authz

Documentation

Index

• Constants
• func CreateControllers(mgr *Manager, controllerManager ctrl.Manager) error
• func RegisterService(manager *Manager, grpcServer *grpc.Server)
• type LoadBalancer
  • func NewLoadBalancer() *LoadBalancer
  • func (lb *LoadBalancer) Select(result *LoadBalancingResult) error
• type LoadBalancingResult
  • func NewLoadBalancingResult(imp *crds.Import) *LoadBalancingResult
  • func (r *LoadBalancingResult) Delay()
  • func (r *LoadBalancingResult) Get() *crds.ImportSource
  • func (r *LoadBalancingResult) IsDelayed() bool
• type Manager
  • func NewManager(cl client.Client, namespace string) *Manager
  • func (m *Manager) AddAccessPolicy(policy *connectivitypdp.AccessPolicy) error
  • func (m *Manager) AddPeer(pr *v1alpha1.Peer)
  • func (m *Manager) DeleteAccessPolicy(name types.NamespacedName, privileged bool) error
  • func (m *Manager) DeletePeer(name string)
  • func (m *Manager) IsReady() bool
  • func (m *Manager) SetPeerCertificates(peerTLS *tls.ParsedCertData, _ *tls.RawCertData) error

Constants

const (
	ClientNamespaceLabel  = "client.clusterlink.net/namespace"
	ClientSALabel         = "client.clusterlink.net/service-account"
	ClientLabelsPrefix    = "client.clusterlink.net/labels."
	ServiceNameLabel      = "export.clusterlink.net/name"
	ServiceNamespaceLabel = "export.clusterlink.net/namespace"
	ServiceLabelsPrefix   = "export.clusterlink.net/labels."
	PeerNameLabel         = "peer.clusterlink.net/name"
)

Functions

func CreateControllers

func CreateControllers(mgr *Manager, controllerManager ctrl.Manager) error

CreateControllers creates the various k8s controllers used to update the xDS manager.

func RegisterService

func RegisterService(manager *Manager, grpcServer *grpc.Server)

RegisterService registers an ext_authz service backed by Manager to the given gRPC server.

Types

type LoadBalancer

type LoadBalancer struct {
	// contains filtered or unexported fields
}

func NewLoadBalancer

func NewLoadBalancer() *LoadBalancer

NewLoadBalancer returns a new instance of a LoadBalancer object.

func (*LoadBalancer) Select

func (lb *LoadBalancer) Select(result *LoadBalancingResult) error

Select one of the import sources, based on the set load balancing scheme.

type LoadBalancingResult

type LoadBalancingResult struct {
	// contains filtered or unexported fields
}

func NewLoadBalancingResult

func NewLoadBalancingResult(imp *crds.Import) *LoadBalancingResult

func (*LoadBalancingResult) Delay

func (r *LoadBalancingResult) Delay()

func (*LoadBalancingResult) Get

func (r *LoadBalancingResult) Get() *crds.ImportSource

func (*LoadBalancingResult) IsDelayed

func (r *LoadBalancingResult) IsDelayed() bool

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager manages the authorization dataplane connections.

func NewManager

func NewManager(cl client.Client, namespace string) *Manager

NewManager returns a new authorization manager.

func (*Manager) AddAccessPolicy

func (m *Manager) AddAccessPolicy(policy *connectivitypdp.AccessPolicy) error

AddAccessPolicy adds an access policy to allow/deny specific connections.

func (*Manager) AddPeer

func (m *Manager) AddPeer(pr *v1alpha1.Peer)

AddPeer defines a new route target for egress dataplane connections.

func (*Manager) DeleteAccessPolicy

func (m *Manager) DeleteAccessPolicy(name types.NamespacedName, privileged bool) error

DeleteAccessPolicy removes an access policy to allow/deny specific connections.

func (*Manager) DeletePeer

func (m *Manager) DeletePeer(name string)

DeletePeer removes the possibility for egress dataplane connections to be routed to a given peer.

func (*Manager) IsReady

func (m *Manager) IsReady() bool

func (*Manager) SetPeerCertificates

func (m *Manager) SetPeerCertificates(peerTLS *tls.ParsedCertData, _ *tls.RawCertData) error