cilium

package
v0.0.0-...-e2f41ce Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 1, 2024 License: Apache-2.0 Imports: 30 Imported by: 48

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	HttpProtocol_name = map[int32]string{
		0: "HTTP10",
		1: "HTTP11",
		2: "HTTP2",
	}
	HttpProtocol_value = map[string]int32{
		"HTTP10": 0,
		"HTTP11": 1,
		"HTTP2":  2,
	}
)

Enum value maps for HttpProtocol.

View Source
var (
	EntryType_name = map[int32]string{
		0: "Request",
		1: "Response",
		2: "Denied",
	}
	EntryType_value = map[string]int32{
		"Request":  0,
		"Response": 1,
		"Denied":   2,
	}
)

Enum value maps for EntryType.

View Source
var (
	HeaderMatch_MatchAction_name = map[int32]string{
		0: "CONTINUE_ON_MATCH",
		1: "FAIL_ON_MATCH",
		2: "DELETE_ON_MATCH",
	}
	HeaderMatch_MatchAction_value = map[string]int32{
		"CONTINUE_ON_MATCH": 0,
		"FAIL_ON_MATCH":     1,
		"DELETE_ON_MATCH":   2,
	}
)

Enum value maps for HeaderMatch_MatchAction.

View Source
var (
	HeaderMatch_MismatchAction_name = map[int32]string{
		0: "FAIL_ON_MISMATCH",
		1: "CONTINUE_ON_MISMATCH",
		2: "ADD_ON_MISMATCH",
		3: "DELETE_ON_MISMATCH",
		4: "REPLACE_ON_MISMATCH",
	}
	HeaderMatch_MismatchAction_value = map[string]int32{
		"FAIL_ON_MISMATCH":     0,
		"CONTINUE_ON_MISMATCH": 1,
		"ADD_ON_MISMATCH":      2,
		"DELETE_ON_MISMATCH":   3,
		"REPLACE_ON_MISMATCH":  4,
	}
)

Enum value maps for HeaderMatch_MismatchAction.

View Source
var File_cilium_api_accesslog_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_bpf_metadata_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_health_check_sink_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_l7policy_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_network_filter_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_npds_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_nphds_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_tls_wrapper_proto protoreflect.FileDescriptor
View Source
var File_cilium_api_websocket_proto protoreflect.FileDescriptor

Functions

func RegisterNetworkPolicyDiscoveryServiceServer

func RegisterNetworkPolicyDiscoveryServiceServer(s *grpc.Server, srv NetworkPolicyDiscoveryServiceServer)

func RegisterNetworkPolicyHostsDiscoveryServiceServer

func RegisterNetworkPolicyHostsDiscoveryServiceServer(s *grpc.Server, srv NetworkPolicyHostsDiscoveryServiceServer)

Types

type BpfMetadata

type BpfMetadata struct {

	// File system root for bpf. Defaults to "/sys/fs/bpf" if left empty.
	BpfRoot string `protobuf:"bytes,1,opt,name=bpf_root,json=bpfRoot,proto3" json:"bpf_root,omitempty"`
	// 'true' if the filter is on ingress listener, 'false' for egress listener.
	IsIngress bool `protobuf:"varint,2,opt,name=is_ingress,json=isIngress,proto3" json:"is_ingress,omitempty"`
	// Use of the original source address requires kernel datapath support which
	// may or may not be available. 'true' if original source address
	// should be used. Original source address use may still be
	// skipped in scenarios where it is knows to not work.
	UseOriginalSourceAddress bool `` /* 138-byte string literal not displayed */
	// True if the listener is used for an L7 LB. In this case policy enforcement is done on the
	// destination selected by the listener rather than on the original destination address. For
	// local sources the source endpoint ID is set in socket mark instead of source security ID if
	// 'use_original_source_address' is also true, so that the local source's egress policy is
	// enforced on the bpf datapath.
	// Only valid for egress.
	IsL7Lb bool `protobuf:"varint,4,opt,name=is_l7lb,json=isL7lb,proto3" json:"is_l7lb,omitempty"`
	// Source address to be used whenever the original source address is not used.
	// Either ipv4_source_address or ipv6_source_address depending on the address
	// family of the destination address. If left empty, and no Envoy Cluster Bind
	// Config is provided, the source address will be picked by the local IP stack.
	Ipv4SourceAddress string `protobuf:"bytes,5,opt,name=ipv4_source_address,json=ipv4SourceAddress,proto3" json:"ipv4_source_address,omitempty"`
	Ipv6SourceAddress string `protobuf:"bytes,6,opt,name=ipv6_source_address,json=ipv6SourceAddress,proto3" json:"ipv6_source_address,omitempty"`
	// True if policy should be enforced on l7 LB used. The policy bound to the configured
	// ipv[46]_source_addresses, which must be explicitly set, applies. Ingress policy is
	// enforced on the security identity of the original (e.g., external) source. Egress
	// policy is enforced on the security identity of the backend selected by the load balancer.
	//
	// Deprecation note: This option will be forced 'true' and deprecated when Cilium 1.15 is
	// the oldest supported release.
	EnforcePolicyOnL7Lb bool `protobuf:"varint,7,opt,name=enforce_policy_on_l7lb,json=enforcePolicyOnL7lb,proto3" json:"enforce_policy_on_l7lb,omitempty"`
	// proxy_id is passed to access log messages and allows relating access log messages to
	// listeners.
	ProxyId uint32 `protobuf:"varint,8,opt,name=proxy_id,json=proxyId,proto3" json:"proxy_id,omitempty"`
	// contains filtered or unexported fields
}

func (*BpfMetadata) Descriptor deprecated

func (*BpfMetadata) Descriptor() ([]byte, []int)

Deprecated: Use BpfMetadata.ProtoReflect.Descriptor instead.

func (*BpfMetadata) GetBpfRoot

func (x *BpfMetadata) GetBpfRoot() string

func (*BpfMetadata) GetEnforcePolicyOnL7Lb

func (x *BpfMetadata) GetEnforcePolicyOnL7Lb() bool

func (*BpfMetadata) GetIpv4SourceAddress

func (x *BpfMetadata) GetIpv4SourceAddress() string

func (*BpfMetadata) GetIpv6SourceAddress

func (x *BpfMetadata) GetIpv6SourceAddress() string

func (*BpfMetadata) GetIsIngress

func (x *BpfMetadata) GetIsIngress() bool

func (*BpfMetadata) GetIsL7Lb

func (x *BpfMetadata) GetIsL7Lb() bool

func (*BpfMetadata) GetProxyId

func (x *BpfMetadata) GetProxyId() uint32

func (*BpfMetadata) GetUseOriginalSourceAddress

func (x *BpfMetadata) GetUseOriginalSourceAddress() bool

func (*BpfMetadata) ProtoMessage

func (*BpfMetadata) ProtoMessage()

func (*BpfMetadata) ProtoReflect

func (x *BpfMetadata) ProtoReflect() protoreflect.Message

func (*BpfMetadata) Reset

func (x *BpfMetadata) Reset()

func (*BpfMetadata) String

func (x *BpfMetadata) String() string

func (*BpfMetadata) Validate

func (m *BpfMetadata) Validate() error

Validate checks the field values on BpfMetadata with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*BpfMetadata) ValidateAll

func (m *BpfMetadata) ValidateAll() error

ValidateAll checks the field values on BpfMetadata with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in BpfMetadataMultiError, or nil if none found.

type BpfMetadataMultiError

type BpfMetadataMultiError []error

BpfMetadataMultiError is an error wrapping multiple validation errors returned by BpfMetadata.ValidateAll() if the designated constraints aren't met.

func (BpfMetadataMultiError) AllErrors

func (m BpfMetadataMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (BpfMetadataMultiError) Error

func (m BpfMetadataMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type BpfMetadataValidationError

type BpfMetadataValidationError struct {
	// contains filtered or unexported fields
}

BpfMetadataValidationError is the validation error returned by BpfMetadata.Validate if the designated constraints aren't met.

func (BpfMetadataValidationError) Cause

Cause function returns cause value.

func (BpfMetadataValidationError) Error

Error satisfies the builtin error interface

func (BpfMetadataValidationError) ErrorName

func (e BpfMetadataValidationError) ErrorName() string

ErrorName returns error name.

func (BpfMetadataValidationError) Field

Field function returns field value.

func (BpfMetadataValidationError) Key

Key function returns key value.

func (BpfMetadataValidationError) Reason

Reason function returns reason value.

type DownstreamTlsWrapperContext

type DownstreamTlsWrapperContext struct {
	// contains filtered or unexported fields
}

func (*DownstreamTlsWrapperContext) Descriptor deprecated

func (*DownstreamTlsWrapperContext) Descriptor() ([]byte, []int)

Deprecated: Use DownstreamTlsWrapperContext.ProtoReflect.Descriptor instead.

func (*DownstreamTlsWrapperContext) ProtoMessage

func (*DownstreamTlsWrapperContext) ProtoMessage()

func (*DownstreamTlsWrapperContext) ProtoReflect

func (*DownstreamTlsWrapperContext) Reset

func (x *DownstreamTlsWrapperContext) Reset()

func (*DownstreamTlsWrapperContext) String

func (x *DownstreamTlsWrapperContext) String() string

func (*DownstreamTlsWrapperContext) Validate

func (m *DownstreamTlsWrapperContext) Validate() error

Validate checks the field values on DownstreamTlsWrapperContext with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*DownstreamTlsWrapperContext) ValidateAll

func (m *DownstreamTlsWrapperContext) ValidateAll() error

ValidateAll checks the field values on DownstreamTlsWrapperContext with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in DownstreamTlsWrapperContextMultiError, or nil if none found.

type DownstreamTlsWrapperContextMultiError

type DownstreamTlsWrapperContextMultiError []error

DownstreamTlsWrapperContextMultiError is an error wrapping multiple validation errors returned by DownstreamTlsWrapperContext.ValidateAll() if the designated constraints aren't met.

func (DownstreamTlsWrapperContextMultiError) AllErrors

AllErrors returns a list of validation violation errors.

func (DownstreamTlsWrapperContextMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type DownstreamTlsWrapperContextValidationError

type DownstreamTlsWrapperContextValidationError struct {
	// contains filtered or unexported fields
}

DownstreamTlsWrapperContextValidationError is the validation error returned by DownstreamTlsWrapperContext.Validate if the designated constraints aren't met.

