builder

Documentation

Index

• type AuthzLogger
  • func (al *AuthzLogger) AppendDebugf(format string, args ...any)
  • func (al *AuthzLogger) AppendError(err error)
  • func (al *AuthzLogger) Report()
• type Builder
  • func New(trustDomainBundle trustdomain.Bundle, push *model.PushContext, ...) *Builder
  • func (b Builder) BuildHTTP() []*hcm.HttpFilter
  • func (b Builder) BuildTCP() []*listener.Filter
• type Option

Types

type AuthzLogger

type AuthzLogger struct {
	// contains filtered or unexported fields
}

func (*AuthzLogger) AppendDebugf

func (al *AuthzLogger) AppendDebugf(format string, args ...any)

func (*AuthzLogger) AppendError

func (al *AuthzLogger) AppendError(err error)

func (*AuthzLogger) Report

func (al *AuthzLogger) Report()

type Builder

type Builder struct {
	// contains filtered or unexported fields
}

Builder builds Istio authorization policy to Envoy filters.

func New

func New(trustDomainBundle trustdomain.Bundle, push *model.PushContext, policies model.AuthorizationPoliciesResult, option Option) *Builder

New returns a new builder for the given workload with the authorization policy. Returns nil if none of the authorization policies are enabled for the workload.

func (Builder) BuildHTTP

func (b Builder) BuildHTTP() []*hcm.HttpFilter

BuildHTTP returns the HTTP filters built from the authorization policy.

func (Builder) BuildTCP

func (b Builder) BuildTCP() []*listener.Filter

BuildTCP returns the TCP filters built from the authorization policy.

type Option

type Option struct {
	IsCustomBuilder bool
	UseFilterState  bool
}

General setting to control behavior