auth

Documentation

Index

• Constants
• Variables
• func GenerateHMAC() (string, error)
• func NewFilterHTTPExternalAuthorization(upstreamHostname string, upstreamPort uint32, clusterName string, ...) (*anypb.Any, error)
• func NewFilterHTTPOAuth2(oauth2Options *options.OAuth2, args *parseAuthOptionsArguments) (*anypb.Any, error)
• func NewParseAuthOptionsArguments(logger logr.Logger, envoyConfiguration *config.EnvoyConfiguration, ...) *parseAuthOptionsArguments
• func ParseAuthOptions(finalOpts options.SubOptions, args *parseAuthOptionsArguments) error
• func ParseAuthUpstreamOptions(authUpstreamOptions *options.AuthUpstream, args *parseAuthOptionsArguments, ...) error
• func ParseOAuth2Options(oauth2Options *options.OAuth2, arguments *parseAuthOptionsArguments) error
• func PathMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.PathMatcher
• func RouteAuthzDisabled() (*anypb.Any, error)
• func StringMatcherContains(contains string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher
• func StringMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

Constants

const (
	ResourceApiVersion  = envoy_config_core_v3.ApiVersion_V3
	TransportApiVersion = envoy_config_core_v3.ApiVersion_V3
)

Variables

var (
	ErrorAuthIsNil                = fmt.Errorf("auth.ParseAuthOptions: `auth` is nil")
	ErrorMutuallyExclusiveOptions = fmt.Errorf("auth.ParseAuthOptions: `auth.auth-upstream` and `auth.oauth2` are enabled but are mutually exclusive")
)

Functions

func GenerateHMAC

func GenerateHMAC() (string, error)

func NewFilterHTTPExternalAuthorization

func NewFilterHTTPExternalAuthorization(upstreamHostname string, upstreamPort uint32, clusterName string, pathPrefix string, authHeaders []*envoy_config_core_v3.HeaderValue) (*anypb.Any, error)

func NewFilterHTTPOAuth2

func NewFilterHTTPOAuth2(oauth2Options *options.OAuth2, args *parseAuthOptionsArguments) (*anypb.Any, error)

func NewParseAuthOptionsArguments

func NewParseAuthOptionsArguments(
	logger logr.Logger,
	envoyConfiguration *config.EnvoyConfiguration,
	httpConnectionManagerBuilder *config.HCMBuilder,
	name string, routePathstring,
	method string,
	cloudEntityBuilder *cloudentity.Builder,
	generateClusterName generateClusterNameFunc) *parseAuthOptionsArguments

func ParseAuthOptions

func ParseAuthOptions(finalOpts options.SubOptions, args *parseAuthOptionsArguments) error

func ParseAuthUpstreamOptions

func ParseAuthUpstreamOptions(authUpstreamOptions *options.AuthUpstream, args *parseAuthOptionsArguments, scheme string) error

func ParseOAuth2Options

func ParseOAuth2Options(oauth2Options *options.OAuth2, arguments *parseAuthOptionsArguments) error

func PathMatcherExact

func PathMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.PathMatcher

func RouteAuthzDisabled

func RouteAuthzDisabled() (*anypb.Any, error)

RouteAuthzDisabled returns a per-route config to disable authorization.

func StringMatcherContains

func StringMatcherContains(contains string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

func StringMatcherExact

func StringMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher