processors

Documentation

Index

• Constants
• func GenerateAccessRule(api *gatewayv1beta1.APIRule, rule gatewayv1beta1.Rule, ...) *rulev1alpha1.Rule
• func GenerateAccessRuleSpec(api *gatewayv1beta1.APIRule, rule gatewayv1beta1.Rule, ...) *rulev1alpha1.RuleSpec
• func GetRequestAuthenticationKey(ra *securityv1beta1.RequestAuthentication) string
• func GetVirtualServiceHttpTimeout(apiRuleSpec gatewayv1beta1.APIRuleSpec, rule gatewayv1beta1.Rule) time.Duration
• func HasPathDuplicates(rules []gatewayv1beta1.Rule) bool
• func SetAccessRuleKey(hasPathDuplicates bool, rule rulev1alpha1.Rule) string
• type AccessRuleCreator
• type AccessRuleProcessor
  • func (r AccessRuleProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)
• type AuthorizationPolicyCreator
• type AuthorizationPolicyProcessor
  • func (r AuthorizationPolicyProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)
• type RequestAuthenticationCreator
• type RequestAuthenticationProcessor
  • func (r RequestAuthenticationProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)
• type VirtualServiceCreator
• type VirtualServiceProcessor
  • func (r VirtualServiceProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)

Constants

const RequestAuthenticationAppSelectorLabel = "app"

Functions

func GenerateAccessRule

func GenerateAccessRule(api *gatewayv1beta1.APIRule, rule gatewayv1beta1.Rule, accessStrategies []*gatewayv1beta1.Authenticator, defaultDomainName string) *rulev1alpha1.Rule

func GenerateAccessRuleSpec

func GenerateAccessRuleSpec(api *gatewayv1beta1.APIRule, rule gatewayv1beta1.Rule, accessStrategies []*gatewayv1beta1.Authenticator, defaultDomainName string) *rulev1alpha1.RuleSpec

func GetRequestAuthenticationKey

func GetRequestAuthenticationKey(ra *securityv1beta1.RequestAuthentication) string

func GetVirtualServiceHttpTimeout

func GetVirtualServiceHttpTimeout(apiRuleSpec gatewayv1beta1.APIRuleSpec, rule gatewayv1beta1.Rule) time.Duration

func HasPathDuplicates

func HasPathDuplicates(rules []gatewayv1beta1.Rule) bool

func SetAccessRuleKey

func SetAccessRuleKey(hasPathDuplicates bool, rule rulev1alpha1.Rule) string

Types

type AccessRuleCreator

type AccessRuleCreator interface {
	Create(api *gatewayv1beta1.APIRule) map[string]*rulev1alpha1.Rule
}

AccessRuleCreator provides the creation of Rules using the configuration in the given APIRule. The key of the map is expected to be unique and comparable with the

type AccessRuleProcessor

type AccessRuleProcessor struct {
	ApiRule *gatewayv1beta1.APIRule
	Creator AccessRuleCreator
}

AccessRuleProcessor is the generic processor that handles the Ory Rules in the reconciliation of API Rule.

func (AccessRuleProcessor) EvaluateReconciliation

func (r AccessRuleProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)

type AuthorizationPolicyCreator

type AuthorizationPolicyCreator interface {
	Create(ctx context.Context, client ctrlclient.Client, api *gatewayv1beta1.APIRule) (hashbasedstate.Desired, error)
}

AuthorizationPolicyCreator provides the creation of AuthorizationPolicies using the configuration in the given APIRule.

type AuthorizationPolicyProcessor

type AuthorizationPolicyProcessor struct {
	ApiRule *gatewayv1beta1.APIRule
	Creator AuthorizationPolicyCreator
	Log     *logr.Logger
}

AuthorizationPolicyProcessor is the generic processor that handles the Istio JwtAuthorization Policies in the reconciliation of API Rule.

func (AuthorizationPolicyProcessor) EvaluateReconciliation

func (r AuthorizationPolicyProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)

type RequestAuthenticationCreator

type RequestAuthenticationCreator interface {
	Create(ctx context.Context, client ctrlclient.Client, api *gatewayv1beta1.APIRule) (map[string]*securityv1beta1.RequestAuthentication, error)
}

RequestAuthenticationCreator provides the creation of RequestAuthentications using the configuration in the given APIRule. The key of the map is expected to be unique and comparable with the

type RequestAuthenticationProcessor

type RequestAuthenticationProcessor struct {
	ApiRule *gatewayv1beta1.APIRule
	Creator RequestAuthenticationCreator
}

RequestAuthenticationProcessor is the generic processor that handles the Istio Request Authentications in the reconciliation of API Rule.

func (RequestAuthenticationProcessor) EvaluateReconciliation

func (r RequestAuthenticationProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)

type VirtualServiceCreator

type VirtualServiceCreator interface {
	Create(api *gatewayv1beta1.APIRule) (*networkingv1beta1.VirtualService, error)
}

VirtualServiceCreator provides the creation of a Virtual Service using the configuration in the given APIRule.

type VirtualServiceProcessor

type VirtualServiceProcessor struct {
	ApiRule *gatewayv1beta1.APIRule
	Creator VirtualServiceCreator
}

VirtualServiceProcessor is the generic processor that handles the Virtual Service in the reconciliation of API Rule.

func (VirtualServiceProcessor) EvaluateReconciliation

func (r VirtualServiceProcessor) EvaluateReconciliation(ctx context.Context, client ctrlclient.Client) ([]*processing.ObjectChange, error)