envoyconfig

Documentation

Overview

Package envoyconfig contains a Builder for building Envoy configuration from Pomerium configuration.

Index

• Constants
• func ExtAuthzContextExtensionsIsInternal(extAuthzContextExtensions map[string]string) bool
• func ExtAuthzContextExtensionsRouteID(extAuthzContextExtensions map[string]string) uint64
• func ExtAuthzFilter(grpcClientTimeout *durationpb.Duration) *envoy_extensions_filters_network_http_connection_manager.HttpFilter
• func HTTPConnectionManagerFilter(...) *envoy_config_listener_v3.Filter
• func HTTPRouterFilter() *envoy_extensions_filters_network_http_connection_manager.HttpFilter
• func LuaFilter(defaultSourceCode string) *envoy_extensions_filters_network_http_connection_manager.HttpFilter
• func MakeExtAuthzContextExtensions(internal bool, routeID uint64) map[string]string
• func PerFilterConfigExtAuthzContextExtensions(authzContextExtensions map[string]string) *anypb.Any
• func PerFilterConfigExtAuthzDisabled() *anypb.Any
• func ProxyProtocolFilter() *envoy_config_listener_v3.ListenerFilter
• func TCPProxyFilter(clusterName string) *envoy_config_listener_v3.Filter
• func TLSInspectorFilter() *envoy_config_listener_v3.ListenerFilter
• func WithKeepalive(src *envoy_config_core_v3.Http2ProtocolOptions) *envoy_config_core_v3.Http2ProtocolOptions
• type Builder
  • func New(localGRPCAddress string, localHTTPAddress string, localMetricsAddress string, ...) *Builder
  • func (b *Builder) BuildBootstrap(ctx context.Context, cfg *config.Config, fullyStatic bool) (bootstrap *envoy_config_bootstrap_v3.Bootstrap, err error)
  • func (b *Builder) BuildBootstrapAdmin(cfg *config.Config) (admin *envoy_config_bootstrap_v3.Admin, err error)
  • func (b *Builder) BuildBootstrapDynamicResources(_ *config.Config, fullyStatic bool) (dynamicResources *envoy_config_bootstrap_v3.Bootstrap_DynamicResources, ...)
  • func (b *Builder) BuildBootstrapLayeredRuntime() (*envoy_config_bootstrap_v3.LayeredRuntime, error)
  • func (b *Builder) BuildBootstrapStaticResources(ctx context.Context, cfg *config.Config, fullyStatic bool) (staticResources *envoy_config_bootstrap_v3.Bootstrap_StaticResources, ...)
  • func (b *Builder) BuildBootstrapStatsConfig(cfg *config.Config) (*envoy_config_metrics_v3.StatsConfig, error)
  • func (b *Builder) BuildClusters(ctx context.Context, cfg *config.Config) ([]*envoy_config_cluster_v3.Cluster, error)
  • func (b *Builder) BuildListeners(ctx context.Context, cfg *config.Config, fullyStatic bool) ([]*envoy_config_listener_v3.Listener, error)
  • func (b *Builder) BuildRouteConfigurations(ctx context.Context, cfg *config.Config) ([]*envoy_config_route_v3.RouteConfiguration, error)
• type Endpoint
  • func NewEndpoint(u *url.URL, ts *envoy_config_core_v3.TransportSocket, weight uint32) Endpoint
  • func (e Endpoint) TransportSocketName() string
• type Keepalive

Constants

const PerFilterConfigExtAuthzName = "envoy.filters.http.ext_authz"

PerFilterConfigExtAuthzName is the name of the ext authz filter to apply config to

Functions

func ExtAuthzContextExtensionsIsInternal

func ExtAuthzContextExtensionsIsInternal(extAuthzContextExtensions map[string]string) bool

ExtAuthzContextExtensionsIsInternal returns true if the context extensions indicates the route is internal.

func ExtAuthzContextExtensionsRouteID

func ExtAuthzContextExtensionsRouteID(extAuthzContextExtensions map[string]string) uint64

ExtAuthzContextExtensionsRouteID returns the route id for the context extensions.

func ExtAuthzFilter

func ExtAuthzFilter(grpcClientTimeout *durationpb.Duration) *envoy_extensions_filters_network_http_connection_manager.HttpFilter

ExtAuthzFilter creates an ext authz filter.

func HTTPConnectionManagerFilter

func HTTPConnectionManagerFilter(
	httpConnectionManager *envoy_extensions_filters_network_http_connection_manager.HttpConnectionManager,
) *envoy_config_listener_v3.Filter

HTTPConnectionManagerFilter creates a new HTTP connection manager filter.

func HTTPRouterFilter

func HTTPRouterFilter() *envoy_extensions_filters_network_http_connection_manager.HttpFilter

HTTPRouterFilter creates a new HTTP router filter.

func LuaFilter

func LuaFilter(defaultSourceCode string) *envoy_extensions_filters_network_http_connection_manager.HttpFilter

LuaFilter creates a lua HTTP filter.

