inbound

package
v0.15.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 21, 2024 License: Apache-2.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	InboundServerPolicies_GetPort_FullMethodName   = "/io.linkerd.proxy.inbound.InboundServerPolicies/GetPort"
	InboundServerPolicies_WatchPort_FullMethodName = "/io.linkerd.proxy.inbound.InboundServerPolicies/WatchPort"
)

Variables

View Source 
var File_inbound_proto protoreflect.FileDescriptor
View Source 
var InboundServerPolicies_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "io.linkerd.proxy.inbound.InboundServerPolicies",
	HandlerType: (*InboundServerPoliciesServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "GetPort",
			Handler:    _InboundServerPolicies_GetPort_Handler,
		},
	},
	Streams: []grpc.StreamDesc{
		{
			StreamName:    "WatchPort",
			Handler:       _InboundServerPolicies_WatchPort_Handler,
			ServerStreams: true,
		},
	},
	Metadata: "inbound.proto",
}

InboundServerPolicies_ServiceDesc is the grpc.ServiceDesc for InboundServerPolicies service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterInboundServerPoliciesServer 

func RegisterInboundServerPoliciesServer(s grpc.ServiceRegistrar, srv InboundServerPoliciesServer)

Types

type Authn 

type Authn struct {

	// Types that are assignable to Permit:
	//
	//	*Authn_Unauthenticated
	//	*Authn_MeshTLS
	Permit isAuthn_Permit `protobuf_oneof:"permit"`
	// contains filtered or unexported fields
}

func (*Authn) Descriptor deprecated 

func (*Authn) Descriptor() ([]byte, []int)

Deprecated: Use Authn.ProtoReflect.Descriptor instead.

func (*Authn) GetMeshTLS 

func (x *Authn) GetMeshTLS() *Authn_PermitMeshTLS

func (*Authn) GetPermit 

func (m *Authn) GetPermit() isAuthn_Permit

func (*Authn) GetUnauthenticated 

func (x *Authn) GetUnauthenticated() *Authn_PermitUnauthenticated

func (*Authn) ProtoMessage 

func (*Authn) ProtoMessage()

func (*Authn) ProtoReflect 

func (x *Authn) ProtoReflect() protoreflect.Message

func (*Authn) Reset 

func (x *Authn) Reset()

func (*Authn) String 

func (x *Authn) String() string

type Authn_MeshTLS 

type Authn_MeshTLS struct {
	// If set, requires that the connection is transported over mesh TLS.
	MeshTLS *Authn_PermitMeshTLS `protobuf:"bytes,2,opt,name=meshTLS,proto3,oneof"`
}

type Authn_PermitMeshTLS 

type Authn_PermitMeshTLS struct {

	// Types that are assignable to Clients:
	//
	//	*Authn_PermitMeshTLS_Unauthenticated
	//	*Authn_PermitMeshTLS_Identities
	Clients isAuthn_PermitMeshTLS_Clients `protobuf_oneof:"clients"`
	// contains filtered or unexported fields
}

func (*Authn_PermitMeshTLS) Descriptor deprecated 

func (*Authn_PermitMeshTLS) Descriptor() ([]byte, []int)

Deprecated: Use Authn_PermitMeshTLS.ProtoReflect.Descriptor instead.

func (*Authn_PermitMeshTLS) GetClients 

func (m *Authn_PermitMeshTLS) GetClients() isAuthn_PermitMeshTLS_Clients

func (*Authn_PermitMeshTLS) GetIdentities 

func (x *Authn_PermitMeshTLS) GetIdentities() *Authn_PermitMeshTLS_PermitClientIdentities

func (*Authn_PermitMeshTLS) GetUnauthenticated 

func (x *Authn_PermitMeshTLS) GetUnauthenticated() *Authn_PermitUnauthenticated

func (*Authn_PermitMeshTLS) ProtoMessage 

func (*Authn_PermitMeshTLS) ProtoMessage()

func (*Authn_PermitMeshTLS) ProtoReflect 

func (x *Authn_PermitMeshTLS) ProtoReflect() protoreflect.Message

func (*Authn_PermitMeshTLS) Reset 

func (x *Authn_PermitMeshTLS) Reset()

func (*Authn_PermitMeshTLS) String 

func (x *Authn_PermitMeshTLS) String() string

type Authn_PermitMeshTLS_Identities 

type Authn_PermitMeshTLS_Identities struct {
	// Indicates that mutually-authenticated connections are permitted from
	// clients with matching identities.
	Identities *Authn_PermitMeshTLS_PermitClientIdentities `protobuf:"bytes,2,opt,name=identities,proto3,oneof"`
}

type Authn_PermitMeshTLS_PermitClientIdentities 

type Authn_PermitMeshTLS_PermitClientIdentities struct {

	// A list of literal identities.
	Identities []*Identity `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	// A list of identity suffixes.
	//
	// If this contains an empty suffix, all identities are matched.
	Suffixes []*IdentitySuffix `protobuf:"bytes,2,rep,name=suffixes,proto3" json:"suffixes,omitempty"`
	// contains filtered or unexported fields
}

func (*Authn_PermitMeshTLS_PermitClientIdentities) Descriptor deprecated 

func (*Authn_PermitMeshTLS_PermitClientIdentities) Descriptor() ([]byte, []int)

Deprecated: Use Authn_PermitMeshTLS_PermitClientIdentities.ProtoReflect.Descriptor instead.

