applicationlayer

Documentation

Index

• Constants
• func ApplicationLayer(config *Config) render.Component
• type Config

Constants

const (
	APLName                          = "application-layer"
	RoleName                         = "application-layer"
	PodSecurityPolicyName            = "application-layer"
	ApplicationLayerDaemonsetName    = "l7-log-collector"
	L7CollectorContainerName         = "l7-collector"
	ProxyContainerName               = "envoy-proxy"
	EnvoyLogsVolumeName              = "envoy-logs"
	EnvoyConfigMapName               = "envoy-config"
	EnvoyConfigMapKey                = "envoy-config.yaml"
	FelixSync                        = "felix-sync"
	DikastesSyncVolumeName           = "dikastes-sync"
	DikastesContainerName            = "dikastes"
	ModSecurityRulesetVolumeName     = "modsecurity-ruleset"
	ModSecurityRulesetVolumePath     = "/etc/modsecurity-ruleset"
	ModSecurityRulesetConfigMapName  = "modsecurity-ruleset"
	ModSecurityRulesetHashAnnotation = "hash.operator.tigera.io/modsecurity-ruleset"
	CalicoLogsVolumeName             = "var-log-calico"
	CalicologsVolumePath             = "/var/log/calico"
)

Functions

func ApplicationLayer

func ApplicationLayer(
	config *Config,
) render.Component

Types

type Config

type Config struct {
	// Required config.
	PullSecrets  []*corev1.Secret
	Installation *operatorv1.InstallationSpec
	OsType       rmeta.OSType

	// Optional config for WAF.
	WAFEnabled           bool
	ModSecurityConfigMap *corev1.ConfigMap

	// Optional config for L7 logs.
	LogsEnabled            bool
	LogRequestsPerInterval *int64
	LogIntervalSeconds     *int64

	// Optional config for ALP
	ALPEnabled bool

	// envoy user-configurable overrides
	UseRemoteAddressXFF bool
	NumTrustedHopsXFF   int32

	// Whether the cluster supports pod security policies.
	UsePSP bool

	ApplicationLayer *operatorv1.ApplicationLayer
	// contains filtered or unexported fields
}

Config contains all the config information ApplicationLayer needs to render component.