server

Documentation

Index

• Constants
• func DefaultAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)
• func DefaultDataplaneResolver(resourceManager core_manager.ResourceManager) func(context.Context, core_xds.ProxyId) (*core_mesh.DataplaneResource, error)
• func DefaultIdentityCertProvider(rt core_runtime.Runtime) sds_provider.SecretProvider
• func DefaultMeshCaProvider(rt core_runtime.Runtime) sds_provider.SecretProvider
• func NewKubeAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)
• func NewUniversalAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)
• func SetupServer(rt core_runtime.Runtime) error
• type DataplaneReconciler
  • func (d *DataplaneReconciler) Reconcile(dataplaneId core_model.ResourceKey) error

Constants

const (
	MeshCaResource       = "mesh_ca"
	IdentityCertResource = "identity_cert"
)

Functions

func DefaultAuthenticator

func DefaultAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)

func DefaultDataplaneResolver

func DefaultDataplaneResolver(resourceManager core_manager.ResourceManager) func(context.Context, core_xds.ProxyId) (*core_mesh.DataplaneResource, error)

func DefaultIdentityCertProvider

func DefaultIdentityCertProvider(rt core_runtime.Runtime) sds_provider.SecretProvider

func DefaultMeshCaProvider

func DefaultMeshCaProvider(rt core_runtime.Runtime) sds_provider.SecretProvider

func NewKubeAuthenticator

func NewKubeAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)

func NewUniversalAuthenticator

func NewUniversalAuthenticator(rt core_runtime.Runtime) (sds_auth.Authenticator, error)

func SetupServer

func SetupServer(rt core_runtime.Runtime) error

Types

type DataplaneReconciler

type DataplaneReconciler struct {
	// contains filtered or unexported fields
}

DataplaneReconciler keeps the state of the Cache for SDS consistent When Dataplane connects to the Control Plane, the Watchdog (separate goroutine) is started which on the defined interval execute DataplaneReconciler#Reconcile. It will then check if certs needs to be regenerated because Mesh CA was changed This follows the same pattern as XDS.

Snapshot are versioned with UnixNano;NameOfTheCA pattern

func (*DataplaneReconciler) Reconcile

func (d *DataplaneReconciler) Reconcile(dataplaneId core_model.ResourceKey) error