func (*Authn_PermitMeshTLS_PermitClientIdentities) GetIdentities 

func (x *Authn_PermitMeshTLS_PermitClientIdentities) GetIdentities() []*Identity

func (*Authn_PermitMeshTLS_PermitClientIdentities) GetSuffixes 

func (x *Authn_PermitMeshTLS_PermitClientIdentities) GetSuffixes() []*IdentitySuffix

func (*Authn_PermitMeshTLS_PermitClientIdentities) ProtoMessage 

func (*Authn_PermitMeshTLS_PermitClientIdentities) ProtoMessage()

func (*Authn_PermitMeshTLS_PermitClientIdentities) ProtoReflect 

func (x *Authn_PermitMeshTLS_PermitClientIdentities) ProtoReflect() protoreflect.Message

func (*Authn_PermitMeshTLS_PermitClientIdentities) Reset 

func (x *Authn_PermitMeshTLS_PermitClientIdentities) Reset()

func (*Authn_PermitMeshTLS_PermitClientIdentities) String 

func (x *Authn_PermitMeshTLS_PermitClientIdentities) String() string

type Authn_PermitMeshTLS_Unauthenticated 

type Authn_PermitMeshTLS_Unauthenticated struct {
	// Indicates that client identities are not required.
	Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}

type Authn_PermitUnauthenticated 

type Authn_PermitUnauthenticated struct {
	// contains filtered or unexported fields
}

func (*Authn_PermitUnauthenticated) Descriptor deprecated 

func (*Authn_PermitUnauthenticated) Descriptor() ([]byte, []int)

Deprecated: Use Authn_PermitUnauthenticated.ProtoReflect.Descriptor instead.

func (*Authn_PermitUnauthenticated) ProtoMessage 

func (*Authn_PermitUnauthenticated) ProtoMessage()

func (*Authn_PermitUnauthenticated) ProtoReflect 

func (x *Authn_PermitUnauthenticated) ProtoReflect() protoreflect.Message

func (*Authn_PermitUnauthenticated) Reset 

func (x *Authn_PermitUnauthenticated) Reset()

func (*Authn_PermitUnauthenticated) String 

func (x *Authn_PermitUnauthenticated) String() string

type Authn_Unauthenticated 

type Authn_Unauthenticated struct {
	Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}

type Authz 

type Authz struct {

	// Limits this authorization to client addresses in the provided networks.
	//
	// Must have at least one network, otherwise the authorization must be
	// ignored. An authorization matches all clients by including an explicit
	// match on, i.e., `[0.0.0.0/0, 0::/0]“.
	Networks []*Network `protobuf:"bytes,1,rep,name=networks,proto3" json:"networks,omitempty"`
	// Must be set.
	Authentication *Authn `protobuf:"bytes,2,opt,name=authentication,proto3" json:"authentication,omitempty"`
	// Descriptive labels to be added to metrics, etc.
	//
	// A control plane SHOULD return the same keys in all authorizations. That is,
	// we do NOT want to return arbitrary pod labels in this field.
	//
	// `labels` should be considered deprecated. `metadata` is preferred. However,
	// controllers should continue to set `labels` for compatibility with older
	// proxies.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// If set, describes an Authorization configuration. Replaces the free-from
	// `labels` field.
	Metadata *meta.Metadata `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

func (*Authz) Descriptor deprecated 

func (*Authz) Descriptor() ([]byte, []int)

Deprecated: Use Authz.ProtoReflect.Descriptor instead.

func (*Authz) GetAuthentication 

func (x *Authz) GetAuthentication() *Authn

func (*Authz) GetLabels 

func (x *Authz) GetLabels() map[string]string

func (*Authz) GetMetadata added in v0.6.0 

func (x *Authz) GetMetadata() *meta.Metadata

func (*Authz) GetNetworks 

func (x *Authz) GetNetworks() []*Network

func (*Authz) ProtoMessage 

func (*Authz) ProtoMessage()

func (*Authz) ProtoReflect 

func (x *Authz) ProtoReflect() protoreflect.Message

func (*Authz) Reset 

func (x *Authz) Reset()

func (*Authz) String 

func (x *Authz) String() string

type GrpcRoute added in v0.6.0 

type GrpcRoute struct {
	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// If empty, the host value is ignored.
	Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
	// The server MUST return at least one authorization, otherwise all requests
	// to this route will fail with an unauthorized response.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Must have at least one rule.
	Rules []*GrpcRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

Inbound-specific gRPC route configuration.

func (*GrpcRoute) Descriptor deprecated added in v0.6.0 

func (*GrpcRoute) Descriptor() ([]byte, []int)

Deprecated: Use GrpcRoute.ProtoReflect.Descriptor instead.

func (*GrpcRoute) GetAuthorizations added in v0.6.0 

func (x *GrpcRoute) GetAuthorizations() []*Authz

func (*GrpcRoute) GetHosts added in v0.6.0 

func (x *GrpcRoute) GetHosts() []*http_route.HostMatch

func (*GrpcRoute) GetMetadata added in v0.6.0 

func (x *GrpcRoute) GetMetadata() *meta.Metadata

func (*GrpcRoute) GetRules added in v0.6.0 

func (x *GrpcRoute) GetRules() []*GrpcRoute_Rule

func (*GrpcRoute) ProtoMessage added in v0.6.0 

func (*GrpcRoute) ProtoMessage()

func (*GrpcRoute) ProtoReflect added in v0.6.0 

func (x *GrpcRoute) ProtoReflect() protoreflect.Message

func (*GrpcRoute) Reset added in v0.6.0 

func (x *GrpcRoute) Reset()

func (*GrpcRoute) String added in v0.6.0 

func (x *GrpcRoute) String() string

type GrpcRoute_Filter added in v0.6.0 

type GrpcRoute_Filter struct {

	// Types that are assignable to Kind:
	//
	//	*GrpcRoute_Filter_FailureInjector
	//	*GrpcRoute_Filter_RequestHeaderModifier
	Kind isGrpcRoute_Filter_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

func (*GrpcRoute_Filter) Descriptor deprecated added in v0.6.0 

func (*GrpcRoute_Filter) Descriptor() ([]byte, []int)