func (DownstreamTlsWrapperContextValidationError) Cause

Cause function returns cause value.

func (DownstreamTlsWrapperContextValidationError) Error

Error satisfies the builtin error interface

func (DownstreamTlsWrapperContextValidationError) ErrorName

ErrorName returns error name.

func (DownstreamTlsWrapperContextValidationError) Field

Field function returns field value.

func (DownstreamTlsWrapperContextValidationError) Key

Key function returns key value.

func (DownstreamTlsWrapperContextValidationError) Reason

Reason function returns reason value.

type EntryType

type EntryType int32
const (
	EntryType_Request  EntryType = 0
	EntryType_Response EntryType = 1
	EntryType_Denied   EntryType = 2
)

func (EntryType) Descriptor

func (EntryType) Descriptor() protoreflect.EnumDescriptor

func (EntryType) Enum

func (x EntryType) Enum() *EntryType

func (EntryType) EnumDescriptor deprecated

func (EntryType) EnumDescriptor() ([]byte, []int)

Deprecated: Use EntryType.Descriptor instead.

func (EntryType) Number

func (x EntryType) Number() protoreflect.EnumNumber

func (EntryType) String

func (x EntryType) String() string

func (EntryType) Type

type HeaderMatch

type HeaderMatch struct {
	Name           string                     `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Value          string                     `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"` // empty for presence match. For secret data use 'value_sds_secret' instead.
	MatchAction    HeaderMatch_MatchAction    ``                                                                /* 131-byte string literal not displayed */
	MismatchAction HeaderMatch_MismatchAction ``                                                                /* 143-byte string literal not displayed */
	// Generic secret name for fetching value via SDS. Secret is fetched from the same gRPC source as
	// this Network Policy.
	ValueSdsSecret string `protobuf:"bytes,5,opt,name=value_sds_secret,json=valueSdsSecret,proto3" json:"value_sds_secret,omitempty"`
	// contains filtered or unexported fields
}

func (*HeaderMatch) Descriptor deprecated

func (*HeaderMatch) Descriptor() ([]byte, []int)

Deprecated: Use HeaderMatch.ProtoReflect.Descriptor instead.

func (*HeaderMatch) GetMatchAction

func (x *HeaderMatch) GetMatchAction() HeaderMatch_MatchAction

func (*HeaderMatch) GetMismatchAction

func (x *HeaderMatch) GetMismatchAction() HeaderMatch_MismatchAction

func (*HeaderMatch) GetName

func (x *HeaderMatch) GetName() string

func (*HeaderMatch) GetValue

func (x *HeaderMatch) GetValue() string

func (*HeaderMatch) GetValueSdsSecret

func (x *HeaderMatch) GetValueSdsSecret() string

func (*HeaderMatch) ProtoMessage

func (*HeaderMatch) ProtoMessage()

func (*HeaderMatch) ProtoReflect

func (x *HeaderMatch) ProtoReflect() protoreflect.Message

func (*HeaderMatch) Reset

func (x *HeaderMatch) Reset()

func (*HeaderMatch) String

func (x *HeaderMatch) String() string

func (*HeaderMatch) Validate

func (m *HeaderMatch) Validate() error

Validate checks the field values on HeaderMatch with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*HeaderMatch) ValidateAll

func (m *HeaderMatch) ValidateAll() error

ValidateAll checks the field values on HeaderMatch with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in HeaderMatchMultiError, or nil if none found.

type HeaderMatchMultiError

type HeaderMatchMultiError []error

HeaderMatchMultiError is an error wrapping multiple validation errors returned by HeaderMatch.ValidateAll() if the designated constraints aren't met.

func (HeaderMatchMultiError) AllErrors

func (m HeaderMatchMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (HeaderMatchMultiError) Error

func (m HeaderMatchMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type HeaderMatchValidationError

type HeaderMatchValidationError struct {
	// contains filtered or unexported fields
}

HeaderMatchValidationError is the validation error returned by HeaderMatch.Validate if the designated constraints aren't met.

func (HeaderMatchValidationError) Cause

Cause function returns cause value.

func (HeaderMatchValidationError) Error

Error satisfies the builtin error interface

func (HeaderMatchValidationError) ErrorName

func (e HeaderMatchValidationError) ErrorName() string

ErrorName returns error name.

func (HeaderMatchValidationError) Field

Field function returns field value.

func (HeaderMatchValidationError) Key

Key function returns key value.

func (HeaderMatchValidationError) Reason

Reason function returns reason value.

type HeaderMatch_MatchAction

type HeaderMatch_MatchAction int32

Action specifies what to do when the header matches.

const (
	HeaderMatch_CONTINUE_ON_MATCH HeaderMatch_MatchAction = 0 // Keep checking other matches (default)
	HeaderMatch_FAIL_ON_MATCH     HeaderMatch_MatchAction = 1 // Drop the request if no other rule matches
	HeaderMatch_DELETE_ON_MATCH   HeaderMatch_MatchAction = 2 // Remove the whole matching header
)

func (HeaderMatch_MatchAction) Descriptor

func (HeaderMatch_MatchAction) Enum

func (HeaderMatch_MatchAction) EnumDescriptor deprecated

func (HeaderMatch_MatchAction) EnumDescriptor() ([]byte, []int)

Deprecated: Use HeaderMatch_MatchAction.Descriptor instead.

func (HeaderMatch_MatchAction) Number

func (HeaderMatch_MatchAction) String

func (x HeaderMatch_MatchAction) String() string

func (HeaderMatch_MatchAction) Type

type HeaderMatch_MismatchAction

type HeaderMatch_MismatchAction int32
const (
	HeaderMatch_FAIL_ON_MISMATCH     HeaderMatch_MismatchAction = 0 // Drop the request if no other rule matches (default)
	HeaderMatch_CONTINUE_ON_MISMATCH HeaderMatch_MismatchAction = 1 // Keep checking other matches, log the mismatch
	HeaderMatch_ADD_ON_MISMATCH      HeaderMatch_MismatchAction = 2 // Add 'value' to the multivalued header
	HeaderMatch_DELETE_ON_MISMATCH   HeaderMatch_MismatchAction = 3 // Remove the whole mismatching header
	HeaderMatch_REPLACE_ON_MISMATCH  HeaderMatch_MismatchAction = 4 // Replace the whole mismatching header with 'value'
)

func (HeaderMatch_MismatchAction) Descriptor

func (HeaderMatch_MismatchAction) Enum

func (HeaderMatch_MismatchAction) EnumDescriptor deprecated

func (HeaderMatch_MismatchAction) EnumDescriptor() ([]byte, []int)

Deprecated: Use HeaderMatch_MismatchAction.Descriptor instead.

func (HeaderMatch_MismatchAction) Number

func (HeaderMatch_MismatchAction) String

func (HeaderMatch_MismatchAction) Type

type HealthCheckEventPipeSink

type HealthCheckEventPipeSink struct {

	// Unix domain socket path where to connect to send health check events to.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

Health check event pipe sink. The health check event will be streamed as binary protobufs.

func (*HealthCheckEventPipeSink) Descriptor deprecated

func (*HealthCheckEventPipeSink) Descriptor() ([]byte, []int)

Deprecated: Use HealthCheckEventPipeSink.ProtoReflect.Descriptor instead.

func (*HealthCheckEventPipeSink) GetPath

func (x *HealthCheckEventPipeSink) GetPath() string

func (*HealthCheckEventPipeSink) ProtoMessage

func (*HealthCheckEventPipeSink) ProtoMessage()

func (*HealthCheckEventPipeSink) ProtoReflect

func (x *HealthCheckEventPipeSink) ProtoReflect() protoreflect.Message

func (*HealthCheckEventPipeSink) Reset

func (x *HealthCheckEventPipeSink) Reset()

func (*HealthCheckEventPipeSink) String

func (x *HealthCheckEventPipeSink) String() string

func (*HealthCheckEventPipeSink) Validate

func (m *HealthCheckEventPipeSink) Validate() error

Validate checks the field values on HealthCheckEventPipeSink with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*HealthCheckEventPipeSink) ValidateAll

func (m *HealthCheckEventPipeSink) ValidateAll() error

ValidateAll checks the field values on HealthCheckEventPipeSink with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in HealthCheckEventPipeSinkMultiError, or nil if none found.

type HealthCheckEventPipeSinkMultiError

type HealthCheckEventPipeSinkMultiError []error

HealthCheckEventPipeSinkMultiError is an error wrapping multiple validation errors returned by HealthCheckEventPipeSink.ValidateAll() if the designated constraints aren't met.

func (HealthCheckEventPipeSinkMultiError) AllErrors

func (m HealthCheckEventPipeSinkMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (HealthCheckEventPipeSinkMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type HealthCheckEventPipeSinkValidationError

type HealthCheckEventPipeSinkValidationError struct {
	// contains filtered or unexported fields
}

HealthCheckEventPipeSinkValidationError is the validation error returned by HealthCheckEventPipeSink.Validate if the designated constraints aren't met.

func (HealthCheckEventPipeSinkValidationError) Cause

Cause function returns cause value.

func (HealthCheckEventPipeSinkValidationError) Error

Error satisfies the builtin error interface

func (HealthCheckEventPipeSinkValidationError) ErrorName

ErrorName returns error name.

func (HealthCheckEventPipeSinkValidationError) Field

Field function returns field value.

func (HealthCheckEventPipeSinkValidationError) Key

Key function returns key value.

func (HealthCheckEventPipeSinkValidationError) Reason

Reason function returns reason value.

