mtls

Documentation

Index

• func BuildMeshResourceObjectMeta(mesh *discoveryv1.Mesh) metav1.ObjectMeta
• func IsSigningCert(secret *corev1.Secret) bool
• func RootCASecretName(virtualMeshRef ezkube.ResourceId) *skv2corev1.ObjectRef
• type Translator
  • func NewTranslator(ctx context.Context, secrets corev1sets.SecretSet, ...) Translator

Functions

func BuildMeshResourceObjectMeta

func BuildMeshResourceObjectMeta(
	mesh *discoveryv1.Mesh,
) metav1.ObjectMeta

Build the common ObjectMeta used for child certificate resources of this mesh Exposed for use in enterprise

func IsSigningCert

func IsSigningCert(secret *corev1.Secret) bool

used by networking reconciler to filter ignored secrets

func RootCASecretName

func RootCASecretName(virtualMeshRef ezkube.ResourceId) *skv2corev1.ObjectRef

Types

type Translator

type Translator interface {
	// Translate translates the appropriate VirtualService and DestinationRule for the given Mesh.
	// returns nil if no VirtualService or DestinationRule is required for the Mesh (i.e. if no VirtualService/DestinationRule features are required, such as subsets).
	// Output resources will be added to the istio.Builder
	// Errors caused by invalid user config will be reported using the Reporter.
	Translate(
		mesh *discoveryv1.Mesh,
		virtualMesh *discoveryv1.MeshStatus_AppliedVirtualMesh,
		istioOutputs istio.Builder,
		localOutputs local.Builder,
		reporter reporting.Reporter,
	)
}

the VirtualService translator translates a Mesh into a VirtualService.

func NewTranslator

func NewTranslator(
	ctx context.Context,
	secrets corev1sets.SecretSet,
	workloads discoveryv1sets.WorkloadSet,
) Translator