Deprecated: Use GrpcRoute_Filter.ProtoReflect.Descriptor instead.

func (*GrpcRoute_Filter) GetFailureInjector added in v0.6.0 

func (x *GrpcRoute_Filter) GetFailureInjector() *grpc_route.GrpcFailureInjector

func (*GrpcRoute_Filter) GetKind added in v0.6.0 

func (m *GrpcRoute_Filter) GetKind() isGrpcRoute_Filter_Kind

func (*GrpcRoute_Filter) GetRequestHeaderModifier added in v0.6.0 

func (x *GrpcRoute_Filter) GetRequestHeaderModifier() *http_route.RequestHeaderModifier

func (*GrpcRoute_Filter) ProtoMessage added in v0.6.0 

func (*GrpcRoute_Filter) ProtoMessage()

func (*GrpcRoute_Filter) ProtoReflect added in v0.6.0 

func (x *GrpcRoute_Filter) ProtoReflect() protoreflect.Message

func (*GrpcRoute_Filter) Reset added in v0.6.0 

func (x *GrpcRoute_Filter) Reset()

func (*GrpcRoute_Filter) String added in v0.6.0 

func (x *GrpcRoute_Filter) String() string

type GrpcRoute_Filter_FailureInjector added in v0.6.0 

type GrpcRoute_Filter_FailureInjector struct {
	FailureInjector *grpc_route.GrpcFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}

type GrpcRoute_Filter_RequestHeaderModifier added in v0.6.0 

type GrpcRoute_Filter_RequestHeaderModifier struct {
	RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}

type GrpcRoute_Rule added in v0.6.0 

type GrpcRoute_Rule struct {
	Matches []*grpc_route.GrpcRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
	Filters []*GrpcRoute_Filter          `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

func (*GrpcRoute_Rule) Descriptor deprecated added in v0.6.0 

func (*GrpcRoute_Rule) Descriptor() ([]byte, []int)

Deprecated: Use GrpcRoute_Rule.ProtoReflect.Descriptor instead.

func (*GrpcRoute_Rule) GetFilters added in v0.6.0 

func (x *GrpcRoute_Rule) GetFilters() []*GrpcRoute_Filter

func (*GrpcRoute_Rule) GetMatches added in v0.6.0 

func (x *GrpcRoute_Rule) GetMatches() []*grpc_route.GrpcRouteMatch

func (*GrpcRoute_Rule) ProtoMessage added in v0.6.0 

func (*GrpcRoute_Rule) ProtoMessage()

func (*GrpcRoute_Rule) ProtoReflect added in v0.6.0 

func (x *GrpcRoute_Rule) ProtoReflect() protoreflect.Message

func (*GrpcRoute_Rule) Reset added in v0.6.0 

func (x *GrpcRoute_Rule) Reset()

func (*GrpcRoute_Rule) String added in v0.6.0 

func (x *GrpcRoute_Rule) String() string

type HttpLocalRateLimit added in v0.15.0 

type HttpLocalRateLimit struct {

	// Describes the associated HTTPLocalRateLimitPolicy resource
	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Overall rate-limit, which all traffic coming to this server should abide
	// to. If unset no overall limit is applied.
	Total *HttpLocalRateLimit_Limit `protobuf:"bytes,2,opt,name=total,proto3" json:"total,omitempty"`
	// Fairness for individual identities; each separate client, grouped by
	// identity, will have this rate-limit.
	Identity *HttpLocalRateLimit_Limit `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	// Limit overrides for traffic from a specific client.
	Overrides []*HttpLocalRateLimit_Override `protobuf:"bytes,4,rep,name=overrides,proto3" json:"overrides,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpLocalRateLimit) Descriptor deprecated added in v0.15.0 

func (*HttpLocalRateLimit) Descriptor() ([]byte, []int)

Deprecated: Use HttpLocalRateLimit.ProtoReflect.Descriptor instead.

func (*HttpLocalRateLimit) GetIdentity added in v0.15.0 

func (x *HttpLocalRateLimit) GetIdentity() *HttpLocalRateLimit_Limit

func (*HttpLocalRateLimit) GetMetadata added in v0.15.0 

func (x *HttpLocalRateLimit) GetMetadata() *meta.Metadata

func (*HttpLocalRateLimit) GetOverrides added in v0.15.0 

func (x *HttpLocalRateLimit) GetOverrides() []*HttpLocalRateLimit_Override

func (*HttpLocalRateLimit) GetTotal added in v0.15.0 

func (x *HttpLocalRateLimit) GetTotal() *HttpLocalRateLimit_Limit

func (*HttpLocalRateLimit) ProtoMessage added in v0.15.0 

func (*HttpLocalRateLimit) ProtoMessage()

func (*HttpLocalRateLimit) ProtoReflect added in v0.15.0 

func (x *HttpLocalRateLimit) ProtoReflect() protoreflect.Message

func (*HttpLocalRateLimit) Reset added in v0.15.0 

func (x *HttpLocalRateLimit) Reset()

func (*HttpLocalRateLimit) String added in v0.15.0 

func (x *HttpLocalRateLimit) String() string

type HttpLocalRateLimit_Limit added in v0.15.0 

type HttpLocalRateLimit_Limit struct {
	RequestsPerSecond uint32 `protobuf:"varint,1,opt,name=requestsPerSecond,proto3" json:"requestsPerSecond,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpLocalRateLimit_Limit) Descriptor deprecated added in v0.15.0 

func (*HttpLocalRateLimit_Limit) Descriptor() ([]byte, []int)

