bootstrap

Documentation

Overview

Package bootstrap implements functionality related to Envoy's bootstrap config.

Index

• Constants
• func BuildTLSSecret() (*xds_discovery.DiscoveryResponse, error)
• func BuildValidationSecret() (*xds_discovery.DiscoveryResponse, error)
• func GetTLSSDSConfigYAML() ([]byte, error)
• func GetValidationContextSDSConfigYAML() ([]byte, error)
• type Builder
  • func (b *Builder) Build() (*xds_bootstrap.Bootstrap, error)

Constants

const (

	// EnvoyBootstrapConfigFile is the name Envoy bootstrap configuration file
	EnvoyBootstrapConfigFile = "bootstrap.yaml"

	// EnvoyTLSCertificateSDSSecretFile is the name of the Envoy TLS certificate SDS config file
	EnvoyTLSCertificateSDSSecretFile = "tls_certificate_sds_secret.yaml"

	// EnvoyValidationContextSDSSecretFile is the name of the Envoy validation context SDS config file
	EnvoyValidationContextSDSSecretFile = "validation_context_sds_secret.yaml"

	// EnvoyProxyConfigPath is the path where the Envoy bootstrap config info is located
	EnvoyProxyConfigPath = "/etc/envoy"

	// EnvoyXDSCACertFile is the name of the Envoy XDS CA certificate file
	EnvoyXDSCACertFile = "cacert.pem"

	// EnvoyXDSCertFile is the name of the Envoy XDS certificate file
	EnvoyXDSCertFile = "sds_cert.pem"

	// EnvoyXDSKeyFile is the name of the Envoy XDS private key file
	EnvoyXDSKeyFile = "sds_key.pem"
)

Functions

func BuildTLSSecret

func BuildTLSSecret() (*xds_discovery.DiscoveryResponse, error)

BuildTLSSecret builds and returns an Envoy Discovery Response object for Envoy's xDS TLS Certificate

func BuildValidationSecret

func BuildValidationSecret() (*xds_discovery.DiscoveryResponse, error)

BuildValidationSecret builds and returns an Envoy Discovery Response object for Envoy's xDS Validation Context

func GetTLSSDSConfigYAML

func GetTLSSDSConfigYAML() ([]byte, error)

GetTLSSDSConfigYAML returns the statically used TLS SDS config YAML.

func GetValidationContextSDSConfigYAML

func GetValidationContextSDSConfigYAML() ([]byte, error)

GetValidationContextSDSConfigYAML returns the statically used validation context SDS config YAML.

Types

type Builder

type Builder struct {
	// XDSHost is the hostname of the XDS cluster to connect to
	XDSHost string

	// NodeID is the proxy's node ID
	NodeID string

	// TLSMinProtocolVersion is the minimum supported TLS protocol version
	TLSMinProtocolVersion string

	// TLSMaxProtocolVersion is the maximum supported TLS protocol version
	TLSMaxProtocolVersion string

	// CipherSuites is the list of cipher that TLS 1.0-1.2 supports
	CipherSuites []string

	// ECDHCurves is the list of ECDH curves it supports
	ECDHCurves []string

	// A map of container -> health probe structs
	OriginalHealthProbes map[string]models.HealthProbes
}

Builder is the type used to build the Envoy bootstrap config.

func (*Builder) Build

func (b *Builder) Build() (*xds_bootstrap.Bootstrap, error)

Build builds and returns an Envoy Bootstrap object from the given config