of the specified clusters.
	//When used in a networking policy, omission matches any cluster.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any cluster.
	Clusters []string `protobuf:"bytes,2,rep,name=clusters,proto3" json:"clusters,omitempty"`
	// contains filtered or unexported fields
}

func (*IdentitySelector_KubeIdentityMatcher) Descriptor deprecated

func (*IdentitySelector_KubeIdentityMatcher) Descriptor() ([]byte, []int)

Deprecated: Use IdentitySelector_KubeIdentityMatcher.ProtoReflect.Descriptor instead.

func (*IdentitySelector_KubeIdentityMatcher) Equal

func (m *IdentitySelector_KubeIdentityMatcher) Equal(that interface{}) bool

Equal function

func (*IdentitySelector_KubeIdentityMatcher) GetClusters

func (x *IdentitySelector_KubeIdentityMatcher) GetClusters() []string

func (*IdentitySelector_KubeIdentityMatcher) GetNamespaces

func (x *IdentitySelector_KubeIdentityMatcher) GetNamespaces() []string

func (*IdentitySelector_KubeIdentityMatcher) ProtoMessage

func (*IdentitySelector_KubeIdentityMatcher) ProtoMessage()

func (*IdentitySelector_KubeIdentityMatcher) ProtoReflect

func (*IdentitySelector_KubeIdentityMatcher) Reset

func (*IdentitySelector_KubeIdentityMatcher) String

type IdentitySelector_KubeServiceAccountRefs

type IdentitySelector_KubeServiceAccountRefs struct {

	//
	//Match Kubernetes service accounts by direct reference.
	//When used in a networking policy, omission of any field (name, namespace, or clusterName) allows matching any value for that field.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any value for the given field.
	ServiceAccounts []*v1.ClusterObjectRef `protobuf:"bytes,1,rep,name=service_accounts,json=serviceAccounts,proto3" json:"service_accounts,omitempty"`
	// contains filtered or unexported fields
}

func (*IdentitySelector_KubeServiceAccountRefs) Descriptor deprecated

func (*IdentitySelector_KubeServiceAccountRefs) Descriptor() ([]byte, []int)

Deprecated: Use IdentitySelector_KubeServiceAccountRefs.ProtoReflect.Descriptor instead.

func (*IdentitySelector_KubeServiceAccountRefs) Equal

func (m *IdentitySelector_KubeServiceAccountRefs) Equal(that interface{}) bool

Equal function

func (*IdentitySelector_KubeServiceAccountRefs) GetServiceAccounts

func (x *IdentitySelector_KubeServiceAccountRefs) GetServiceAccounts() []*v1.ClusterObjectRef

func (*IdentitySelector_KubeServiceAccountRefs) ProtoMessage

func (*IdentitySelector_KubeServiceAccountRefs) ProtoReflect

func (*IdentitySelector_KubeServiceAccountRefs) Reset

func (*IdentitySelector_KubeServiceAccountRefs) String

type IdentitySelector_RequestIdentityMatcher added in v1.1.0

type IdentitySelector_RequestIdentityMatcher struct {

	//
	//Optional. A list of identities to match the request identity ("iss/sub" from the JWT).
	//If omitted all request identity values will be accepted.
	RequestPrincipals []string `protobuf:"bytes,3,rep,name=requestPrincipals,proto3" json:"requestPrincipals,omitempty"`
	//
	//Optional. A list of identities to negative match the request identity.
	NotRequestPrincipals []string `protobuf:"bytes,4,rep,name=notRequestPrincipals,proto3" json:"notRequestPrincipals,omitempty"`
	// contains filtered or unexported fields
}

func (*IdentitySelector_RequestIdentityMatcher) Descriptor deprecated added in v1.1.0

func (*IdentitySelector_RequestIdentityMatcher) Descriptor() ([]byte, []int)

Deprecated: Use IdentitySelector_RequestIdentityMatcher.ProtoReflect.Descriptor instead.