Deprecated: Use HttpLocalRateLimit_Limit.ProtoReflect.Descriptor instead.

func (*HttpLocalRateLimit_Limit) GetRequestsPerSecond added in v0.15.0 

func (x *HttpLocalRateLimit_Limit) GetRequestsPerSecond() uint32

func (*HttpLocalRateLimit_Limit) ProtoMessage added in v0.15.0 

func (*HttpLocalRateLimit_Limit) ProtoMessage()

func (*HttpLocalRateLimit_Limit) ProtoReflect added in v0.15.0 

func (x *HttpLocalRateLimit_Limit) ProtoReflect() protoreflect.Message

func (*HttpLocalRateLimit_Limit) Reset added in v0.15.0 

func (x *HttpLocalRateLimit_Limit) Reset()

func (*HttpLocalRateLimit_Limit) String added in v0.15.0 

func (x *HttpLocalRateLimit_Limit) String() string

type HttpLocalRateLimit_Override added in v0.15.0 

type HttpLocalRateLimit_Override struct {
	Limit   *HttpLocalRateLimit_Limit                     `protobuf:"bytes,1,opt,name=limit,proto3" json:"limit,omitempty"`
	Clients *HttpLocalRateLimit_Override_ClientIdentities `protobuf:"bytes,2,opt,name=clients,proto3" json:"clients,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpLocalRateLimit_Override) Descriptor deprecated added in v0.15.0 

func (*HttpLocalRateLimit_Override) Descriptor() ([]byte, []int)

Deprecated: Use HttpLocalRateLimit_Override.ProtoReflect.Descriptor instead.

func (*HttpLocalRateLimit_Override) GetClients added in v0.15.0 

func (x *HttpLocalRateLimit_Override) GetClients() *HttpLocalRateLimit_Override_ClientIdentities

func (*HttpLocalRateLimit_Override) GetLimit added in v0.15.0 

func (x *HttpLocalRateLimit_Override) GetLimit() *HttpLocalRateLimit_Limit

func (*HttpLocalRateLimit_Override) ProtoMessage added in v0.15.0 

func (*HttpLocalRateLimit_Override) ProtoMessage()

func (*HttpLocalRateLimit_Override) ProtoReflect added in v0.15.0 

func (x *HttpLocalRateLimit_Override) ProtoReflect() protoreflect.Message

func (*HttpLocalRateLimit_Override) Reset added in v0.15.0 

func (x *HttpLocalRateLimit_Override) Reset()

func (*HttpLocalRateLimit_Override) String added in v0.15.0 

func (x *HttpLocalRateLimit_Override) String() string

type HttpLocalRateLimit_Override_ClientIdentities added in v0.15.0 

type HttpLocalRateLimit_Override_ClientIdentities struct {

	// A list of literal identities.
	Identities []*Identity `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpLocalRateLimit_Override_ClientIdentities) Descriptor deprecated added in v0.15.0 

func (*HttpLocalRateLimit_Override_ClientIdentities) Descriptor() ([]byte, []int)

Deprecated: Use HttpLocalRateLimit_Override_ClientIdentities.ProtoReflect.Descriptor instead.

func (*HttpLocalRateLimit_Override_ClientIdentities) GetIdentities added in v0.15.0 

func (x *HttpLocalRateLimit_Override_ClientIdentities) GetIdentities() []*Identity

func (*HttpLocalRateLimit_Override_ClientIdentities) ProtoMessage added in v0.15.0 

func (*HttpLocalRateLimit_Override_ClientIdentities) ProtoMessage()

func (*HttpLocalRateLimit_Override_ClientIdentities) ProtoReflect added in v0.15.0 

func (x *HttpLocalRateLimit_Override_ClientIdentities) ProtoReflect() protoreflect.Message

func (*HttpLocalRateLimit_Override_ClientIdentities) Reset added in v0.15.0 

func (x *HttpLocalRateLimit_Override_ClientIdentities) Reset()

func (*HttpLocalRateLimit_Override_ClientIdentities) String added in v0.15.0 

func (x *HttpLocalRateLimit_Override_ClientIdentities) String() string

type HttpRoute added in v0.6.0 

type HttpRoute struct {
	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// If empty, the host value is ignored.
	Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
	// Extends the list of authorizations on the `Server` with authorizations
	// specific to this route.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Must have at least one rule.
	Rules []*HttpRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

Inbound-specific HTTP route configuration (based on the [Gateway API](https://gateway-api.sigs.k8s.io/v1alpha2/references/spec/#gateway.networking.k8s.io/v1alpha2.HTTPRoute)).

func (*HttpRoute) Descriptor deprecated added in v0.6.0 

func (*HttpRoute) Descriptor() ([]byte, []int)

Deprecated: Use HttpRoute.ProtoReflect.Descriptor instead.

