tls

Documentation

Index

• Constants
• Variables
• func KumaID(tagName, tagValue string) string
• func MeshSpiffeIDPrefix(mesh string) string
• func SNIFromTags(tags envoy.Tags) string
• func ServiceSpiffeID(mesh string, service string) string

Constants

const (
	MeshCaResource       = "mesh_ca"
	IdentityCertResource = "identity_cert"
	CpValidationCtx      = "cp_validation_ctx"
)

Variables

var KumaALPNProtocols = []string{"kuma"}

KumaALPNProtocols are set for UpstreamTlsContext to show that mTLS is created by mesh. On the inbound side we have to distinguish Kuma mTLS and application TLS to properly support PERMISSIVE mode

Functions

func KumaID

func KumaID(tagName, tagValue string) string

func MeshSpiffeIDPrefix

func MeshSpiffeIDPrefix(mesh string) string

func SNIFromTags

func SNIFromTags(tags envoy.Tags) string

func ServiceSpiffeID

func ServiceSpiffeID(mesh string, service string) string