type HttpLogEntry

type HttpLogEntry struct {
	HttpProtocol HttpProtocol `protobuf:"varint,1,opt,name=http_protocol,json=httpProtocol,proto3,enum=cilium.HttpProtocol" json:"http_protocol,omitempty"`
	// Request info that is also retained for the response
	Scheme string `protobuf:"bytes,2,opt,name=scheme,proto3" json:"scheme,omitempty"` // Envoy "x-forwarded-proto", e.g., "http", "https"
	Host   string `protobuf:"bytes,3,opt,name=host,proto3" json:"host,omitempty"`     // Envoy ":authority" header
	Path   string `protobuf:"bytes,4,opt,name=path,proto3" json:"path,omitempty"`     // Envoy ":path" header
	Method string `protobuf:"bytes,5,opt,name=method,proto3" json:"method,omitempty"` // Envoy ":method" header
	// Request or response headers not included above
	Headers []*KeyValue `protobuf:"bytes,6,rep,name=headers,proto3" json:"headers,omitempty"`
	// Response info
	Status uint32 `protobuf:"varint,7,opt,name=status,proto3" json:"status,omitempty"` // Envoy ":status" header, zero for request
	// missing_headers includes both headers that were added to the
	// request, and headers that were merely logged as missing
	MissingHeaders []*KeyValue `protobuf:"bytes,8,rep,name=missing_headers,json=missingHeaders,proto3" json:"missing_headers,omitempty"`
	// rejected_headers includes headers that were flagged as unallowed,
	// which may have been removed, or merely logged and the request still
	// allowed, or the request may have been dropped due to them.
	RejectedHeaders []*KeyValue `protobuf:"bytes,9,rep,name=rejected_headers,json=rejectedHeaders,proto3" json:"rejected_headers,omitempty"`
	// contains filtered or unexported fields
}

func (*HttpLogEntry) Descriptor deprecated

func (*HttpLogEntry) Descriptor() ([]byte, []int)

Deprecated: Use HttpLogEntry.ProtoReflect.Descriptor instead.

func (*HttpLogEntry) GetHeaders

func (x *HttpLogEntry) GetHeaders() []*KeyValue

func (*HttpLogEntry) GetHost

func (x *HttpLogEntry) GetHost() string

func (*HttpLogEntry) GetHttpProtocol

func (x *HttpLogEntry) GetHttpProtocol() HttpProtocol

func (*HttpLogEntry) GetMethod

func (x *HttpLogEntry) GetMethod() string

func (*HttpLogEntry) GetMissingHeaders

func (x *HttpLogEntry) GetMissingHeaders() []*KeyValue

func (*HttpLogEntry) GetPath

func (x *HttpLogEntry) GetPath() string

func (*HttpLogEntry) GetRejectedHeaders

func (x *HttpLogEntry) GetRejectedHeaders() []*KeyValue

func (*HttpLogEntry) GetScheme

func (x *HttpLogEntry) GetScheme() string

func (*HttpLogEntry) GetStatus

func (x *HttpLogEntry) GetStatus() uint32

func (*HttpLogEntry) ProtoMessage

func (*HttpLogEntry) ProtoMessage()

func (*HttpLogEntry) ProtoReflect

func (x *HttpLogEntry) ProtoReflect() protoreflect.Message

func (*HttpLogEntry) Reset

func (x *HttpLogEntry) Reset()

func (*HttpLogEntry) String

func (x *HttpLogEntry) String() string

func (*HttpLogEntry) Validate

func (m *HttpLogEntry) Validate() error

Validate checks the field values on HttpLogEntry with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*HttpLogEntry) ValidateAll

func (m *HttpLogEntry) ValidateAll() error

ValidateAll checks the field values on HttpLogEntry with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in HttpLogEntryMultiError, or nil if none found.

type HttpLogEntryMultiError

type HttpLogEntryMultiError []error

HttpLogEntryMultiError is an error wrapping multiple validation errors returned by HttpLogEntry.ValidateAll() if the designated constraints aren't met.

func (HttpLogEntryMultiError) AllErrors

func (m HttpLogEntryMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (HttpLogEntryMultiError) Error

func (m HttpLogEntryMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type HttpLogEntryValidationError

type HttpLogEntryValidationError struct {
	// contains filtered or unexported fields
}

HttpLogEntryValidationError is the validation error returned by HttpLogEntry.Validate if the designated constraints aren't met.

func (HttpLogEntryValidationError) Cause

Cause function returns cause value.

func (HttpLogEntryValidationError) Error

Error satisfies the builtin error interface

func (HttpLogEntryValidationError) ErrorName

func (e HttpLogEntryValidationError) ErrorName() string

ErrorName returns error name.

func (HttpLogEntryValidationError) Field

Field function returns field value.

func (HttpLogEntryValidationError) Key

Key function returns key value.

func (HttpLogEntryValidationError) Reason

Reason function returns reason value.

type HttpNetworkPolicyRule

type HttpNetworkPolicyRule struct {

	// A set of matchers on the HTTP request's headers' names and values.
	// If all the matchers in this set match an HTTP request, the request is
	// allowed by this rule. Otherwise, it is denied.
	//
	// Some special header names are:
	//
	// * *:uri*: The HTTP request's URI.
	// * *:method*: The HTTP request's method.
	// * *:authority*: Also maps to the HTTP 1.1 *Host* header.
	//
	// Optional. If empty, matches any HTTP request.
	Headers []*v31.HeaderMatcher `protobuf:"bytes,1,rep,name=headers,proto3" json:"headers,omitempty"`
	// header_matches is a set of HTTP header name and value pairs that
	// will be matched against the request headers, if all the other match
	// requirements in 'headers' are met. Each HeaderAction determines what to do
	// when there is a match or mismatch.
	//
	// Optional.
	HeaderMatches []*HeaderMatch `protobuf:"bytes,2,rep,name=header_matches,json=headerMatches,proto3" json:"header_matches,omitempty"`
	// contains filtered or unexported fields
}

An HTTP network policy rule, as a conjunction of predicates on HTTP requests. If all the predicates of a rule match an HTTP request, the request is allowed. Otherwise, it is denied.

func (*HttpNetworkPolicyRule) Descriptor deprecated

func (*HttpNetworkPolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use HttpNetworkPolicyRule.ProtoReflect.Descriptor instead.

func (*HttpNetworkPolicyRule) GetHeaderMatches

func (x *HttpNetworkPolicyRule) GetHeaderMatches() []*HeaderMatch

func (*HttpNetworkPolicyRule) GetHeaders

func (x *HttpNetworkPolicyRule) GetHeaders() []*v31.HeaderMatcher

func (*HttpNetworkPolicyRule) ProtoMessage

func (*HttpNetworkPolicyRule) ProtoMessage()

func (*HttpNetworkPolicyRule) ProtoReflect

func (x *HttpNetworkPolicyRule) ProtoReflect() protoreflect.Message

func (*HttpNetworkPolicyRule) Reset

func (x *HttpNetworkPolicyRule) Reset()

func (*HttpNetworkPolicyRule) String

func (x *HttpNetworkPolicyRule) String() string

func (*HttpNetworkPolicyRule) Validate

func (m *HttpNetworkPolicyRule) Validate() error

Validate checks the field values on HttpNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*HttpNetworkPolicyRule) ValidateAll

func (m *HttpNetworkPolicyRule) ValidateAll() error

ValidateAll checks the field values on HttpNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in HttpNetworkPolicyRuleMultiError, or nil if none found.

type HttpNetworkPolicyRuleMultiError

type HttpNetworkPolicyRuleMultiError []error

HttpNetworkPolicyRuleMultiError is an error wrapping multiple validation errors returned by HttpNetworkPolicyRule.ValidateAll() if the designated constraints aren't met.

func (HttpNetworkPolicyRuleMultiError) AllErrors

func (m HttpNetworkPolicyRuleMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (HttpNetworkPolicyRuleMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type HttpNetworkPolicyRuleValidationError

type HttpNetworkPolicyRuleValidationError struct {
	// contains filtered or unexported fields
}

HttpNetworkPolicyRuleValidationError is the validation error returned by HttpNetworkPolicyRule.Validate if the designated constraints aren't met.

func (HttpNetworkPolicyRuleValidationError) Cause

Cause function returns cause value.

func (HttpNetworkPolicyRuleValidationError) Error

Error satisfies the builtin error interface

func (HttpNetworkPolicyRuleValidationError) ErrorName

ErrorName returns error name.

func (HttpNetworkPolicyRuleValidationError) Field

Field function returns field value.

func (HttpNetworkPolicyRuleValidationError) Key

Key function returns key value.

func (HttpNetworkPolicyRuleValidationError) Reason

Reason function returns reason value.

type HttpNetworkPolicyRules

type HttpNetworkPolicyRules struct {

	// The set of HTTP network policy rules.
	// An HTTP request is matched if any of its rules matches the request.
	// Required and may not be empty.
	HttpRules []*HttpNetworkPolicyRule `protobuf:"bytes,1,rep,name=http_rules,json=httpRules,proto3" json:"http_rules,omitempty"`
	// contains filtered or unexported fields
}

A set of network policy rules that match HTTP requests.

func (*HttpNetworkPolicyRules) Descriptor deprecated

func (*HttpNetworkPolicyRules) Descriptor() ([]byte, []int)

Deprecated: Use HttpNetworkPolicyRules.ProtoReflect.Descriptor instead.

func (*HttpNetworkPolicyRules) GetHttpRules

func (x *HttpNetworkPolicyRules) GetHttpRules() []*HttpNetworkPolicyRule

func (*HttpNetworkPolicyRules) ProtoMessage

func (*HttpNetworkPolicyRules) ProtoMessage()

func (*HttpNetworkPolicyRules) ProtoReflect

func (x *HttpNetworkPolicyRules) ProtoReflect() protoreflect.Message

func (*HttpNetworkPolicyRules) Reset

func (x *HttpNetworkPolicyRules) Reset()

func (*HttpNetworkPolicyRules) String

func (x *HttpNetworkPolicyRules) String() string

func (*HttpNetworkPolicyRules) Validate

func (m *HttpNetworkPolicyRules) Validate() error

Validate checks the field values on HttpNetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*HttpNetworkPolicyRules) ValidateAll

func (m *HttpNetworkPolicyRules) ValidateAll() error

ValidateAll checks the field values on HttpNetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in HttpNetworkPolicyRulesMultiError, or nil if none found.

type HttpNetworkPolicyRulesMultiError

type HttpNetworkPolicyRulesMultiError []error

HttpNetworkPolicyRulesMultiError is an error wrapping multiple validation errors returned by HttpNetworkPolicyRules.ValidateAll() if the designated constraints aren't met.

func (HttpNetworkPolicyRulesMultiError) AllErrors

func (m HttpNetworkPolicyRulesMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (HttpNetworkPolicyRulesMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type HttpNetworkPolicyRulesValidationError

type HttpNetworkPolicyRulesValidationError struct {
	// contains filtered or unexported fields
}

HttpNetworkPolicyRulesValidationError is the validation error returned by HttpNetworkPolicyRules.Validate if the designated constraints aren't met.

func (HttpNetworkPolicyRulesValidationError) Cause

Cause function returns cause value.

