identity

Documentation

Index

• type APIKey
  • func NewApiKeyIdentity(name string, labelSelectors k8s_labels.Selector, namespace string, ...) *APIKey
  • func (a *APIKey) AddK8sSecretBasedIdentity(ctx context.Context, new k8s.Secret)
  • func (a *APIKey) Call(pipeline auth.AuthPipeline, _ context.Context) (interface{}, error)
  • func (a *APIKey) GetK8sSecretLabelSelectors() k8s_labels.Selector
  • func (a *APIKey) RevokeK8sSecretBasedIdentity(ctx context.Context, deleted k8s_types.NamespacedName)
• type HMAC
  • func (h *HMAC) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)
• type KubernetesAuth
  • func NewKubernetesAuthIdentity(authCred auth.AuthCredentials, audiences []string) (*KubernetesAuth, error)
  • func (kubeAuth *KubernetesAuth) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)
• type MTLS
  • func NewMTLSIdentity(name string, labelSelectors k8s_labels.Selector, namespace string, ...) *MTLS
  • func (m *MTLS) AddK8sSecretBasedIdentity(ctx context.Context, new k8s.Secret)
  • func (m *MTLS) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)
  • func (m *MTLS) GetK8sSecretLabelSelectors() k8s_labels.Selector
  • func (m *MTLS) RevokeK8sSecretBasedIdentity(ctx context.Context, deleted k8s_types.NamespacedName)
• type Noop
  • func (n *Noop) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)
• type OAuth2
  • func NewOAuth2Identity(tokenIntrospectionUrl string, tokenTypeHint string, clientID string, ...) *OAuth2
  • func (oauth *OAuth2) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)
• type OIDC
  • func NewOIDC(endpoint string, creds auth.AuthCredentials, ttl int, ctx gocontext.Context) *OIDC
  • func (oidc *OIDC) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)
  • func (oidc *OIDC) Clean(ctx gocontext.Context) error
  • func (oidc *OIDC) GetURL(name string, ctx gocontext.Context) (*url.URL, error)
• type Plain
  • func (p *Plain) BuildRequestWithCredentials(ctx context.Context, endpoint string, method string, credentialValue string, ...) (*http.Request, error)
  • func (p *Plain) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)
  • func (p *Plain) GetCredentialsFromReq(*envoy_auth.AttributeContext_HttpRequest) (string, error)
  • func (p *Plain) GetCredentialsIn() string
  • func (p *Plain) GetCredentialsKeySelector() string

Types

type APIKey

type APIKey struct {
	auth.AuthCredentials

	Name           string              `yaml:"name"`
	LabelSelectors k8s_labels.Selector `yaml:"labelSelectors"`
	Namespace      string              `yaml:"namespace"`
	// contains filtered or unexported fields
}

func NewApiKeyIdentity

func NewApiKeyIdentity(name string, labelSelectors k8s_labels.Selector, namespace string, authCred auth.AuthCredentials, k8sClient k8s_client.Reader, ctx context.Context) *APIKey

func (*APIKey) AddK8sSecretBasedIdentity

func (a *APIKey) AddK8sSecretBasedIdentity(ctx context.Context, new k8s.Secret)

func (*APIKey) Call

func (a *APIKey) Call(pipeline auth.AuthPipeline, _ context.Context) (interface{}, error)

Call will evaluate the credentials within the request against the authorized ones

func (*APIKey) GetK8sSecretLabelSelectors

func (a *APIKey) GetK8sSecretLabelSelectors() k8s_labels.Selector

func (*APIKey) RevokeK8sSecretBasedIdentity

func (a *APIKey) RevokeK8sSecretBasedIdentity(ctx context.Context, deleted k8s_types.NamespacedName)

type HMAC

type HMAC struct {
	auth.AuthCredentials

	Secret string `yaml:"secret"`
}

func (*HMAC) Call

func (h *HMAC) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)

type KubernetesAuth

type KubernetesAuth struct {
	auth.AuthCredentials
	// contains filtered or unexported fields
}

func NewKubernetesAuthIdentity

func NewKubernetesAuthIdentity(authCred auth.AuthCredentials, audiences []string) (*KubernetesAuth, error)

func (*KubernetesAuth) Call

func (kubeAuth *KubernetesAuth) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)

type MTLS

type MTLS struct {
	auth.AuthCredentials

	Name           string
	LabelSelectors k8s_labels.Selector
	Namespace      string
	// contains filtered or unexported fields
}

func NewMTLSIdentity

func NewMTLSIdentity(name string, labelSelectors k8s_labels.Selector, namespace string, k8sClient k8s_client.Reader, ctx context.Context) *MTLS

func (*MTLS) AddK8sSecretBasedIdentity

func (m *MTLS) AddK8sSecretBasedIdentity(ctx context.Context, new k8s.Secret)

func (*MTLS) Call

func (m *MTLS) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)

func (*MTLS) GetK8sSecretLabelSelectors

func (m *MTLS) GetK8sSecretLabelSelectors() k8s_labels.Selector

func (*MTLS) RevokeK8sSecretBasedIdentity

func (m *MTLS) RevokeK8sSecretBasedIdentity(ctx context.Context, deleted k8s_types.NamespacedName)

type Noop

type Noop struct {
	auth.AuthCredentials
}

func (*Noop) Call

func (n *Noop) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)

type OAuth2

type OAuth2 struct {
	auth.AuthCredentials

	TokenIntrospectionUrl string `yaml:"tokenIntrospectionUrl"`
	TokenTypeHint         string `yaml:"tokenTypeHint,omitempty"`
	ClientID              string `yaml:"clientId"`
	ClientSecret          string `yaml:"clientSecret"`
}

func NewOAuth2Identity

func NewOAuth2Identity(tokenIntrospectionUrl string, tokenTypeHint string, clientID string, clientSecret string, creds auth.AuthCredentials) *OAuth2

func (*OAuth2) Call

func (oauth *OAuth2) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)

type OIDC

type OIDC struct {
	auth.AuthCredentials
	Endpoint string `yaml:"endpoint"`
	// contains filtered or unexported fields
}

func NewOIDC

func NewOIDC(endpoint string, creds auth.AuthCredentials, ttl int, ctx gocontext.Context) *OIDC

func (*OIDC) Call

func (oidc *OIDC) Call(pipeline auth.AuthPipeline, ctx gocontext.Context) (interface{}, error)

func (*OIDC) Clean

func (oidc *OIDC) Clean(ctx gocontext.Context) error

Clean ensures the goroutine started by configureProviderRefresh is cleaned up

func (*OIDC) GetURL

func (oidc *OIDC) GetURL(name string, ctx gocontext.Context) (*url.URL, error)

type Plain

type Plain struct {
	Value   expressions.Value
	Pattern string
}

func (*Plain) BuildRequestWithCredentials

func (p *Plain) BuildRequestWithCredentials(ctx context.Context, endpoint string, method string, credentialValue string, body io.Reader) (*http.Request, error)

func (*Plain) Call

func (p *Plain) Call(pipeline auth.AuthPipeline, ctx context.Context) (interface{}, error)

func (*Plain) GetCredentialsFromReq

func (p *Plain) GetCredentialsFromReq(*envoy_auth.AttributeContext_HttpRequest) (string, error)

func (*Plain) GetCredentialsIn

func (p *Plain) GetCredentialsIn() string

func (*Plain) GetCredentialsKeySelector

func (p *Plain) GetCredentialsKeySelector() string