func (*HttpRoute) GetAuthorizations added in v0.6.0 

func (x *HttpRoute) GetAuthorizations() []*Authz

func (*HttpRoute) GetHosts added in v0.6.0 

func (x *HttpRoute) GetHosts() []*http_route.HostMatch

func (*HttpRoute) GetMetadata added in v0.6.0 

func (x *HttpRoute) GetMetadata() *meta.Metadata

func (*HttpRoute) GetRules added in v0.6.0 

func (x *HttpRoute) GetRules() []*HttpRoute_Rule

func (*HttpRoute) ProtoMessage added in v0.6.0 

func (*HttpRoute) ProtoMessage()

func (*HttpRoute) ProtoReflect added in v0.6.0 

func (x *HttpRoute) ProtoReflect() protoreflect.Message

func (*HttpRoute) Reset added in v0.6.0 

func (x *HttpRoute) Reset()

func (*HttpRoute) String added in v0.6.0 

func (x *HttpRoute) String() string

type HttpRoute_Filter added in v0.6.0 

type HttpRoute_Filter struct {

	// Types that are assignable to Kind:
	//
	//	*HttpRoute_Filter_FailureInjector
	//	*HttpRoute_Filter_RequestHeaderModifier
	//	*HttpRoute_Filter_Redirect
	Kind isHttpRoute_Filter_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

func (*HttpRoute_Filter) Descriptor deprecated added in v0.6.0 

func (*HttpRoute_Filter) Descriptor() ([]byte, []int)

Deprecated: Use HttpRoute_Filter.ProtoReflect.Descriptor instead.

func (*HttpRoute_Filter) GetFailureInjector added in v0.6.0 

func (x *HttpRoute_Filter) GetFailureInjector() *http_route.HttpFailureInjector

func (*HttpRoute_Filter) GetKind added in v0.6.0 

func (m *HttpRoute_Filter) GetKind() isHttpRoute_Filter_Kind

func (*HttpRoute_Filter) GetRedirect added in v0.6.0 

func (x *HttpRoute_Filter) GetRedirect() *http_route.RequestRedirect

func (*HttpRoute_Filter) GetRequestHeaderModifier added in v0.6.0 

func (x *HttpRoute_Filter) GetRequestHeaderModifier() *http_route.RequestHeaderModifier

func (*HttpRoute_Filter) ProtoMessage added in v0.6.0 

func (*HttpRoute_Filter) ProtoMessage()

func (*HttpRoute_Filter) ProtoReflect added in v0.6.0 

func (x *HttpRoute_Filter) ProtoReflect() protoreflect.Message

func (*HttpRoute_Filter) Reset added in v0.6.0 

func (x *HttpRoute_Filter) Reset()

func (*HttpRoute_Filter) String added in v0.6.0 

func (x *HttpRoute_Filter) String() string

type HttpRoute_Filter_FailureInjector added in v0.6.0 

type HttpRoute_Filter_FailureInjector struct {
	FailureInjector *http_route.HttpFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}

type HttpRoute_Filter_Redirect added in v0.6.0 

type HttpRoute_Filter_Redirect struct {
	Redirect *http_route.RequestRedirect `protobuf:"bytes,3,opt,name=redirect,proto3,oneof"`
}

type HttpRoute_Filter_RequestHeaderModifier added in v0.6.0 

type HttpRoute_Filter_RequestHeaderModifier struct {
	RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}

type HttpRoute_Rule added in v0.6.0 

type HttpRoute_Rule struct {
	Matches []*http_route.HttpRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
	Filters []*HttpRoute_Filter          `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpRoute_Rule) Descriptor deprecated added in v0.6.0 

func (*HttpRoute_Rule) Descriptor() ([]byte, []int)

Deprecated: Use HttpRoute_Rule.ProtoReflect.Descriptor instead.

func (*HttpRoute_Rule) GetFilters added in v0.6.0 

func (x *HttpRoute_Rule) GetFilters() []*HttpRoute_Filter

func (*HttpRoute_Rule) GetMatches added in v0.6.0 

func (x *HttpRoute_Rule) GetMatches() []*http_route.HttpRouteMatch

func (*HttpRoute_Rule) ProtoMessage added in v0.6.0 

func (*HttpRoute_Rule) ProtoMessage()

func (*HttpRoute_Rule) ProtoReflect added in v0.6.0 

func (x *HttpRoute_Rule) ProtoReflect() protoreflect.Message

func (*HttpRoute_Rule) Reset added in v0.6.0 

func (x *HttpRoute_Rule) Reset()

func (*HttpRoute_Rule) String added in v0.6.0 

func (x *HttpRoute_Rule) String() string

type Identity 

type Identity struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

func (*Identity) Descriptor deprecated 

func (*Identity) Descriptor() ([]byte, []int)

Deprecated: Use Identity.ProtoReflect.Descriptor instead.

func (*Identity) GetName 

func (x *Identity) GetName() string

func (*Identity) ProtoMessage 

func (*Identity) ProtoMessage()

func (*Identity) ProtoReflect 

func (x *Identity) ProtoReflect() protoreflect.Message

func (*Identity) Reset 

func (x *Identity) Reset()

func (*Identity) String 

func (x *Identity) String() string

type IdentitySuffix 

type IdentitySuffix struct {
	Parts []string `protobuf:"bytes,1,rep,name=parts,proto3" json:"parts,omitempty"`
	// contains filtered or unexported fields
}

Encodes a DNS-like name suffix as sequence of parts.