func (HttpNetworkPolicyRulesValidationError) Error

Error satisfies the builtin error interface

func (HttpNetworkPolicyRulesValidationError) ErrorName

ErrorName returns error name.

func (HttpNetworkPolicyRulesValidationError) Field

Field function returns field value.

func (HttpNetworkPolicyRulesValidationError) Key

Key function returns key value.

func (HttpNetworkPolicyRulesValidationError) Reason

Reason function returns reason value.

type HttpProtocol

type HttpProtocol int32
const (
	HttpProtocol_HTTP10 HttpProtocol = 0
	HttpProtocol_HTTP11 HttpProtocol = 1
	HttpProtocol_HTTP2  HttpProtocol = 2
)

func (HttpProtocol) Descriptor

func (HttpProtocol) Enum

func (x HttpProtocol) Enum() *HttpProtocol

func (HttpProtocol) EnumDescriptor deprecated

func (HttpProtocol) EnumDescriptor() ([]byte, []int)

Deprecated: Use HttpProtocol.Descriptor instead.

func (HttpProtocol) Number

func (HttpProtocol) String

func (x HttpProtocol) String() string

func (HttpProtocol) Type

type IsLogEntry_L7

type IsLogEntry_L7 = isLogEntry_L7

Add an exported type alias for L7 log entry oneof, so that the Go code does not need to know all the individual types

type KafkaLogEntry

type KafkaLogEntry struct {

	// correlation_id is a user-supplied integer value that will be passed
	// back with the response
	CorrelationId int32 `protobuf:"varint,1,opt,name=correlation_id,json=correlationId,proto3" json:"correlation_id,omitempty"`
	// error_code is the Kafka error code being returned
	// Ref. https://kafka.apache.org/protocol#protocol_error_codes
	ErrorCode int32 `protobuf:"varint,2,opt,name=error_code,json=errorCode,proto3" json:"error_code,omitempty"`
	// api_version of the Kafka api used
	// Ref. https://kafka.apache.org/protocol#protocol_compatibility
	ApiVersion int32 `protobuf:"varint,3,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// api_key for Kafka message
	// Reference: https://kafka.apache.org/protocol#protocol_api_keys
	ApiKey int32 `protobuf:"varint,4,opt,name=api_key,json=apiKey,proto3" json:"api_key,omitempty"`
	// Topics of the request
	// Optional, as not all messages have topics (ex. LeaveGroup, Heartbeat)
	Topics []string `protobuf:"bytes,5,rep,name=topics,proto3" json:"topics,omitempty"`
	// contains filtered or unexported fields
}

func (*KafkaLogEntry) Descriptor deprecated

func (*KafkaLogEntry) Descriptor() ([]byte, []int)

Deprecated: Use KafkaLogEntry.ProtoReflect.Descriptor instead.

func (*KafkaLogEntry) GetApiKey

func (x *KafkaLogEntry) GetApiKey() int32

func (*KafkaLogEntry) GetApiVersion

func (x *KafkaLogEntry) GetApiVersion() int32

func (*KafkaLogEntry) GetCorrelationId

func (x *KafkaLogEntry) GetCorrelationId() int32

func (*KafkaLogEntry) GetErrorCode

func (x *KafkaLogEntry) GetErrorCode() int32

func (*KafkaLogEntry) GetTopics

func (x *KafkaLogEntry) GetTopics() []string

func (*KafkaLogEntry) ProtoMessage

func (*KafkaLogEntry) ProtoMessage()

func (*KafkaLogEntry) ProtoReflect

func (x *KafkaLogEntry) ProtoReflect() protoreflect.Message

func (*KafkaLogEntry) Reset

func (x *KafkaLogEntry) Reset()

func (*KafkaLogEntry) String

func (x *KafkaLogEntry) String() string

func (*KafkaLogEntry) Validate

func (m *KafkaLogEntry) Validate() error

Validate checks the field values on KafkaLogEntry with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*KafkaLogEntry) ValidateAll

func (m *KafkaLogEntry) ValidateAll() error

ValidateAll checks the field values on KafkaLogEntry with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in KafkaLogEntryMultiError, or nil if none found.

type KafkaLogEntryMultiError

type KafkaLogEntryMultiError []error

KafkaLogEntryMultiError is an error wrapping multiple validation errors returned by KafkaLogEntry.ValidateAll() if the designated constraints aren't met.

func (KafkaLogEntryMultiError) AllErrors

func (m KafkaLogEntryMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (KafkaLogEntryMultiError) Error

func (m KafkaLogEntryMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type KafkaLogEntryValidationError

type KafkaLogEntryValidationError struct {
	// contains filtered or unexported fields
}

KafkaLogEntryValidationError is the validation error returned by KafkaLogEntry.Validate if the designated constraints aren't met.

func (KafkaLogEntryValidationError) Cause

Cause function returns cause value.

func (KafkaLogEntryValidationError) Error

Error satisfies the builtin error interface

func (KafkaLogEntryValidationError) ErrorName

func (e KafkaLogEntryValidationError) ErrorName() string

ErrorName returns error name.

func (KafkaLogEntryValidationError) Field

Field function returns field value.

func (KafkaLogEntryValidationError) Key

Key function returns key value.

func (KafkaLogEntryValidationError) Reason

Reason function returns reason value.

type KafkaNetworkPolicyRule

type KafkaNetworkPolicyRule struct {

	// The Kafka request's API version.
	// If < 0, all Kafka requests are matched by this predicate.
	ApiVersion int32 `protobuf:"varint,1,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// Set of allowed API keys in the Kafka request.
	// If none, all Kafka requests are matched by this predicate.
	ApiKeys []int32 `protobuf:"varint,2,rep,packed,name=api_keys,json=apiKeys,proto3" json:"api_keys,omitempty"`
	// The Kafka request's client ID.
	// Optional. If not specified, all Kafka requests are matched by this
	// predicate. If specified, this predicates only matches requests that contain
	// this client ID, and never matches requests that don't contain any client
	// ID.
	ClientId string `protobuf:"bytes,3,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	// The Kafka request's topic.
	// Optional. If not specified, this rule will not consider the Kafka request's
	// topics. If specified, this predicates only matches requests that contain
	// this topic, and never matches requests that don't contain any topic.
	// However, messages that can not contain a topic will also me matched.
	Topic string `protobuf:"bytes,4,opt,name=topic,proto3" json:"topic,omitempty"`
	// contains filtered or unexported fields
}

A Kafka network policy rule, as a conjunction of predicates on Kafka requests. If all the predicates of a rule match a Kafka request, the request is allowed. Otherwise, it is denied.

func (*KafkaNetworkPolicyRule) Descriptor deprecated

func (*KafkaNetworkPolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use KafkaNetworkPolicyRule.ProtoReflect.Descriptor instead.

func (*KafkaNetworkPolicyRule) GetApiKeys

func (x *KafkaNetworkPolicyRule) GetApiKeys() []int32

func (*KafkaNetworkPolicyRule) GetApiVersion

func (x *KafkaNetworkPolicyRule) GetApiVersion() int32

func (*KafkaNetworkPolicyRule) GetClientId

func (x *KafkaNetworkPolicyRule) GetClientId() string

func (*KafkaNetworkPolicyRule) GetTopic

func (x *KafkaNetworkPolicyRule) GetTopic() string

func (*KafkaNetworkPolicyRule) ProtoMessage

func (*KafkaNetworkPolicyRule) ProtoMessage()

func (*KafkaNetworkPolicyRule) ProtoReflect

func (x *KafkaNetworkPolicyRule) ProtoReflect() protoreflect.Message

func (*KafkaNetworkPolicyRule) Reset

func (x *KafkaNetworkPolicyRule) Reset()

func (*KafkaNetworkPolicyRule) String

func (x *KafkaNetworkPolicyRule) String() string

func (*KafkaNetworkPolicyRule) Validate

func (m *KafkaNetworkPolicyRule) Validate() error

Validate checks the field values on KafkaNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*KafkaNetworkPolicyRule) ValidateAll

func (m *KafkaNetworkPolicyRule) ValidateAll() error

ValidateAll checks the field values on KafkaNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in KafkaNetworkPolicyRuleMultiError, or nil if none found.

type KafkaNetworkPolicyRuleMultiError

type KafkaNetworkPolicyRuleMultiError []error

KafkaNetworkPolicyRuleMultiError is an error wrapping multiple validation errors returned by KafkaNetworkPolicyRule.ValidateAll() if the designated constraints aren't met.

func (KafkaNetworkPolicyRuleMultiError) AllErrors

func (m KafkaNetworkPolicyRuleMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (KafkaNetworkPolicyRuleMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type KafkaNetworkPolicyRuleValidationError

type KafkaNetworkPolicyRuleValidationError struct {
	// contains filtered or unexported fields
}

KafkaNetworkPolicyRuleValidationError is the validation error returned by KafkaNetworkPolicyRule.Validate if the designated constraints aren't met.

func (KafkaNetworkPolicyRuleValidationError) Cause

Cause function returns cause value.

func (KafkaNetworkPolicyRuleValidationError) Error

Error satisfies the builtin error interface

func (KafkaNetworkPolicyRuleValidationError) ErrorName

ErrorName returns error name.

func (KafkaNetworkPolicyRuleValidationError) Field

Field function returns field value.

func (KafkaNetworkPolicyRuleValidationError) Key

Key function returns key value.

func (KafkaNetworkPolicyRuleValidationError) Reason

Reason function returns reason value.

type KafkaNetworkPolicyRules

type KafkaNetworkPolicyRules struct {

	// The set of Kafka network policy rules.
	// A Kafka request is matched if any of its rules matches the request.
	// Required and may not be empty.
	KafkaRules []*KafkaNetworkPolicyRule `protobuf:"bytes,1,rep,name=kafka_rules,json=kafkaRules,proto3" json:"kafka_rules,omitempty"`
	// contains filtered or unexported fields
}

A set of network policy rules that match Kafka requests.

func (*KafkaNetworkPolicyRules) Descriptor deprecated

func (*KafkaNetworkPolicyRules) Descriptor() ([]byte, []int)

Deprecated: Use KafkaNetworkPolicyRules.ProtoReflect.Descriptor instead.