func (*IdentitySelector_RequestIdentityMatcher) Equal added in v1.1.0

func (m *IdentitySelector_RequestIdentityMatcher) Equal(that interface{}) bool

Equal function

func (*IdentitySelector_RequestIdentityMatcher) GetNotRequestPrincipals added in v1.1.0

func (x *IdentitySelector_RequestIdentityMatcher) GetNotRequestPrincipals() []string

func (*IdentitySelector_RequestIdentityMatcher) GetRequestPrincipals added in v1.1.0

func (x *IdentitySelector_RequestIdentityMatcher) GetRequestPrincipals() []string

func (*IdentitySelector_RequestIdentityMatcher) ProtoMessage added in v1.1.0

func (*IdentitySelector_RequestIdentityMatcher) ProtoReflect added in v1.1.0

func (*IdentitySelector_RequestIdentityMatcher) Reset added in v1.1.0

func (*IdentitySelector_RequestIdentityMatcher) String added in v1.1.0

type IngressGatewaySelector added in v1.1.0

type IngressGatewaySelector struct {

	// The set of Destinations that will be used as ingress gateways for external traffic entering the Mesh.
	// If omitted, a mesh-specific default ingress gateway destination will be used.
	// For Istio, any Kubernetes Service(s) with the label pair `{"istio": "ingressgateway"}` will be selected.
	DestinationSelectors []*DestinationSelector `protobuf:"bytes,1,rep,name=destination_selectors,json=destinationSelectors,proto3" json:"destination_selectors,omitempty"`
	// Specify the name of the port on the ingress gateway service. If not specified, will default to "tls".
	PortName string `protobuf:"bytes,2,opt,name=port_name,json=portName,proto3" json:"port_name,omitempty"`
	// contains filtered or unexported fields
}

Select a set of Destinations with tls ports to use as ingress gateway services for the referenced Meshes.

func (*IngressGatewaySelector) Descriptor deprecated added in v1.1.0

func (*IngressGatewaySelector) Descriptor() ([]byte, []int)

Deprecated: Use IngressGatewaySelector.ProtoReflect.Descriptor instead.

func (*IngressGatewaySelector) Equal added in v1.1.0

func (m *IngressGatewaySelector) Equal(that interface{}) bool

Equal function

func (*IngressGatewaySelector) GetDestinationSelectors added in v1.1.0

func (x *IngressGatewaySelector) GetDestinationSelectors() []*DestinationSelector

func (*IngressGatewaySelector) GetPortName added in v1.1.0

func (x *IngressGatewaySelector) GetPortName() string

func (*IngressGatewaySelector) ProtoMessage added in v1.1.0

func (*IngressGatewaySelector) ProtoMessage()

func (*IngressGatewaySelector) ProtoReflect added in v1.1.0

func (x *IngressGatewaySelector) ProtoReflect() protoreflect.Message

func (*IngressGatewaySelector) Reset added in v1.1.0

func (x *IngressGatewaySelector) Reset()

func (*IngressGatewaySelector) String added in v1.1.0

func (x *IngressGatewaySelector) String() string

type ObjectRefList added in v1.1.0

type ObjectRefList struct {
	Refs []*v1.ObjectRef `protobuf:"bytes,1,rep,name=refs,proto3" json:"refs,omitempty"`
	// contains filtered or unexported fields
}

TODO: migrate to skv2 core apis Object providing a list of object refs. Used to store lists of refs inside a map.

func (*ObjectRefList) Descriptor deprecated added in v1.1.0

func (*ObjectRefList) Descriptor() ([]byte, []int)

Deprecated: Use ObjectRefList.ProtoReflect.Descriptor instead.

func (*ObjectRefList) Equal added in v1.1.0

func (m *ObjectRefList) Equal(that interface{}) bool

Equal function

func (*ObjectRefList) GetRefs added in v1.1.0

func (x *ObjectRefList) GetRefs() []*v1.ObjectRef

func (*ObjectRefList) ProtoMessage added in v1.1.0

func (*ObjectRefList) ProtoMessage()

func (*ObjectRefList) ProtoReflect added in v1.1.0

func (x *ObjectRefList) ProtoReflect() protoreflect.Message

func (*ObjectRefList) Reset added in v1.1.0

func (x *ObjectRefList) Reset()

func (*ObjectRefList) String added in v1.1.0

func (x *ObjectRefList) String() string

type StatusCodeMatcher

type StatusCodeMatcher struct {

	// The status code value to match against.
	Value uint32 `protobuf:"varint,1,opt,name=value,proto3" json:"value,omitempty"`
	// The comparison type used for matching.
	Comparator StatusCodeMatcher_Comparator `` /* 133-byte string literal not displayed */
	// contains filtered or unexported fields
}