An empty list is equivalent to `.` (matching all names); the list `["foo", "bar"]` is equivalent to "foo.bar." (matching `*.foo.bar`), etc.

func (*IdentitySuffix) Descriptor deprecated 

func (*IdentitySuffix) Descriptor() ([]byte, []int)

Deprecated: Use IdentitySuffix.ProtoReflect.Descriptor instead.

func (*IdentitySuffix) GetParts 

func (x *IdentitySuffix) GetParts() []string

func (*IdentitySuffix) ProtoMessage 

func (*IdentitySuffix) ProtoMessage()

func (*IdentitySuffix) ProtoReflect 

func (x *IdentitySuffix) ProtoReflect() protoreflect.Message

func (*IdentitySuffix) Reset 

func (x *IdentitySuffix) Reset()

func (*IdentitySuffix) String 

func (x *IdentitySuffix) String() string

type InboundServerPoliciesClient 

type InboundServerPoliciesClient interface {
	// / Gets the inbound server policy for a given workload port.
	GetPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (*Server, error)
	// / Watches the inbound server policy for a given workload port.
	WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Server], error)
}

InboundServerPoliciesClient is the client API for InboundServerPolicies service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

/ An API exposed to the linkerd2-proxy to configure the inbound proxy with per-port configuration / / Proxies are expected to watch policies for each known port. As policies change, proxies update / their behavior for newly accepted connections. / / The unary `GetPort` endpoint is exposed as a convenience for clients to query policies for / diagnostic purposes.

func NewInboundServerPoliciesClient 

func NewInboundServerPoliciesClient(cc grpc.ClientConnInterface) InboundServerPoliciesClient

type InboundServerPoliciesServer 

type InboundServerPoliciesServer interface {
	// / Gets the inbound server policy for a given workload port.
	GetPort(context.Context, *PortSpec) (*Server, error)
	// / Watches the inbound server policy for a given workload port.
	WatchPort(*PortSpec, grpc.ServerStreamingServer[Server]) error
	// contains filtered or unexported methods
}

InboundServerPoliciesServer is the server API for InboundServerPolicies service. All implementations must embed UnimplementedInboundServerPoliciesServer for forward compatibility.

/ An API exposed to the linkerd2-proxy to configure the inbound proxy with per-port configuration / / Proxies are expected to watch policies for each known port. As policies change, proxies update / their behavior for newly accepted connections. / / The unary `GetPort` endpoint is exposed as a convenience for clients to query policies for / diagnostic purposes.

type InboundServerPolicies_WatchPortClient 

type InboundServerPolicies_WatchPortClient = grpc.ServerStreamingClient[Server]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type InboundServerPolicies_WatchPortServer 

type InboundServerPolicies_WatchPortServer = grpc.ServerStreamingServer[Server]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type Network 

type Network struct {
	Net    *net.IPNetwork   `protobuf:"bytes,1,opt,name=net,proto3" json:"net,omitempty"`
	Except []*net.IPNetwork `protobuf:"bytes,2,rep,name=except,proto3" json:"except,omitempty"`
	// contains filtered or unexported fields
}

Describes a network of authorized clients.

func (*Network) Descriptor deprecated 

func (*Network) Descriptor() ([]byte, []int)

Deprecated: Use Network.ProtoReflect.Descriptor instead.

func (*Network) GetExcept 

func (x *Network) GetExcept() []*net.IPNetwork

func (*Network) GetNet 

func (x *Network) GetNet() *net.IPNetwork

func (*Network) ProtoMessage 

func (*Network) ProtoMessage()

func (*Network) ProtoReflect 

func (x *Network) ProtoReflect() protoreflect.Message

func (*Network) Reset 

func (x *Network) Reset()

func (*Network) String 

func (x *Network) String() string

type PortSpec 

type PortSpec struct {

	// Identifies a proxy workload (e.g., pod name).
	Workload string `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
	// An inbound port on _workload_.
	Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

func (*PortSpec) Descriptor deprecated 

func (*PortSpec) Descriptor() ([]byte, []int)

Deprecated: Use PortSpec.ProtoReflect.Descriptor instead.

func (*PortSpec) GetPort 

func (x *PortSpec) GetPort() uint32

func (*PortSpec) GetWorkload 

func (x *PortSpec) GetWorkload() string

func (*PortSpec) ProtoMessage 

func (*PortSpec) ProtoMessage()

func (*PortSpec) ProtoReflect 

func (x *PortSpec) ProtoReflect() protoreflect.Message

func (*PortSpec) Reset 

func (x *PortSpec) Reset()

func (*PortSpec) String 

func (x *PortSpec) String() string

type ProxyProtocol 

type ProxyProtocol struct {

	// Types that are assignable to Kind:
	//
	//	*ProxyProtocol_Detect_
	//	*ProxyProtocol_Opaque_
	//	*ProxyProtocol_Tls_
	//	*ProxyProtocol_Http1_
	//	*ProxyProtocol_Http2_
	//	*ProxyProtocol_Grpc_
	Kind isProxyProtocol_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

func (*ProxyProtocol) Descriptor deprecated 

func (*ProxyProtocol) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol.ProtoReflect.Descriptor instead.