func (*KafkaNetworkPolicyRules) GetKafkaRules

func (x *KafkaNetworkPolicyRules) GetKafkaRules() []*KafkaNetworkPolicyRule

func (*KafkaNetworkPolicyRules) ProtoMessage

func (*KafkaNetworkPolicyRules) ProtoMessage()

func (*KafkaNetworkPolicyRules) ProtoReflect

func (x *KafkaNetworkPolicyRules) ProtoReflect() protoreflect.Message

func (*KafkaNetworkPolicyRules) Reset

func (x *KafkaNetworkPolicyRules) Reset()

func (*KafkaNetworkPolicyRules) String

func (x *KafkaNetworkPolicyRules) String() string

func (*KafkaNetworkPolicyRules) Validate

func (m *KafkaNetworkPolicyRules) Validate() error

Validate checks the field values on KafkaNetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*KafkaNetworkPolicyRules) ValidateAll

func (m *KafkaNetworkPolicyRules) ValidateAll() error

ValidateAll checks the field values on KafkaNetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in KafkaNetworkPolicyRulesMultiError, or nil if none found.

type KafkaNetworkPolicyRulesMultiError

type KafkaNetworkPolicyRulesMultiError []error

KafkaNetworkPolicyRulesMultiError is an error wrapping multiple validation errors returned by KafkaNetworkPolicyRules.ValidateAll() if the designated constraints aren't met.

func (KafkaNetworkPolicyRulesMultiError) AllErrors

func (m KafkaNetworkPolicyRulesMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (KafkaNetworkPolicyRulesMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type KafkaNetworkPolicyRulesValidationError

type KafkaNetworkPolicyRulesValidationError struct {
	// contains filtered or unexported fields
}

KafkaNetworkPolicyRulesValidationError is the validation error returned by KafkaNetworkPolicyRules.Validate if the designated constraints aren't met.

func (KafkaNetworkPolicyRulesValidationError) Cause

Cause function returns cause value.

func (KafkaNetworkPolicyRulesValidationError) Error

Error satisfies the builtin error interface

func (KafkaNetworkPolicyRulesValidationError) ErrorName

ErrorName returns error name.

func (KafkaNetworkPolicyRulesValidationError) Field

Field function returns field value.

func (KafkaNetworkPolicyRulesValidationError) Key

Key function returns key value.

func (KafkaNetworkPolicyRulesValidationError) Reason

Reason function returns reason value.

type KeyValue

type KeyValue struct {
	Key   string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

func (*KeyValue) Descriptor deprecated

func (*KeyValue) Descriptor() ([]byte, []int)

Deprecated: Use KeyValue.ProtoReflect.Descriptor instead.

func (*KeyValue) GetKey

func (x *KeyValue) GetKey() string

func (*KeyValue) GetValue

func (x *KeyValue) GetValue() string

func (*KeyValue) ProtoMessage

func (*KeyValue) ProtoMessage()

func (*KeyValue) ProtoReflect

func (x *KeyValue) ProtoReflect() protoreflect.Message

func (*KeyValue) Reset

func (x *KeyValue) Reset()

func (*KeyValue) String

func (x *KeyValue) String() string

func (*KeyValue) Validate

func (m *KeyValue) Validate() error

Validate checks the field values on KeyValue with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*KeyValue) ValidateAll

func (m *KeyValue) ValidateAll() error

ValidateAll checks the field values on KeyValue with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in KeyValueMultiError, or nil if none found.

type KeyValueMultiError

type KeyValueMultiError []error

KeyValueMultiError is an error wrapping multiple validation errors returned by KeyValue.ValidateAll() if the designated constraints aren't met.

func (KeyValueMultiError) AllErrors

func (m KeyValueMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (KeyValueMultiError) Error

func (m KeyValueMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type KeyValueValidationError

type KeyValueValidationError struct {
	// contains filtered or unexported fields
}

KeyValueValidationError is the validation error returned by KeyValue.Validate if the designated constraints aren't met.

func (KeyValueValidationError) Cause

func (e KeyValueValidationError) Cause() error

Cause function returns cause value.

func (KeyValueValidationError) Error

func (e KeyValueValidationError) Error() string

Error satisfies the builtin error interface

func (KeyValueValidationError) ErrorName

func (e KeyValueValidationError) ErrorName() string

ErrorName returns error name.

func (KeyValueValidationError) Field

func (e KeyValueValidationError) Field() string

Field function returns field value.

func (KeyValueValidationError) Key

func (e KeyValueValidationError) Key() bool

Key function returns key value.

func (KeyValueValidationError) Reason

func (e KeyValueValidationError) Reason() string

Reason function returns reason value.

type L7LogEntry

type L7LogEntry struct {
	Proto  string            `protobuf:"bytes,1,opt,name=proto,proto3" json:"proto,omitempty"`
	Fields map[string]string `` /* 153-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*L7LogEntry) Descriptor deprecated

func (*L7LogEntry) Descriptor() ([]byte, []int)

Deprecated: Use L7LogEntry.ProtoReflect.Descriptor instead.

func (*L7LogEntry) GetFields

func (x *L7LogEntry) GetFields() map[string]string

func (*L7LogEntry) GetProto

func (x *L7LogEntry) GetProto() string

func (*L7LogEntry) ProtoMessage

func (*L7LogEntry) ProtoMessage()

func (*L7LogEntry) ProtoReflect

func (x *L7LogEntry) ProtoReflect() protoreflect.Message

func (*L7LogEntry) Reset

func (x *L7LogEntry) Reset()

func (*L7LogEntry) String

func (x *L7LogEntry) String() string

func (*L7LogEntry) Validate

func (m *L7LogEntry) Validate() error

Validate checks the field values on L7LogEntry with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*L7LogEntry) ValidateAll

func (m *L7LogEntry) ValidateAll() error

ValidateAll checks the field values on L7LogEntry with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in L7LogEntryMultiError, or nil if none found.

type L7LogEntryMultiError

type L7LogEntryMultiError []error

L7LogEntryMultiError is an error wrapping multiple validation errors returned by L7LogEntry.ValidateAll() if the designated constraints aren't met.

func (L7LogEntryMultiError) AllErrors

func (m L7LogEntryMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (L7LogEntryMultiError) Error

func (m L7LogEntryMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type L7LogEntryValidationError

type L7LogEntryValidationError struct {
	// contains filtered or unexported fields
}

L7LogEntryValidationError is the validation error returned by L7LogEntry.Validate if the designated constraints aren't met.

func (L7LogEntryValidationError) Cause

func (e L7LogEntryValidationError) Cause() error

Cause function returns cause value.

func (L7LogEntryValidationError) Error

Error satisfies the builtin error interface

func (L7LogEntryValidationError) ErrorName

func (e L7LogEntryValidationError) ErrorName() string

ErrorName returns error name.

func (L7LogEntryValidationError) Field

Field function returns field value.

func (L7LogEntryValidationError) Key

Key function returns key value.

func (L7LogEntryValidationError) Reason

func (e L7LogEntryValidationError) Reason() string

Reason function returns reason value.

type L7NetworkPolicyRule

type L7NetworkPolicyRule struct {

	// Optional rule name, can be used in logging and error messages.
	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// Generic rule for Go extensions.
	// Optional. If empty, matches any request. Not allowed if 'metadata_rule' is
	// present.
	Rule map[string]string `` /* 149-byte string literal not displayed */
	// Generic rule for Envoy metadata enforcement. All matchers must match for
	// the rule to allow the request/connection. Optional. If empty, matches any
	// request. Not allowed if 'rule' is present.
	MetadataRule []*v32.MetadataMatcher `protobuf:"bytes,2,rep,name=metadata_rule,json=metadataRule,proto3" json:"metadata_rule,omitempty"`
	// contains filtered or unexported fields
}

A generic L7 policy rule, as a conjunction of predicates on l7 requests. If all the predicates of a rule match a request, the request is allowed. Otherwise, it is denied.

func (*L7NetworkPolicyRule) Descriptor deprecated

func (*L7NetworkPolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use L7NetworkPolicyRule.ProtoReflect.Descriptor instead.

func (*L7NetworkPolicyRule) GetMetadataRule

func (x *L7NetworkPolicyRule) GetMetadataRule() []*v32.MetadataMatcher

func (*L7NetworkPolicyRule) GetName

func (x *L7NetworkPolicyRule) GetName() string

func (*L7NetworkPolicyRule) GetRule

func (x *L7NetworkPolicyRule) GetRule() map[string]string

func (*L7NetworkPolicyRule) ProtoMessage

func (*L7NetworkPolicyRule) ProtoMessage()

func (*L7NetworkPolicyRule) ProtoReflect

func (x *L7NetworkPolicyRule) ProtoReflect() protoreflect.Message

func (*L7NetworkPolicyRule) Reset

func (x *L7NetworkPolicyRule) Reset()

func (*L7NetworkPolicyRule) String

func (x *L7NetworkPolicyRule) String() string

func (*L7NetworkPolicyRule) Validate

func (m *L7NetworkPolicyRule) Validate() error

Validate checks the field values on L7NetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*L7NetworkPolicyRule) ValidateAll

func (m *L7NetworkPolicyRule) ValidateAll() error

ValidateAll checks the field values on L7NetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in L7NetworkPolicyRuleMultiError, or nil if none found.

type L7NetworkPolicyRuleMultiError

type L7NetworkPolicyRuleMultiError []error

L7NetworkPolicyRuleMultiError is an error wrapping multiple validation errors returned by L7NetworkPolicyRule.ValidateAll() if the designated constraints aren't met.

func (L7NetworkPolicyRuleMultiError) AllErrors

func (m L7NetworkPolicyRuleMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (L7NetworkPolicyRuleMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type L7NetworkPolicyRuleValidationError

type L7NetworkPolicyRuleValidationError struct {
	// contains filtered or unexported fields
}

L7NetworkPolicyRuleValidationError is the validation error returned by L7NetworkPolicyRule.Validate if the designated constraints aren't met.

func (L7NetworkPolicyRuleValidationError) Cause

Cause function returns cause value.

func (L7NetworkPolicyRuleValidationError) Error

Error satisfies the builtin error interface

func (L7NetworkPolicyRuleValidationError) ErrorName

ErrorName returns error name.

func (L7NetworkPolicyRuleValidationError) Field

Field function returns field value.

func (L7NetworkPolicyRuleValidationError) Key

Key function returns key value.

func (L7NetworkPolicyRuleValidationError) Reason

Reason function returns reason value.

