authz

Documentation

Index

• type Authz
  • func (*Authz) HandleExtAuthzAgent(writer http.ResponseWriter, request *http.Request)

Types

type Authz

type Authz struct {
}

External authz rules - support subset of Istio API.

func (*Authz) HandleExtAuthzAgent

func (*Authz) HandleExtAuthzAgent(writer http.ResponseWriter, request *http.Request)

Envoy ExtAuthz uses the original URL path - but there is a header. For same host, we may identify the caller by IP, using MDB and same host.

Ext Authz can be used for both authn and authz. 'include_peer_certificate' can get the peer cert.

TODO: actual code - for now just dump.