func (*ProxyProtocol) GetDetect 

func (x *ProxyProtocol) GetDetect() *ProxyProtocol_Detect

func (*ProxyProtocol) GetGrpc 

func (x *ProxyProtocol) GetGrpc() *ProxyProtocol_Grpc

func (*ProxyProtocol) GetHttp1 

func (x *ProxyProtocol) GetHttp1() *ProxyProtocol_Http1

func (*ProxyProtocol) GetHttp2 

func (x *ProxyProtocol) GetHttp2() *ProxyProtocol_Http2

func (*ProxyProtocol) GetKind 

func (m *ProxyProtocol) GetKind() isProxyProtocol_Kind

func (*ProxyProtocol) GetOpaque 

func (x *ProxyProtocol) GetOpaque() *ProxyProtocol_Opaque

func (*ProxyProtocol) GetTls 

func (x *ProxyProtocol) GetTls() *ProxyProtocol_Tls

func (*ProxyProtocol) ProtoMessage 

func (*ProxyProtocol) ProtoMessage()

func (*ProxyProtocol) ProtoReflect 

func (x *ProxyProtocol) ProtoReflect() protoreflect.Message

func (*ProxyProtocol) Reset 

func (x *ProxyProtocol) Reset()

func (*ProxyProtocol) String 

func (x *ProxyProtocol) String() string

type ProxyProtocol_Detect 

type ProxyProtocol_Detect struct {
	Timeout *duration.Duration `protobuf:"bytes,1,opt,name=timeout,proto3" json:"timeout,omitempty"`
	// If the protocol detected as HTTP, a list of HTTP routes that should be
	// matched.
	HttpRoutes []*HttpRoute `protobuf:"bytes,3,rep,name=http_routes,json=httpRoutes,proto3" json:"http_routes,omitempty"`
	// If the protocol detected as HTTP, applicable rate limit.
	HttpLocalRateLimit *HttpLocalRateLimit `protobuf:"bytes,4,opt,name=http_local_rate_limit,json=httpLocalRateLimit,proto3" json:"http_local_rate_limit,omitempty"`
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Detect) Descriptor deprecated 

func (*ProxyProtocol_Detect) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Detect.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Detect) GetHttpLocalRateLimit added in v0.15.0 

func (x *ProxyProtocol_Detect) GetHttpLocalRateLimit() *HttpLocalRateLimit

func (*ProxyProtocol_Detect) GetHttpRoutes added in v0.6.0 

func (x *ProxyProtocol_Detect) GetHttpRoutes() []*HttpRoute

func (*ProxyProtocol_Detect) GetTimeout 

func (x *ProxyProtocol_Detect) GetTimeout() *duration.Duration

func (*ProxyProtocol_Detect) ProtoMessage 

func (*ProxyProtocol_Detect) ProtoMessage()

func (*ProxyProtocol_Detect) ProtoReflect 

func (x *ProxyProtocol_Detect) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Detect) Reset 

func (x *ProxyProtocol_Detect) Reset()

func (*ProxyProtocol_Detect) String 

func (x *ProxyProtocol_Detect) String() string

type ProxyProtocol_Detect_ 

type ProxyProtocol_Detect_ struct {
	Detect *ProxyProtocol_Detect `protobuf:"bytes,1,opt,name=detect,proto3,oneof"`
}

type ProxyProtocol_Grpc 

type ProxyProtocol_Grpc struct {
	Routes []*GrpcRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Grpc) Descriptor deprecated 

func (*ProxyProtocol_Grpc) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Grpc.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Grpc) GetRoutes added in v0.6.0 

func (x *ProxyProtocol_Grpc) GetRoutes() []*GrpcRoute

func (*ProxyProtocol_Grpc) ProtoMessage 

func (*ProxyProtocol_Grpc) ProtoMessage()

func (*ProxyProtocol_Grpc) ProtoReflect 

func (x *ProxyProtocol_Grpc) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Grpc) Reset 

func (x *ProxyProtocol_Grpc) Reset()

func (*ProxyProtocol_Grpc) String 

func (x *ProxyProtocol_Grpc) String() string

type ProxyProtocol_Grpc_ 

type ProxyProtocol_Grpc_ struct {
	Grpc *ProxyProtocol_Grpc `protobuf:"bytes,6,opt,name=grpc,proto3,oneof"`
}

type ProxyProtocol_Http1 

type ProxyProtocol_Http1 struct {
	Routes         []*HttpRoute        `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	LocalRateLimit *HttpLocalRateLimit `protobuf:"bytes,3,opt,name=local_rate_limit,json=localRateLimit,proto3" json:"local_rate_limit,omitempty"`
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Http1) Descriptor deprecated 

func (*ProxyProtocol_Http1) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Http1.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Http1) GetLocalRateLimit added in v0.15.0 

func (x *ProxyProtocol_Http1) GetLocalRateLimit() *HttpLocalRateLimit

func (*ProxyProtocol_Http1) GetRoutes added in v0.6.0 

func (x *ProxyProtocol_Http1) GetRoutes() []*HttpRoute

func (*ProxyProtocol_Http1) ProtoMessage 

func (*ProxyProtocol_Http1) ProtoMessage()

func (*ProxyProtocol_Http1) ProtoReflect 

func (x *ProxyProtocol_Http1) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Http1) Reset 

func (x *ProxyProtocol_Http1) Reset()

func (*ProxyProtocol_Http1) String 

func (x *ProxyProtocol_Http1) String() string

type ProxyProtocol_Http1_ 

type ProxyProtocol_Http1_ struct {
	Http1 *ProxyProtocol_Http1 `protobuf:"bytes,4,opt,name=http1,proto3,oneof"`
}

type ProxyProtocol_Http2 

type ProxyProtocol_Http2 struct {
	Routes         []*HttpRoute        `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	LocalRateLimit *HttpLocalRateLimit `protobuf:"bytes,3,opt,name=local_rate_limit,json=localRateLimit,proto3" json:"local_rate_limit,omitempty"`
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Http2) Descriptor deprecated 