type L7NetworkPolicyRules

type L7NetworkPolicyRules struct {

	// The set of allowing l7 policy rules.
	// A request is allowed if any of these rules matches the request,
	// and the request does not match any of the deny rules.
	// Optional. If missing or empty then all requests are allowed, unless
	// denied by a deny rule.
	L7AllowRules []*L7NetworkPolicyRule `protobuf:"bytes,1,rep,name=l7_allow_rules,json=l7AllowRules,proto3" json:"l7_allow_rules,omitempty"`
	// The set of denying l7 policy rules.
	// A request is denied if any of these rules matches the request.
	// A request that is not denied may be allowed by 'l7_allow_rules'.
	// Optional.
	L7DenyRules []*L7NetworkPolicyRule `protobuf:"bytes,2,rep,name=l7_deny_rules,json=l7DenyRules,proto3" json:"l7_deny_rules,omitempty"`
	// contains filtered or unexported fields
}

A set of network policy rules that match generic L7 requests.

func (*L7NetworkPolicyRules) Descriptor deprecated

func (*L7NetworkPolicyRules) Descriptor() ([]byte, []int)

Deprecated: Use L7NetworkPolicyRules.ProtoReflect.Descriptor instead.

func (*L7NetworkPolicyRules) GetL7AllowRules

func (x *L7NetworkPolicyRules) GetL7AllowRules() []*L7NetworkPolicyRule

func (*L7NetworkPolicyRules) GetL7DenyRules

func (x *L7NetworkPolicyRules) GetL7DenyRules() []*L7NetworkPolicyRule

func (*L7NetworkPolicyRules) ProtoMessage

func (*L7NetworkPolicyRules) ProtoMessage()

func (*L7NetworkPolicyRules) ProtoReflect

func (x *L7NetworkPolicyRules) ProtoReflect() protoreflect.Message

func (*L7NetworkPolicyRules) Reset

func (x *L7NetworkPolicyRules) Reset()

func (*L7NetworkPolicyRules) String

func (x *L7NetworkPolicyRules) String() string

func (*L7NetworkPolicyRules) Validate

func (m *L7NetworkPolicyRules) Validate() error

Validate checks the field values on L7NetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*L7NetworkPolicyRules) ValidateAll

func (m *L7NetworkPolicyRules) ValidateAll() error

ValidateAll checks the field values on L7NetworkPolicyRules with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in L7NetworkPolicyRulesMultiError, or nil if none found.

type L7NetworkPolicyRulesMultiError

type L7NetworkPolicyRulesMultiError []error

L7NetworkPolicyRulesMultiError is an error wrapping multiple validation errors returned by L7NetworkPolicyRules.ValidateAll() if the designated constraints aren't met.

func (L7NetworkPolicyRulesMultiError) AllErrors

func (m L7NetworkPolicyRulesMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (L7NetworkPolicyRulesMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type L7NetworkPolicyRulesValidationError

type L7NetworkPolicyRulesValidationError struct {
	// contains filtered or unexported fields
}

L7NetworkPolicyRulesValidationError is the validation error returned by L7NetworkPolicyRules.Validate if the designated constraints aren't met.

func (L7NetworkPolicyRulesValidationError) Cause

Cause function returns cause value.

func (L7NetworkPolicyRulesValidationError) Error

Error satisfies the builtin error interface

func (L7NetworkPolicyRulesValidationError) ErrorName

ErrorName returns error name.

func (L7NetworkPolicyRulesValidationError) Field

Field function returns field value.

func (L7NetworkPolicyRulesValidationError) Key

Key function returns key value.

func (L7NetworkPolicyRulesValidationError) Reason

Reason function returns reason value.

type L7Policy

type L7Policy struct {

	// Path to the unix domain socket for the cilium access log.
	AccessLogPath string `protobuf:"bytes,1,opt,name=access_log_path,json=accessLogPath,proto3" json:"access_log_path,omitempty"`
	// HTTP response body message for 403 status code.
	// If empty, "Access denied" will be used.
	Denied_403Body string `protobuf:"bytes,3,opt,name=denied_403_body,json=denied403Body,proto3" json:"denied_403_body,omitempty"`
	// contains filtered or unexported fields
}

func (*L7Policy) Descriptor deprecated

func (*L7Policy) Descriptor() ([]byte, []int)

Deprecated: Use L7Policy.ProtoReflect.Descriptor instead.

func (*L7Policy) GetAccessLogPath

func (x *L7Policy) GetAccessLogPath() string

func (*L7Policy) GetDenied_403Body

func (x *L7Policy) GetDenied_403Body() string

func (*L7Policy) ProtoMessage

func (*L7Policy) ProtoMessage()

func (*L7Policy) ProtoReflect

func (x *L7Policy) ProtoReflect() protoreflect.Message

func (*L7Policy) Reset

func (x *L7Policy) Reset()

func (*L7Policy) String

func (x *L7Policy) String() string

func (*L7Policy) Validate

func (m *L7Policy) Validate() error

Validate checks the field values on L7Policy with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*L7Policy) ValidateAll

func (m *L7Policy) ValidateAll() error

ValidateAll checks the field values on L7Policy with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in L7PolicyMultiError, or nil if none found.

type L7PolicyMultiError

type L7PolicyMultiError []error

L7PolicyMultiError is an error wrapping multiple validation errors returned by L7Policy.ValidateAll() if the designated constraints aren't met.

func (L7PolicyMultiError) AllErrors

func (m L7PolicyMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (L7PolicyMultiError) Error

func (m L7PolicyMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type L7PolicyValidationError

type L7PolicyValidationError struct {
	// contains filtered or unexported fields
}

L7PolicyValidationError is the validation error returned by L7Policy.Validate if the designated constraints aren't met.

func (L7PolicyValidationError) Cause

func (e L7PolicyValidationError) Cause() error

Cause function returns cause value.

func (L7PolicyValidationError) Error

func (e L7PolicyValidationError) Error() string

Error satisfies the builtin error interface

func (L7PolicyValidationError) ErrorName

func (e L7PolicyValidationError) ErrorName() string

ErrorName returns error name.

func (L7PolicyValidationError) Field

func (e L7PolicyValidationError) Field() string

Field function returns field value.

func (L7PolicyValidationError) Key

func (e L7PolicyValidationError) Key() bool

Key function returns key value.

func (L7PolicyValidationError) Reason

func (e L7PolicyValidationError) Reason() string

Reason function returns reason value.

type LogEntry

type LogEntry struct {

	// The time that Cilium filter captured this log entry,
	// in, nanoseconds since 1/1/1970.
	Timestamp uint64 `protobuf:"varint,1,opt,name=timestamp,proto3" json:"timestamp,omitempty"`
	// 'true' if the request was received by an ingress listener,
	// 'false' if received by an egress listener
	IsIngress bool      `protobuf:"varint,15,opt,name=is_ingress,json=isIngress,proto3" json:"is_ingress,omitempty"`
	EntryType EntryType `protobuf:"varint,3,opt,name=entry_type,json=entryType,proto3,enum=cilium.EntryType" json:"entry_type,omitempty"`
	// Cilium network policy resource name
	PolicyName string `protobuf:"bytes,4,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// proxy_id identifies the listener this message relates to,
	// as configured via the bpf_metadata listener filter
	ProxyId uint32 `protobuf:"varint,17,opt,name=proxy_id,json=proxyId,proto3" json:"proxy_id,omitempty"`
	// Cilium rule reference
	CiliumRuleRef string `protobuf:"bytes,5,opt,name=cilium_rule_ref,json=ciliumRuleRef,proto3" json:"cilium_rule_ref,omitempty"`
	// Cilium security ID of the source and destination
	SourceSecurityId      uint32 `protobuf:"varint,6,opt,name=source_security_id,json=sourceSecurityId,proto3" json:"source_security_id,omitempty"`
	DestinationSecurityId uint32 `` /* 128-byte string literal not displayed */
	// These fields record the original source and destination addresses,
	// stored in ipv4:port or [ipv6]:port format.
	SourceAddress      string `protobuf:"bytes,7,opt,name=source_address,json=sourceAddress,proto3" json:"source_address,omitempty"`
	DestinationAddress string `protobuf:"bytes,8,opt,name=destination_address,json=destinationAddress,proto3" json:"destination_address,omitempty"`
	// Types that are assignable to L7:
	//
	//	*LogEntry_Http
	//	*LogEntry_Kafka
	//	*LogEntry_GenericL7
	L7 isLogEntry_L7 `protobuf_oneof:"l7"`
	// contains filtered or unexported fields
}

func (*LogEntry) Descriptor deprecated

func (*LogEntry) Descriptor() ([]byte, []int)

Deprecated: Use LogEntry.ProtoReflect.Descriptor instead.

func (*LogEntry) GetCiliumRuleRef

func (x *LogEntry) GetCiliumRuleRef() string

func (*LogEntry) GetDestinationAddress

func (x *LogEntry) GetDestinationAddress() string

func (*LogEntry) GetDestinationSecurityId

func (x *LogEntry) GetDestinationSecurityId() uint32

func (*LogEntry) GetEntryType

func (x *LogEntry) GetEntryType() EntryType

func (*LogEntry) GetGenericL7

func (x *LogEntry) GetGenericL7() *L7LogEntry

func (*LogEntry) GetHttp

func (x *LogEntry) GetHttp() *HttpLogEntry

func (*LogEntry) GetIsIngress

func (x *LogEntry) GetIsIngress() bool

func (*LogEntry) GetKafka

func (x *LogEntry) GetKafka() *KafkaLogEntry

func (*LogEntry) GetL7

func (m *LogEntry) GetL7() isLogEntry_L7

func (*LogEntry) GetPolicyName

func (x *LogEntry) GetPolicyName() string

func (*LogEntry) GetProxyId

func (x *LogEntry) GetProxyId() uint32

func (*LogEntry) GetSourceAddress

func (x *LogEntry) GetSourceAddress() string

func (*LogEntry) GetSourceSecurityId

func (x *LogEntry) GetSourceSecurityId() uint32

func (*LogEntry) GetTimestamp

func (x *LogEntry) GetTimestamp() uint64

func (*LogEntry) ProtoMessage

func (*LogEntry) ProtoMessage()

func (*LogEntry) ProtoReflect

func (x *LogEntry) ProtoReflect() protoreflect.Message

func (*LogEntry) Reset

func (x *LogEntry) Reset()

func (*LogEntry) String

func (x *LogEntry) String() string

func (*LogEntry) Validate

func (m *LogEntry) Validate() error

Validate checks the field values on LogEntry with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*LogEntry) ValidateAll

func (m *LogEntry) ValidateAll() error

ValidateAll checks the field values on LogEntry with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in LogEntryMultiError, or nil if none found.