Describes a matcher against HTTP response status codes.

func (*StatusCodeMatcher) Descriptor deprecated

func (*StatusCodeMatcher) Descriptor() ([]byte, []int)

Deprecated: Use StatusCodeMatcher.ProtoReflect.Descriptor instead.

func (*StatusCodeMatcher) GetComparator

func (*StatusCodeMatcher) GetValue

func (x *StatusCodeMatcher) GetValue() uint32

func (*StatusCodeMatcher) ProtoMessage

func (*StatusCodeMatcher) ProtoMessage()

func (*StatusCodeMatcher) ProtoReflect

func (x *StatusCodeMatcher) ProtoReflect() protoreflect.Message

func (*StatusCodeMatcher) Reset

func (x *StatusCodeMatcher) Reset()

func (*StatusCodeMatcher) String

func (x *StatusCodeMatcher) String() string

type StatusCodeMatcher_Comparator

type StatusCodeMatcher_Comparator int32
const (
	// Strict equality.
	StatusCodeMatcher_EQ StatusCodeMatcher_Comparator = 0
	// Greater than or equal to.
	StatusCodeMatcher_GE StatusCodeMatcher_Comparator = 1
	// Less than or equal to.
	StatusCodeMatcher_LE StatusCodeMatcher_Comparator = 2
)

func (StatusCodeMatcher_Comparator) Descriptor

func (StatusCodeMatcher_Comparator) Enum

func (StatusCodeMatcher_Comparator) EnumDescriptor deprecated

func (StatusCodeMatcher_Comparator) EnumDescriptor() ([]byte, []int)

Deprecated: Use StatusCodeMatcher_Comparator.Descriptor instead.

func (StatusCodeMatcher_Comparator) Number

func (StatusCodeMatcher_Comparator) String

func (StatusCodeMatcher_Comparator) Type

type StringMatch added in v1.1.0

type StringMatch struct {

	// The string match type.
	//
	// Types that are assignable to MatchType:
	//	*StringMatch_Exact
	//	*StringMatch_Prefix
	//	*StringMatch_Regex
	//	*StringMatch_Suffix
	MatchType isStringMatch_MatchType `protobuf_oneof:"match_type"`
	//If true, indicates the exact/prefix/suffix matching should be case insensitive. This has no effect for the regex match.
	IgnoreCase bool `protobuf:"varint,5,opt,name=ignore_case,json=ignoreCase,proto3" json:"ignore_case,omitempty"`
	// contains filtered or unexported fields
}

Describes how to match a given string in HTTP headers. Match is case-sensitive.

func (*StringMatch) Descriptor deprecated added in v1.1.0

func (*StringMatch) Descriptor() ([]byte, []int)

Deprecated: Use StringMatch.ProtoReflect.Descriptor instead.

func (*StringMatch) GetExact added in v1.1.0

func (x *StringMatch) GetExact() string

func (*StringMatch) GetIgnoreCase added in v1.1.0

func (x *StringMatch) GetIgnoreCase() bool

func (*StringMatch) GetMatchType added in v1.1.0

func (m *StringMatch) GetMatchType() isStringMatch_MatchType

func (*StringMatch) GetPrefix added in v1.1.0

func (x *StringMatch) GetPrefix() string

func (*StringMatch) GetRegex added in v1.1.0

func (x *StringMatch) GetRegex() string

func (*StringMatch) GetSuffix added in v1.1.0

func (x *StringMatch) GetSuffix() string

func (*StringMatch) ProtoMessage added in v1.1.0

func (*StringMatch) ProtoMessage()

func (*StringMatch) ProtoReflect added in v1.1.0

func (x *StringMatch) ProtoReflect() protoreflect.Message

func (*StringMatch) Reset added in v1.1.0

func (x *StringMatch) Reset()

func (*StringMatch) String added in v1.1.0

func (x *StringMatch) String() string

type StringMatch_Exact added in v1.1.0

type StringMatch_Exact struct {
	// Exact string match.
	Exact string `protobuf:"bytes,1,opt,name=exact,proto3,oneof"`
}

