auth

Documentation

Index

• Constants
• Variables
• func GenerateHMAC() (string, error)
• func NewFilterHTTPExternalAuthorization(upstreamHostname string, upstreamPort uint32, clusterName string, ...) (*anypb.Any, error)
• func NewFilterHTTPOAuth2(oauth2Options *options.OAuth2, args *ParseAuthArguments) (*anypb.Any, error)
• func ParseAuthOptions(auth *options.AuthOptions, args *ParseAuthArguments) error
• func ParseAuthUpstreamOptions(pathPrefix string, host options.AuthUpstreamHost, args *ParseAuthArguments, ...) error
• func ParseOAuth2Options(oauth2Options *options.OAuth2, arguments *ParseAuthArguments) error
• func PathMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.PathMatcher
• func RouteAuthzDisabled() (*anypb.Any, error)
• func StringMatcherContains(contains string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher
• func StringMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher
• type CloudEntityBuilderArguments
• type ParseAuthArguments

Constants

const (
	ResourceApiVersion  = envoy_config_core_v3.ApiVersion_V3
	TransportApiVersion = envoy_config_core_v3.ApiVersion_V3
)

Variables

var (
	ErrorAuthIsNil                = fmt.Errorf("auth.ParseAuthOptions: `auth` is nil")
	ErrorMutuallyExclusiveOptions = fmt.Errorf("auth.ParseAuthOptions: `auth.custom` and `auth.oauth2` are enabled but are mutually exclusive")
)

Functions

func GenerateHMAC

func GenerateHMAC() (string, error)

func NewFilterHTTPExternalAuthorization

func NewFilterHTTPExternalAuthorization(upstreamHostname string, upstreamPort uint32, clusterName string, pathPrefix string, authHeaders []*envoy_config_core_v3.HeaderValue, path *string) (*anypb.Any, error)

func NewFilterHTTPOAuth2

func NewFilterHTTPOAuth2(oauth2Options *options.OAuth2, args *ParseAuthArguments) (*anypb.Any, error)

func ParseAuthOptions

func ParseAuthOptions(auth *options.AuthOptions, args *ParseAuthArguments) error

func ParseAuthUpstreamOptions

func ParseAuthUpstreamOptions(pathPrefix string, host options.AuthUpstreamHost, args *ParseAuthArguments, scheme string, path *string) error

func ParseOAuth2Options

func ParseOAuth2Options(oauth2Options *options.OAuth2, arguments *ParseAuthArguments) error

func PathMatcherExact

func PathMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.PathMatcher

func RouteAuthzDisabled

func RouteAuthzDisabled() (*anypb.Any, error)

RouteAuthzDisabled returns a per-route config to disable authorization.

func StringMatcherContains

func StringMatcherContains(contains string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

func StringMatcherExact

func StringMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

Types

type CloudEntityBuilderArguments

type CloudEntityBuilderArguments struct {
	Name      string
	RoutePath string
	Method    string
}

type ParseAuthArguments

type ParseAuthArguments struct {
	Logger                       logr.Logger
	EnvoyConfiguration           *config.EnvoyConfiguration
	HTTPConnectionManagerBuilder *config.HCMBuilder
	CloudEntityBuilderArguments  *CloudEntityBuilderArguments
	CloudEntityBuilder           *cloudentity.Builder
	GenerateClusterName          generateClusterNameFunc
	KubernetesClient             client.Client
}