type LogEntryMultiError

type LogEntryMultiError []error

LogEntryMultiError is an error wrapping multiple validation errors returned by LogEntry.ValidateAll() if the designated constraints aren't met.

func (LogEntryMultiError) AllErrors

func (m LogEntryMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (LogEntryMultiError) Error

func (m LogEntryMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type LogEntryValidationError

type LogEntryValidationError struct {
	// contains filtered or unexported fields
}

LogEntryValidationError is the validation error returned by LogEntry.Validate if the designated constraints aren't met.

func (LogEntryValidationError) Cause

func (e LogEntryValidationError) Cause() error

Cause function returns cause value.

func (LogEntryValidationError) Error

func (e LogEntryValidationError) Error() string

Error satisfies the builtin error interface

func (LogEntryValidationError) ErrorName

func (e LogEntryValidationError) ErrorName() string

ErrorName returns error name.

func (LogEntryValidationError) Field

func (e LogEntryValidationError) Field() string

Field function returns field value.

func (LogEntryValidationError) Key

func (e LogEntryValidationError) Key() bool

Key function returns key value.

func (LogEntryValidationError) Reason

func (e LogEntryValidationError) Reason() string

Reason function returns reason value.

type LogEntry_GenericL7

type LogEntry_GenericL7 struct {
	GenericL7 *L7LogEntry `protobuf:"bytes,102,opt,name=generic_l7,json=genericL7,proto3,oneof"`
}

type LogEntry_Http

type LogEntry_Http struct {
	Http *HttpLogEntry `protobuf:"bytes,100,opt,name=http,proto3,oneof"`
}

type LogEntry_Kafka

type LogEntry_Kafka struct {
	Kafka *KafkaLogEntry `protobuf:"bytes,101,opt,name=kafka,proto3,oneof"`
}

type NetworkFilter

type NetworkFilter struct {

	// Path to the proxylib to be opened
	Proxylib string `protobuf:"bytes,1,opt,name=proxylib,proto3" json:"proxylib,omitempty"`
	// Transparent set of parameters provided for proxylib initialization
	ProxylibParams map[string]string `` /* 191-byte string literal not displayed */
	// Path to the unix domain socket for the cilium access log.
	AccessLogPath string `protobuf:"bytes,5,opt,name=access_log_path,json=accessLogPath,proto3" json:"access_log_path,omitempty"`
	// contains filtered or unexported fields
}

func (*NetworkFilter) Descriptor deprecated

func (*NetworkFilter) Descriptor() ([]byte, []int)

Deprecated: Use NetworkFilter.ProtoReflect.Descriptor instead.

func (*NetworkFilter) GetAccessLogPath

func (x *NetworkFilter) GetAccessLogPath() string

func (*NetworkFilter) GetProxylib

func (x *NetworkFilter) GetProxylib() string

func (*NetworkFilter) GetProxylibParams

func (x *NetworkFilter) GetProxylibParams() map[string]string

func (*NetworkFilter) ProtoMessage

func (*NetworkFilter) ProtoMessage()

func (*NetworkFilter) ProtoReflect

func (x *NetworkFilter) ProtoReflect() protoreflect.Message

func (*NetworkFilter) Reset

func (x *NetworkFilter) Reset()

func (*NetworkFilter) String

func (x *NetworkFilter) String() string

func (*NetworkFilter) Validate

func (m *NetworkFilter) Validate() error

Validate checks the field values on NetworkFilter with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*NetworkFilter) ValidateAll

func (m *NetworkFilter) ValidateAll() error

ValidateAll checks the field values on NetworkFilter with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in NetworkFilterMultiError, or nil if none found.

type NetworkFilterMultiError

type NetworkFilterMultiError []error

NetworkFilterMultiError is an error wrapping multiple validation errors returned by NetworkFilter.ValidateAll() if the designated constraints aren't met.

func (NetworkFilterMultiError) AllErrors

func (m NetworkFilterMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (NetworkFilterMultiError) Error

func (m NetworkFilterMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type NetworkFilterValidationError

type NetworkFilterValidationError struct {
	// contains filtered or unexported fields
}

NetworkFilterValidationError is the validation error returned by NetworkFilter.Validate if the designated constraints aren't met.

func (NetworkFilterValidationError) Cause

Cause function returns cause value.

func (NetworkFilterValidationError) Error

Error satisfies the builtin error interface

func (NetworkFilterValidationError) ErrorName

func (e NetworkFilterValidationError) ErrorName() string

ErrorName returns error name.

func (NetworkFilterValidationError) Field

Field function returns field value.

func (NetworkFilterValidationError) Key

Key function returns key value.

func (NetworkFilterValidationError) Reason

Reason function returns reason value.

type NetworkPoliciesConfigDump

type NetworkPoliciesConfigDump struct {

	// The loaded networkpolicy configs.
	Networkpolicies []*NetworkPolicy `protobuf:"bytes,1,rep,name=networkpolicies,proto3" json:"networkpolicies,omitempty"`
	// contains filtered or unexported fields
}

Cilium's network policy manager fills this message with all currently known network policies.

func (*NetworkPoliciesConfigDump) Descriptor deprecated

func (*NetworkPoliciesConfigDump) Descriptor() ([]byte, []int)

Deprecated: Use NetworkPoliciesConfigDump.ProtoReflect.Descriptor instead.

func (*NetworkPoliciesConfigDump) GetNetworkpolicies

func (x *NetworkPoliciesConfigDump) GetNetworkpolicies() []*NetworkPolicy

func (*NetworkPoliciesConfigDump) ProtoMessage

func (*NetworkPoliciesConfigDump) ProtoMessage()

func (*NetworkPoliciesConfigDump) ProtoReflect

func (*NetworkPoliciesConfigDump) Reset

func (x *NetworkPoliciesConfigDump) Reset()

func (*NetworkPoliciesConfigDump) String

func (x *NetworkPoliciesConfigDump) String() string

func (*NetworkPoliciesConfigDump) Validate

func (m *NetworkPoliciesConfigDump) Validate() error

Validate checks the field values on NetworkPoliciesConfigDump with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*NetworkPoliciesConfigDump) ValidateAll

func (m *NetworkPoliciesConfigDump) ValidateAll() error

ValidateAll checks the field values on NetworkPoliciesConfigDump with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in NetworkPoliciesConfigDumpMultiError, or nil if none found.

type NetworkPoliciesConfigDumpMultiError

type NetworkPoliciesConfigDumpMultiError []error

NetworkPoliciesConfigDumpMultiError is an error wrapping multiple validation errors returned by NetworkPoliciesConfigDump.ValidateAll() if the designated constraints aren't met.

func (NetworkPoliciesConfigDumpMultiError) AllErrors

AllErrors returns a list of validation violation errors.

func (NetworkPoliciesConfigDumpMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type NetworkPoliciesConfigDumpValidationError

type NetworkPoliciesConfigDumpValidationError struct {
	// contains filtered or unexported fields
}

NetworkPoliciesConfigDumpValidationError is the validation error returned by NetworkPoliciesConfigDump.Validate if the designated constraints aren't met.

func (NetworkPoliciesConfigDumpValidationError) Cause

Cause function returns cause value.

func (NetworkPoliciesConfigDumpValidationError) Error

Error satisfies the builtin error interface

func (NetworkPoliciesConfigDumpValidationError) ErrorName

ErrorName returns error name.

func (NetworkPoliciesConfigDumpValidationError) Field

Field function returns field value.

func (NetworkPoliciesConfigDumpValidationError) Key

Key function returns key value.

func (NetworkPoliciesConfigDumpValidationError) Reason

Reason function returns reason value.

type NetworkPolicy

type NetworkPolicy struct {

	// IPs of the endpoint to which this policy applies.
	// Required.
	EndpointIps []string `protobuf:"bytes,1,rep,name=endpoint_ips,json=endpointIps,proto3" json:"endpoint_ips,omitempty"`
	// The endpoint identifier associated with the network policy.
	// Required.
	EndpointId uint64 `protobuf:"varint,2,opt,name=endpoint_id,json=endpointId,proto3" json:"endpoint_id,omitempty"`
	// The part of the policy to be enforced at ingress by the filter, as a set
	// of per-port network policies, one per destination L4 port.
	// Every PortNetworkPolicy element in this set has a unique port / protocol
	// combination.
	// Optional. If empty, all flows in this direction are denied.
	IngressPerPortPolicies []*PortNetworkPolicy `` /* 131-byte string literal not displayed */
	// The part of the policy to be enforced at egress by the filter, as a set
	// of per-port network policies, one per destination L4 port.
	// Every PortNetworkPolicy element in this set has a unique port / protocol
	// combination.
	// Optional. If empty, all flows in this direction are denied.
	EgressPerPortPolicies []*PortNetworkPolicy `` /* 128-byte string literal not displayed */
	// Name of the conntrack map to use with this policy.
	// The paths to various Cilium conntrack maps are derived using this name.
	// Optional. If empty, ipcache or hostmap lookup is used instead of conntrack
	// map.
	ConntrackMapName string `protobuf:"bytes,5,opt,name=conntrack_map_name,json=conntrackMapName,proto3" json:"conntrack_map_name,omitempty"`
	// contains filtered or unexported fields
}

A network policy that is enforced by a filter on the network flows to/from associated hosts.

func (*NetworkPolicy) Descriptor deprecated

func (*NetworkPolicy) Descriptor() ([]byte, []int)

Deprecated: Use NetworkPolicy.ProtoReflect.Descriptor instead.