type StringMatch_Prefix added in v1.1.0

type StringMatch_Prefix struct {
	// Prefix-based match.
	Prefix string `protobuf:"bytes,2,opt,name=prefix,proto3,oneof"`
}

type StringMatch_Regex added in v1.1.0

type StringMatch_Regex struct {
	// ECMAscript style regex-based match.
	Regex string `protobuf:"bytes,3,opt,name=regex,proto3,oneof"`
}

type StringMatch_Suffix added in v1.1.0

type StringMatch_Suffix struct {
	// Suffix-based match.
	Suffix string `protobuf:"bytes,4,opt,name=suffix,proto3,oneof"`
}

type TCPKeepalive added in v1.1.0

type TCPKeepalive struct {

	// Maximum number of TCP keepalive probes to send before determining that connection is dead.
	Probes uint32 `protobuf:"varint,1,opt,name=probes,proto3" json:"probes,omitempty"`
	// The time duration a connection needs to be idle before keep-alive probes start being sent.
	// Format examples: `1h`/`1m`/`1s`/`1ms`.
	Time *duration.Duration `protobuf:"bytes,2,opt,name=time,proto3" json:"time,omitempty"`
	// The time duration between keep-alive probes.
	// Format examples: `1h`/`1m`/`1s`/`1ms`
	Interval *duration.Duration `protobuf:"bytes,3,opt,name=interval,proto3" json:"interval,omitempty"`
	// contains filtered or unexported fields
}

Configure TCP keepalive for the ingress gateways of all meshes in this VirtualMesh.

func (*TCPKeepalive) Descriptor deprecated added in v1.1.0

func (*TCPKeepalive) Descriptor() ([]byte, []int)

Deprecated: Use TCPKeepalive.ProtoReflect.Descriptor instead.

func (*TCPKeepalive) Equal added in v1.1.0

func (m *TCPKeepalive) Equal(that interface{}) bool

Equal function

func (*TCPKeepalive) GetInterval added in v1.1.0

func (x *TCPKeepalive) GetInterval() *duration.Duration

func (*TCPKeepalive) GetProbes added in v1.1.0

func (x *TCPKeepalive) GetProbes() uint32

func (*TCPKeepalive) GetTime added in v1.1.0

func (x *TCPKeepalive) GetTime() *duration.Duration

func (*TCPKeepalive) ProtoMessage added in v1.1.0

func (*TCPKeepalive) ProtoMessage()

func (*TCPKeepalive) ProtoReflect added in v1.1.0

func (x *TCPKeepalive) ProtoReflect() protoreflect.Message

func (*TCPKeepalive) Reset added in v1.1.0

func (x *TCPKeepalive) Reset()

func (*TCPKeepalive) String added in v1.1.0

func (x *TCPKeepalive) String() string

type VaultCA added in v1.1.0

type VaultCA struct {

	// ca_path is the mount path of the Vault PKI backend's `sign` endpoint, e.g:
	// "my_pki_mount/sign/my-role-name".
	CaPath string `protobuf:"bytes,1,opt,name=ca_path,json=caPath,proto3" json:"ca_path,omitempty"`
	// ca_path is the mount path of the Vault PKI backend's `generate` endpoint, e.g:
	// "my_pki_mount/intermediate/generate/exported".
	// exported is necessary here as istio needs access to the private key
	CsrPath string `protobuf:"bytes,2,opt,name=csr_path,json=csrPath,proto3" json:"csr_path,omitempty"`
	// Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".
	Server string `protobuf:"bytes,3,opt,name=server,proto3" json:"server,omitempty"`
	// PEM encoded CA bundle used to validate Vault server certificate. Only used
	// if the Server URL is using HTTPS protocol. This parameter is ignored for
	// plain HTTP protocol connection. If not set the system root certificates
	// are used to validate the TLS connection.
	CaBundle []byte `protobuf:"bytes,4,opt,name=CaBundle,proto3" json:"CaBundle,omitempty"`
	// Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1"
	// More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces
	Namespace string `protobuf:"bytes,5,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// CommonCertOptions cert_options = 5;
	//
	// Types that are assignable to AuthType:
	//	*VaultCA_TokenSecretRef
	//	*VaultCA_KubernetesAuth
	AuthType isVaultCA_AuthType `protobuf_oneof:"auth_type"`
	// contains filtered or unexported fields
}

func (*VaultCA) Descriptor deprecated added in v1.1.0

func (*VaultCA) Descriptor() ([]byte, []int)

