permissions

Documentation

Index

• func BuildExternalServicesPermissionsMapForZoneEgress(externalServices []*core_mesh.ExternalServiceResource, ...) core_xds.ExternalServicePermissionMap
• func BuildTrafficPermissionMap(dataplane *core_mesh.DataplaneResource, ...) core_xds.TrafficPermissionMap
• func MatchExternalServicesTrafficPermissions(dataplane *core_mesh.DataplaneResource, ...) ([]*core_mesh.ExternalServiceResource, error)
• type ExternalServicePermissions
  • func BuildExternalServicesPermissionsMap(externalServices *core_mesh.ExternalServiceResourceList, ...) ExternalServicePermissions
• type TrafficPermissionsMatcher
  • func (m *TrafficPermissionsMatcher) Match(ctx context.Context, dataplane *core_mesh.DataplaneResource, ...) (core_xds.TrafficPermissionMap, error)

Functions

func BuildExternalServicesPermissionsMapForZoneEgress

func BuildExternalServicesPermissionsMapForZoneEgress(
	externalServices []*core_mesh.ExternalServiceResource,
	trafficPermissions []*core_mesh.TrafficPermissionResource,
) core_xds.ExternalServicePermissionMap

BuildExternalServicesPermissionsMapForZoneEgress is necessary for zone egress where we expect to have the permission map with keys equal kuma.io/service tag's value. Zone Egress currently cannot differentiate different external services with the same kuma.io/service tags

func BuildTrafficPermissionMap

func BuildTrafficPermissionMap(
	dataplane *core_mesh.DataplaneResource,
	inbounds []*mesh_proto.Dataplane_Networking_Inbound,
	trafficPermissions []*core_mesh.TrafficPermissionResource,
) core_xds.TrafficPermissionMap

func MatchExternalServicesTrafficPermissions

func MatchExternalServicesTrafficPermissions(
	dataplane *core_mesh.DataplaneResource,
	externalServices *core_mesh.ExternalServiceResourceList,
	permissions *core_mesh.TrafficPermissionResourceList,
) ([]*core_mesh.ExternalServiceResource, error)

Types

type ExternalServicePermissions

type ExternalServicePermissions map[string]*core_mesh.TrafficPermissionResource

func BuildExternalServicesPermissionsMap

func BuildExternalServicesPermissionsMap(externalServices *core_mesh.ExternalServiceResourceList, trafficPermissions []*core_mesh.TrafficPermissionResource) ExternalServicePermissions

type TrafficPermissionsMatcher

type TrafficPermissionsMatcher struct {
	ResourceManager manager.ReadOnlyResourceManager
}

func (*TrafficPermissionsMatcher) Match

func (m *TrafficPermissionsMatcher) Match(ctx context.Context, dataplane *core_mesh.DataplaneResource, mesh *core_mesh.MeshResource) (core_xds.TrafficPermissionMap, error)