authz

Documentation

Index

• Constants
• func CreateControllers(mgr *Manager, controllerManager ctrl.Manager, crdMode bool) error
• func RegisterHandlers(manager *Manager, srv *utilhttp.Server)
• type LoadBalancer
  • func NewLoadBalancer() *LoadBalancer
  • func (lb *LoadBalancer) Select(result *LoadBalancingResult) error
• type LoadBalancingResult
  • func NewLoadBalancingResult(imp *crds.Import) *LoadBalancingResult
  • func (r *LoadBalancingResult) Delay()
  • func (r *LoadBalancingResult) Get() *crds.ImportSource
  • func (r *LoadBalancingResult) IsDelayed() bool
• type Manager
  • func NewManager(peerTLS *tls.ParsedCertData, cl client.Client, namespace string) (*Manager, error)
  • func (m *Manager) AddAccessPolicy(policy *connectivitypdp.AccessPolicy) error
  • func (m *Manager) AddPeer(pr *v1alpha1.Peer)
  • func (m *Manager) DeleteAccessPolicy(name types.NamespacedName, privileged bool) error
  • func (m *Manager) DeletePeer(name string)
  • func (m *Manager) SetGetExportCallback(callback func(name string, imp *v1alpha1.Export) error)
  • func (m *Manager) SetGetImportCallback(callback func(name string, imp *v1alpha1.Import) error)
  • func (m *Manager) SetGetPeerCallback(callback func(name string, pr *v1alpha1.Peer) error)

Constants

const (
	ServiceNameLabel      = "clusterlink/metadata.serviceName"
	ServiceNamespaceLabel = "clusterlink/metadata.serviceNamespace"
	GatewayNameLabel      = "clusterlink/metadata.gatewayName"
)

Functions

func CreateControllers

func CreateControllers(mgr *Manager, controllerManager ctrl.Manager, crdMode bool) error

CreateControllers creates the various k8s controllers used to update the xDS manager.

func RegisterHandlers

func RegisterHandlers(manager *Manager, srv *utilhttp.Server)

RegisterHandlers registers the HTTP handlers for dataplane authz requests.

Types

type LoadBalancer

type LoadBalancer struct {
	// contains filtered or unexported fields
}

func NewLoadBalancer

func NewLoadBalancer() *LoadBalancer

NewLoadBalancer returns a new instance of a LoadBalancer object.

func (*LoadBalancer) Select

func (lb *LoadBalancer) Select(result *LoadBalancingResult) error

Select one of the import sources, based on the set load balancing scheme.

type LoadBalancingResult

type LoadBalancingResult struct {
	// contains filtered or unexported fields
}

func NewLoadBalancingResult

func NewLoadBalancingResult(imp *crds.Import) *LoadBalancingResult

func (*LoadBalancingResult) Delay

func (r *LoadBalancingResult) Delay()

func (*LoadBalancingResult) Get

func (r *LoadBalancingResult) Get() *crds.ImportSource

func (*LoadBalancingResult) IsDelayed

func (r *LoadBalancingResult) IsDelayed() bool

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager manages the authorization dataplane connections.

func NewManager

func NewManager(peerTLS *tls.ParsedCertData, cl client.Client, namespace string) (*Manager, error)

NewManager returns a new authorization manager.

func (*Manager) AddAccessPolicy

func (m *Manager) AddAccessPolicy(policy *connectivitypdp.AccessPolicy) error

AddAccessPolicy adds an access policy to allow/deny specific connections.

func (*Manager) AddPeer

func (m *Manager) AddPeer(pr *v1alpha1.Peer)

AddPeer defines a new route target for egress dataplane connections.

func (*Manager) DeleteAccessPolicy

func (m *Manager) DeleteAccessPolicy(name types.NamespacedName, privileged bool) error

DeleteAccessPolicy removes an access policy to allow/deny specific connections.

func (*Manager) DeletePeer

func (m *Manager) DeletePeer(name string)

DeletePeer removes the possibility for egress dataplane connections to be routed to a given peer.

func (*Manager) SetGetExportCallback

func (m *Manager) SetGetExportCallback(callback func(name string, imp *v1alpha1.Export) error)

func (*Manager) SetGetImportCallback

func (m *Manager) SetGetImportCallback(callback func(name string, imp *v1alpha1.Import) error)

func (*Manager) SetGetPeerCallback

func (m *Manager) SetGetPeerCallback(callback func(name string, pr *v1alpha1.Peer) error)