Deprecated: Use VaultCA.ProtoReflect.Descriptor instead.

func (*VaultCA) GetAuthType added in v1.1.0

func (m *VaultCA) GetAuthType() isVaultCA_AuthType

func (*VaultCA) GetCaBundle added in v1.1.0

func (x *VaultCA) GetCaBundle() []byte

func (*VaultCA) GetCaPath added in v1.1.0

func (x *VaultCA) GetCaPath() string

func (*VaultCA) GetCsrPath added in v1.1.0

func (x *VaultCA) GetCsrPath() string

func (*VaultCA) GetKubernetesAuth added in v1.1.0

func (x *VaultCA) GetKubernetesAuth() *VaultCA_Kubernetes

func (*VaultCA) GetNamespace added in v1.1.0

func (x *VaultCA) GetNamespace() string

func (*VaultCA) GetServer added in v1.1.0

func (x *VaultCA) GetServer() string

func (*VaultCA) GetTokenSecretRef added in v1.1.0

func (x *VaultCA) GetTokenSecretRef() *v1.ObjectRef

func (*VaultCA) ProtoMessage added in v1.1.0

func (*VaultCA) ProtoMessage()

func (*VaultCA) ProtoReflect added in v1.1.0

func (x *VaultCA) ProtoReflect() protoreflect.Message

func (*VaultCA) Reset added in v1.1.0

func (x *VaultCA) Reset()

func (*VaultCA) String added in v1.1.0

func (x *VaultCA) String() string

type VaultCA_Kubernetes added in v1.1.0

type VaultCA_Kubernetes struct {

	// The Vault mountPath here is the mount path to use when authenticating with
	// Vault. For example, setting a value to `/v1/auth/foo`, will use the path
	// `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the
	// default value "/v1/auth/kubernetes" will be used.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// Reference to a service account
	SaRef *v1.ObjectRef `protobuf:"bytes,2,opt,name=sa_ref,json=saRef,proto3" json:"sa_ref,omitempty"`
	// Key in the token to search for the sa_token
	// Default to "token"
	SecretTokenKey string `protobuf:"bytes,3,opt,name=secret_token_key,json=secretTokenKey,proto3" json:"secret_token_key,omitempty"`
	// A required field containing the Vault Role to assume. A Role binds a
	// Kubernetes ServiceAccount with a set of Vault policies.
	Role string `protobuf:"bytes,4,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

func (*VaultCA_Kubernetes) Descriptor deprecated added in v1.1.0

func (*VaultCA_Kubernetes) Descriptor() ([]byte, []int)

Deprecated: Use VaultCA_Kubernetes.ProtoReflect.Descriptor instead.

func (*VaultCA_Kubernetes) GetPath added in v1.1.0

func (x *VaultCA_Kubernetes) GetPath() string

func (*VaultCA_Kubernetes) GetRole added in v1.1.0

func (x *VaultCA_Kubernetes) GetRole() string

func (*VaultCA_Kubernetes) GetSaRef added in v1.1.0

func (x *VaultCA_Kubernetes) GetSaRef() *v1.ObjectRef

func (*VaultCA_Kubernetes) GetSecretTokenKey added in v1.1.0

func (x *VaultCA_Kubernetes) GetSecretTokenKey() string

func (*VaultCA_Kubernetes) ProtoMessage added in v1.1.0

func (*VaultCA_Kubernetes) ProtoMessage()

func (*VaultCA_Kubernetes) ProtoReflect added in v1.1.0

func (x *VaultCA_Kubernetes) ProtoReflect() protoreflect.Message

func (*VaultCA_Kubernetes) Reset added in v1.1.0

func (x *VaultCA_Kubernetes) Reset()

func (*VaultCA_Kubernetes) String added in v1.1.0

func (x *VaultCA_Kubernetes) String() string

type VaultCA_KubernetesAuth added in v1.1.0

type VaultCA_KubernetesAuth struct {
	// Kubernetes authenticates with Vault by passing the ServiceAccount
	// token stored in the named Secret resource to the Vault server.
	KubernetesAuth *VaultCA_Kubernetes `protobuf:"bytes,8,opt,name=kubernetes_auth,json=kubernetesAuth,proto3,oneof"`
}