func (*ProxyProtocol_Http2) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Http2.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Http2) GetLocalRateLimit added in v0.15.0 

func (x *ProxyProtocol_Http2) GetLocalRateLimit() *HttpLocalRateLimit

func (*ProxyProtocol_Http2) GetRoutes added in v0.6.0 

func (x *ProxyProtocol_Http2) GetRoutes() []*HttpRoute

func (*ProxyProtocol_Http2) ProtoMessage 

func (*ProxyProtocol_Http2) ProtoMessage()

func (*ProxyProtocol_Http2) ProtoReflect 

func (x *ProxyProtocol_Http2) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Http2) Reset 

func (x *ProxyProtocol_Http2) Reset()

func (*ProxyProtocol_Http2) String 

func (x *ProxyProtocol_Http2) String() string

type ProxyProtocol_Http2_ 

type ProxyProtocol_Http2_ struct {
	Http2 *ProxyProtocol_Http2 `protobuf:"bytes,5,opt,name=http2,proto3,oneof"`
}

type ProxyProtocol_Opaque 

type ProxyProtocol_Opaque struct {
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Opaque) Descriptor deprecated 

func (*ProxyProtocol_Opaque) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Opaque.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Opaque) ProtoMessage 

func (*ProxyProtocol_Opaque) ProtoMessage()

func (*ProxyProtocol_Opaque) ProtoReflect 

func (x *ProxyProtocol_Opaque) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Opaque) Reset 

func (x *ProxyProtocol_Opaque) Reset()

func (*ProxyProtocol_Opaque) String 

func (x *ProxyProtocol_Opaque) String() string

type ProxyProtocol_Opaque_ 

type ProxyProtocol_Opaque_ struct {
	Opaque *ProxyProtocol_Opaque `protobuf:"bytes,2,opt,name=opaque,proto3,oneof"`
}

type ProxyProtocol_Tls 

type ProxyProtocol_Tls struct {
	// contains filtered or unexported fields
}

func (*ProxyProtocol_Tls) Descriptor deprecated 

func (*ProxyProtocol_Tls) Descriptor() ([]byte, []int)

Deprecated: Use ProxyProtocol_Tls.ProtoReflect.Descriptor instead.

func (*ProxyProtocol_Tls) ProtoMessage 

func (*ProxyProtocol_Tls) ProtoMessage()

func (*ProxyProtocol_Tls) ProtoReflect 

func (x *ProxyProtocol_Tls) ProtoReflect() protoreflect.Message

func (*ProxyProtocol_Tls) Reset 

func (x *ProxyProtocol_Tls) Reset()

func (*ProxyProtocol_Tls) String 

func (x *ProxyProtocol_Tls) String() string

type ProxyProtocol_Tls_ 

type ProxyProtocol_Tls_ struct {
	Tls *ProxyProtocol_Tls `protobuf:"bytes,3,opt,name=tls,proto3,oneof"`
}

type Server 

type Server struct {

	// If set, indicates how the proxy should proxy connections on the specified
	// port.
	Protocol *ProxyProtocol `protobuf:"bytes,1,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// Indicates the IP addresses on which the proxy may receive connections.
	// Connections targetting other IP addresses will be dropped.
	ServerIps []*net.IPAddress `protobuf:"bytes,2,rep,name=server_ips,json=serverIps,proto3" json:"server_ips,omitempty"`
	// Configures a proxy to allow connections from the specified clients.
	//
	// If unset, no connections are permitted.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Descriptive labels to be added to metrics, etc.
	//
	// A control plane SHOULD return the same keys in all policies. That is, we do
	// NOT want to return arbitrary pod labels in this field.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*Server) Descriptor deprecated 

func (*Server) Descriptor() ([]byte, []int)

Deprecated: Use Server.ProtoReflect.Descriptor instead.

func (*Server) GetAuthorizations 

func (x *Server) GetAuthorizations() []*Authz

func (*Server) GetLabels 

func (x *Server) GetLabels() map[string]string

func (*Server) GetProtocol 

func (x *Server) GetProtocol() *ProxyProtocol

func (*Server) GetServerIps 

func (x *Server) GetServerIps() []*net.IPAddress

func (*Server) ProtoMessage 

func (*Server) ProtoMessage()

func (*Server) ProtoReflect 

func (x *Server) ProtoReflect() protoreflect.Message

func (*Server) Reset 

func (x *Server) Reset()

func (*Server) String 

func (x *Server) String() string

type UnimplementedInboundServerPoliciesServer 

type UnimplementedInboundServerPoliciesServer struct{}

UnimplementedInboundServerPoliciesServer must be embedded to have forward compatible implementations.

NOTE: this should be embedded by value instead of pointer to avoid a nil pointer dereference when methods are called.

func (UnimplementedInboundServerPoliciesServer) GetPort 

func (UnimplementedInboundServerPoliciesServer) GetPort(context.Context, *PortSpec) (*Server, error)

func (UnimplementedInboundServerPoliciesServer) WatchPort 

func (UnimplementedInboundServerPoliciesServer) WatchPort(*PortSpec, grpc.ServerStreamingServer[Server]) error

type UnsafeInboundServerPoliciesServer 

type UnsafeInboundServerPoliciesServer interface {
	// contains filtered or unexported methods
}

UnsafeInboundServerPoliciesServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to InboundServerPoliciesServer will result in compilation errors.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.