func MakeExtAuthzContextExtensions

func MakeExtAuthzContextExtensions(internal bool, routeID uint64) map[string]string

MakeExtAuthzContextExtensions makes the ext authz context extensions.

func PerFilterConfigExtAuthzContextExtensions

func PerFilterConfigExtAuthzContextExtensions(authzContextExtensions map[string]string) *anypb.Any

PerFilterConfigExtAuthzContextExtensions returns a per-filter config for ext authz that disables ext-authz.

func PerFilterConfigExtAuthzDisabled

func PerFilterConfigExtAuthzDisabled() *anypb.Any

PerFilterConfigExtAuthzDisabled returns a per-filter config for ext authz that disables ext-authz.

func ProxyProtocolFilter

func ProxyProtocolFilter() *envoy_config_listener_v3.ListenerFilter

ProxyProtocolFilter creates a new Proxy Protocol filter.

func TCPProxyFilter

func TCPProxyFilter(clusterName string) *envoy_config_listener_v3.Filter

TCPProxyFilter creates a new TCP Proxy filter.

func TLSInspectorFilter

func TLSInspectorFilter() *envoy_config_listener_v3.ListenerFilter

TLSInspectorFilter creates a new TLS inspector filter.

func WithKeepalive

func WithKeepalive(src *envoy_config_core_v3.Http2ProtocolOptions) *envoy_config_core_v3.Http2ProtocolOptions

Types

type Builder

type Builder struct {
	// contains filtered or unexported fields
}

A Builder builds envoy config from pomerium config.

func New

func New(
	localGRPCAddress string,
	localHTTPAddress string,
	localMetricsAddress string,
	fileManager *filemgr.Manager,
	reproxyHandler *reproxy.Handler,
) *Builder

New creates a new Builder.

func (*Builder) BuildBootstrap

func (b *Builder) BuildBootstrap(
	ctx context.Context,
	cfg *config.Config,
	fullyStatic bool,
) (bootstrap *envoy_config_bootstrap_v3.Bootstrap, err error)

BuildBootstrap builds the bootstrap config.

func (*Builder) BuildBootstrapAdmin

func (b *Builder) BuildBootstrapAdmin(cfg *config.Config) (admin *envoy_config_bootstrap_v3.Admin, err error)

BuildBootstrapAdmin builds the admin config for the envoy bootstrap.

func (*Builder) BuildBootstrapDynamicResources

func (b *Builder) BuildBootstrapDynamicResources(
	_ *config.Config,
	fullyStatic bool,
) (dynamicResources *envoy_config_bootstrap_v3.Bootstrap_DynamicResources, err error)

BuildBootstrapDynamicResources builds the dynamic resources for the envoy bootstrap.

func (*Builder) BuildBootstrapLayeredRuntime

func (b *Builder) BuildBootstrapLayeredRuntime() (*envoy_config_bootstrap_v3.LayeredRuntime, error)

BuildBootstrapLayeredRuntime builds the layered runtime for the envoy bootstrap.

func (*Builder) BuildBootstrapStaticResources

func (b *Builder) BuildBootstrapStaticResources(
	ctx context.Context,
	cfg *config.Config,
	fullyStatic bool,
) (staticResources *envoy_config_bootstrap_v3.Bootstrap_StaticResources, err error)

BuildBootstrapStaticResources builds the static resources for the envoy bootstrap. It includes the control plane cluster.

func (*Builder) BuildBootstrapStatsConfig

func (b *Builder) BuildBootstrapStatsConfig(cfg *config.Config) (*envoy_config_metrics_v3.StatsConfig, error)

BuildBootstrapStatsConfig builds a the stats config the envoy bootstrap.

func (*Builder) BuildClusters

func (b *Builder) BuildClusters(ctx context.Context, cfg *config.Config) ([]*envoy_config_cluster_v3.Cluster, error)

BuildClusters builds envoy clusters from the given config.

func (*Builder) BuildListeners

func (b *Builder) BuildListeners(
	ctx context.Context,
	cfg *config.Config,
	fullyStatic bool,
) ([]*envoy_config_listener_v3.Listener, error)

BuildListeners builds envoy listeners from the given config.

func (*Builder) BuildRouteConfigurations

func (b *Builder) BuildRouteConfigurations(
	ctx context.Context,
	cfg *config.Config,
) ([]*envoy_config_route_v3.RouteConfiguration, error)

BuildRouteConfigurations builds the route configurations for the RDS service.

type Endpoint

type Endpoint struct {
	// contains filtered or unexported fields
}

An Endpoint is a URL with its corresponding Transport Socket.

func NewEndpoint

func NewEndpoint(u *url.URL, ts *envoy_config_core_v3.TransportSocket, weight uint32) Endpoint

NewEndpoint creates a new Endpoint.

func (Endpoint) TransportSocketName

func (e Endpoint) TransportSocketName() string

TransportSocketName return the name for this endpoint.

type Keepalive

type Keepalive bool

Keepalive is a type to enable or disable keepalive