type VaultCA_TokenSecretRef added in v1.1.0

type VaultCA_TokenSecretRef struct {
	// TokenSecretRef authenticates with Vault by presenting a token.
	TokenSecretRef *v1.ObjectRef `protobuf:"bytes,6,opt,name=token_secret_ref,json=tokenSecretRef,proto3,oneof"`
}

type WorkloadSelector

type WorkloadSelector struct {

	// Match Kubernetes workloads by their labels, namespaces, and/or clusters.
	KubeWorkloadMatcher *WorkloadSelector_KubeWorkloadMatcher `protobuf:"bytes,1,opt,name=kube_workload_matcher,json=kubeWorkloadMatcher,proto3" json:"kube_workload_matcher,omitempty"`
	// contains filtered or unexported fields
}

Select Workloads using one or more platform-specific selectors.

func (*WorkloadSelector) Descriptor deprecated

func (*WorkloadSelector) Descriptor() ([]byte, []int)

Deprecated: Use WorkloadSelector.ProtoReflect.Descriptor instead.

func (*WorkloadSelector) Equal

func (m *WorkloadSelector) Equal(that interface{}) bool

Equal function

func (*WorkloadSelector) GetKubeWorkloadMatcher

func (x *WorkloadSelector) GetKubeWorkloadMatcher() *WorkloadSelector_KubeWorkloadMatcher

func (*WorkloadSelector) ProtoMessage

func (*WorkloadSelector) ProtoMessage()

func (*WorkloadSelector) ProtoReflect

func (x *WorkloadSelector) ProtoReflect() protoreflect.Message

func (*WorkloadSelector) Reset

func (x *WorkloadSelector) Reset()

func (*WorkloadSelector) String

func (x *WorkloadSelector) String() string

type WorkloadSelector_KubeWorkloadMatcher

type WorkloadSelector_KubeWorkloadMatcher struct {

	//
	//If specified, all labels must exist on Kubernetes workload.
	//When used in a networking policy, omission matches any labels.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any label key and/or value.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	//
	//If specified, match Kubernetes workloads if they exist in one of the specified namespaces.
	//When used in a networking policy, omission matches any namespace.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any namespace.
	Namespaces []string `protobuf:"bytes,2,rep,name=namespaces,proto3" json:"namespaces,omitempty"`
	//
	//If specified, match Kubernetes workloads if they exist in one of the specified clusters.
	//When used in a networking policy, omission matches any cluster.
	//When used in a Gloo Mesh Role, a wildcard (`"*"`) must be specified to match any cluster.
	Clusters []string `protobuf:"bytes,3,rep,name=clusters,proto3" json:"clusters,omitempty"`
	// contains filtered or unexported fields
}

Match Kubernetes workloads by their labels, namespaces, and/or clusters.

func (*WorkloadSelector_KubeWorkloadMatcher) Descriptor deprecated

func (*WorkloadSelector_KubeWorkloadMatcher) Descriptor() ([]byte, []int)

Deprecated: Use WorkloadSelector_KubeWorkloadMatcher.ProtoReflect.Descriptor instead.

func (*WorkloadSelector_KubeWorkloadMatcher) Equal

func (m *WorkloadSelector_KubeWorkloadMatcher) Equal(that interface{}) bool

Equal function

func (*WorkloadSelector_KubeWorkloadMatcher) GetClusters

func (x *WorkloadSelector_KubeWorkloadMatcher) GetClusters() []string

func (*WorkloadSelector_KubeWorkloadMatcher) GetLabels

func (*WorkloadSelector_KubeWorkloadMatcher) GetNamespaces

func (x *WorkloadSelector_KubeWorkloadMatcher) GetNamespaces() []string

func (*WorkloadSelector_KubeWorkloadMatcher) ProtoMessage

func (*WorkloadSelector_KubeWorkloadMatcher) ProtoMessage()

func (*WorkloadSelector_KubeWorkloadMatcher) ProtoReflect

func (*WorkloadSelector_KubeWorkloadMatcher) Reset

func (*WorkloadSelector_KubeWorkloadMatcher) String

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL