model

Documentation

Overview

Package model contains common data structures between the controller and pomerium config reconciler

Index

• Constants
• type IngressConfig
  • func (ic *IngressConfig) Clone() *IngressConfig
  • func (ic *IngressConfig) GetServicePortByName(name types.NamespacedName, port string) (int32, error)
  • func (ic *IngressConfig) IsSecureUpstream() bool
  • func (ic *IngressConfig) ParseTLSCerts() ([]*TLSCert, error)
• type Key
• type Registry
  • func NewRegistry() Registry
• type TLSCert

Constants

const (
	// TLSCustomCASecret replaces https://pomerium.io/reference/#tls-custom-certificate-authority
	TLSCustomCASecret = "tls_custom_ca_secret"
	// TLSClientSecret replaces https://pomerium.io/reference/#tls-client-certificate
	TLSClientSecret = "tls_client_secret"
	// TLSDownstreamClientCASecret replaces https://pomerium.io/reference/#tls-downstream-client-certificate-authority
	TLSDownstreamClientCASecret = "tls_downstream_client_ca_secret"
	// SecureUpstream indicate that service communication should happen over HTTPS
	SecureUpstream = "secure_upstream"
)

Types

type IngressConfig

type IngressConfig struct {
	AnnotationPrefix string
	*networkingv1.Ingress
	Secrets  map[types.NamespacedName]*corev1.Secret
	Services map[types.NamespacedName]*corev1.Service
}

IngressConfig represents ingress and all other required resources

func (*IngressConfig) Clone

func (ic *IngressConfig) Clone() *IngressConfig

func (*IngressConfig) GetServicePortByName

func (ic *IngressConfig) GetServicePortByName(name types.NamespacedName, port string) (int32, error)

GetServicePortByName returns service named port

func (*IngressConfig) IsSecureUpstream

func (ic *IngressConfig) IsSecureUpstream() bool

func (*IngressConfig) ParseTLSCerts

func (ic *IngressConfig) ParseTLSCerts() ([]*TLSCert, error)

ParseTLSCerts decodes K8s TLS secret

type Key

type Key struct {
	Kind string
	types.NamespacedName
}

Key is dependenciy key

type Registry

type Registry interface {
	// Add registers a dependency between x,y
	Add(x, y Key)
	// Deps returns list of dependencies given object key has
	Deps(x Key) []Key
	DepsOfKind(x Key, kind string) []Key
	// DeleteCascade deletes key x and also any dependent keys that do not have other dependencies
	DeleteCascade(x Key)
}

Registry is used to keep track of dependencies between kubernetes objects i.e. ingress depends on secret and service configurations no dependency subordination is tracked

func NewRegistry

func NewRegistry() Registry

NewRegistry creates an empty registry safe for concurrent use

type TLSCert

type TLSCert struct {
	Key  []byte
	Cert []byte
}

TLSCert represents a parsed TLS secret