func (*NetworkPolicy) GetConntrackMapName

func (x *NetworkPolicy) GetConntrackMapName() string

func (*NetworkPolicy) GetEgressPerPortPolicies

func (x *NetworkPolicy) GetEgressPerPortPolicies() []*PortNetworkPolicy

func (*NetworkPolicy) GetEndpointId

func (x *NetworkPolicy) GetEndpointId() uint64

func (*NetworkPolicy) GetEndpointIps

func (x *NetworkPolicy) GetEndpointIps() []string

func (*NetworkPolicy) GetIngressPerPortPolicies

func (x *NetworkPolicy) GetIngressPerPortPolicies() []*PortNetworkPolicy

func (*NetworkPolicy) ProtoMessage

func (*NetworkPolicy) ProtoMessage()

func (*NetworkPolicy) ProtoReflect

func (x *NetworkPolicy) ProtoReflect() protoreflect.Message

func (*NetworkPolicy) Reset

func (x *NetworkPolicy) Reset()

func (*NetworkPolicy) String

func (x *NetworkPolicy) String() string

func (*NetworkPolicy) Validate

func (m *NetworkPolicy) Validate() error

Validate checks the field values on NetworkPolicy with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*NetworkPolicy) ValidateAll

func (m *NetworkPolicy) ValidateAll() error

ValidateAll checks the field values on NetworkPolicy with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in NetworkPolicyMultiError, or nil if none found.

type NetworkPolicyDiscoveryServiceClient

type NetworkPolicyDiscoveryServiceClient interface {
	StreamNetworkPolicies(ctx context.Context, opts ...grpc.CallOption) (NetworkPolicyDiscoveryService_StreamNetworkPoliciesClient, error)
	FetchNetworkPolicies(ctx context.Context, in *v33.DiscoveryRequest, opts ...grpc.CallOption) (*v33.DiscoveryResponse, error)
}

NetworkPolicyDiscoveryServiceClient is the client API for NetworkPolicyDiscoveryService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

type NetworkPolicyDiscoveryServiceServer

type NetworkPolicyDiscoveryServiceServer interface {
	StreamNetworkPolicies(NetworkPolicyDiscoveryService_StreamNetworkPoliciesServer) error
	FetchNetworkPolicies(context.Context, *v33.DiscoveryRequest) (*v33.DiscoveryResponse, error)
}

NetworkPolicyDiscoveryServiceServer is the server API for NetworkPolicyDiscoveryService service.

type NetworkPolicyDiscoveryService_StreamNetworkPoliciesClient

type NetworkPolicyDiscoveryService_StreamNetworkPoliciesClient interface {
	Send(*v33.DiscoveryRequest) error
	Recv() (*v33.DiscoveryResponse, error)
	grpc.ClientStream
}

type NetworkPolicyDiscoveryService_StreamNetworkPoliciesServer

type NetworkPolicyDiscoveryService_StreamNetworkPoliciesServer interface {
	Send(*v33.DiscoveryResponse) error
	Recv() (*v33.DiscoveryRequest, error)
	grpc.ServerStream
}

type NetworkPolicyHosts

type NetworkPolicyHosts struct {

	// The unique identifier of the network policy enforced on the hosts.
	Policy uint64 `protobuf:"varint,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// The set of IP addresses of the hosts on which the network policy is
	// enforced. Optional. May be empty.
	HostAddresses []string `protobuf:"bytes,2,rep,name=host_addresses,json=hostAddresses,proto3" json:"host_addresses,omitempty"`
	// contains filtered or unexported fields
}

The mapping of a network policy identifier to the IP addresses of all the hosts on which the network policy is enforced. A host may be associated only with one network policy.

func (*NetworkPolicyHosts) Descriptor deprecated

func (*NetworkPolicyHosts) Descriptor() ([]byte, []int)

Deprecated: Use NetworkPolicyHosts.ProtoReflect.Descriptor instead.

func (*NetworkPolicyHosts) GetHostAddresses

func (x *NetworkPolicyHosts) GetHostAddresses() []string

func (*NetworkPolicyHosts) GetPolicy

func (x *NetworkPolicyHosts) GetPolicy() uint64

func (*NetworkPolicyHosts) ProtoMessage

func (*NetworkPolicyHosts) ProtoMessage()

func (*NetworkPolicyHosts) ProtoReflect

func (x *NetworkPolicyHosts) ProtoReflect() protoreflect.Message

func (*NetworkPolicyHosts) Reset

func (x *NetworkPolicyHosts) Reset()

func (*NetworkPolicyHosts) String

func (x *NetworkPolicyHosts) String() string

func (*NetworkPolicyHosts) Validate

func (m *NetworkPolicyHosts) Validate() error

Validate checks the field values on NetworkPolicyHosts with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*NetworkPolicyHosts) ValidateAll

func (m *NetworkPolicyHosts) ValidateAll() error

ValidateAll checks the field values on NetworkPolicyHosts with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in NetworkPolicyHostsMultiError, or nil if none found.

type NetworkPolicyHostsDiscoveryServiceClient

type NetworkPolicyHostsDiscoveryServiceClient interface {
	StreamNetworkPolicyHosts(ctx context.Context, opts ...grpc.CallOption) (NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsClient, error)
	FetchNetworkPolicyHosts(ctx context.Context, in *v3.DiscoveryRequest, opts ...grpc.CallOption) (*v3.DiscoveryResponse, error)
}

NetworkPolicyHostsDiscoveryServiceClient is the client API for NetworkPolicyHostsDiscoveryService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

type NetworkPolicyHostsDiscoveryServiceServer

type NetworkPolicyHostsDiscoveryServiceServer interface {
	StreamNetworkPolicyHosts(NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsServer) error
	FetchNetworkPolicyHosts(context.Context, *v3.DiscoveryRequest) (*v3.DiscoveryResponse, error)
}

NetworkPolicyHostsDiscoveryServiceServer is the server API for NetworkPolicyHostsDiscoveryService service.

type NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsClient

type NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsClient interface {
	Send(*v3.DiscoveryRequest) error
	Recv() (*v3.DiscoveryResponse, error)
	grpc.ClientStream
}

type NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsServer

type NetworkPolicyHostsDiscoveryService_StreamNetworkPolicyHostsServer interface {
	Send(*v3.DiscoveryResponse) error
	Recv() (*v3.DiscoveryRequest, error)
	grpc.ServerStream
}

type NetworkPolicyHostsMultiError

type NetworkPolicyHostsMultiError []error

NetworkPolicyHostsMultiError is an error wrapping multiple validation errors returned by NetworkPolicyHosts.ValidateAll() if the designated constraints aren't met.

func (NetworkPolicyHostsMultiError) AllErrors

func (m NetworkPolicyHostsMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (NetworkPolicyHostsMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type NetworkPolicyHostsValidationError

type NetworkPolicyHostsValidationError struct {
	// contains filtered or unexported fields
}

NetworkPolicyHostsValidationError is the validation error returned by NetworkPolicyHosts.Validate if the designated constraints aren't met.

func (NetworkPolicyHostsValidationError) Cause

Cause function returns cause value.

func (NetworkPolicyHostsValidationError) Error

Error satisfies the builtin error interface

func (NetworkPolicyHostsValidationError) ErrorName

ErrorName returns error name.

func (NetworkPolicyHostsValidationError) Field

Field function returns field value.

func (NetworkPolicyHostsValidationError) Key

Key function returns key value.

func (NetworkPolicyHostsValidationError) Reason

Reason function returns reason value.

type NetworkPolicyMultiError

type NetworkPolicyMultiError []error

NetworkPolicyMultiError is an error wrapping multiple validation errors returned by NetworkPolicy.ValidateAll() if the designated constraints aren't met.

func (NetworkPolicyMultiError) AllErrors

func (m NetworkPolicyMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (NetworkPolicyMultiError) Error

func (m NetworkPolicyMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type NetworkPolicyValidationError

type NetworkPolicyValidationError struct {
	// contains filtered or unexported fields
}

NetworkPolicyValidationError is the validation error returned by NetworkPolicy.Validate if the designated constraints aren't met.

func (NetworkPolicyValidationError) Cause

Cause function returns cause value.

func (NetworkPolicyValidationError) Error

Error satisfies the builtin error interface

func (NetworkPolicyValidationError) ErrorName

func (e NetworkPolicyValidationError) ErrorName() string

ErrorName returns error name.

func (NetworkPolicyValidationError) Field

Field function returns field value.

func (NetworkPolicyValidationError) Key

Key function returns key value.

func (NetworkPolicyValidationError) Reason

Reason function returns reason value.

type PortNetworkPolicy

type PortNetworkPolicy struct {

	// The flows' destination L4 port number, as an unsigned 16-bit integer.
	// If 0, all destination L4 port numbers are matched by this predicate.
	Port uint32 `protobuf:"varint,1,opt,name=port,proto3" json:"port,omitempty"`
	// The end of the destination port range, if non-zero.
	EndPort uint32 `protobuf:"varint,4,opt,name=end_port,json=endPort,proto3" json:"end_port,omitempty"`
	// The flows' L4 transport protocol.
	// Required.
	Protocol v3.SocketAddress_Protocol `protobuf:"varint,2,opt,name=protocol,proto3,enum=envoy.config.core.v3.SocketAddress_Protocol" json:"protocol,omitempty"`
	// The network policy rules to be enforced on the flows to the port.
	// Optional. A flow is matched by this predicate if either the set of
	// rules is empty or any of the rules matches it.
	Rules []*PortNetworkPolicyRule `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

A network policy to whitelist flows to a specific destination L4 port, as a conjunction of predicates on L3/L4/L7 flows. If all the predicates of a policy match a flow, the flow is whitelisted.

func (*PortNetworkPolicy) Descriptor deprecated

func (*PortNetworkPolicy) Descriptor() ([]byte, []int)

Deprecated: Use PortNetworkPolicy.ProtoReflect.Descriptor instead.

func (*PortNetworkPolicy) GetEndPort

func (x *PortNetworkPolicy) GetEndPort() uint32

func (*PortNetworkPolicy) GetPort

func (x *PortNetworkPolicy) GetPort() uint32

func (*PortNetworkPolicy) GetProtocol

func (x *PortNetworkPolicy) GetProtocol() v3.SocketAddress_Protocol

func (*PortNetworkPolicy) GetRules

func (x *PortNetworkPolicy) GetRules() []*PortNetworkPolicyRule

func (*PortNetworkPolicy) ProtoMessage

func (*PortNetworkPolicy) ProtoMessage()

func (*PortNetworkPolicy) ProtoReflect

func (x *PortNetworkPolicy) ProtoReflect() protoreflect.Message

func (*PortNetworkPolicy) Reset

func (x *PortNetworkPolicy) Reset()

func (*PortNetworkPolicy) String

func (x *PortNetworkPolicy) String() string

func (*PortNetworkPolicy) Validate

func (m *PortNetworkPolicy) Validate() error

Validate checks the field values on PortNetworkPolicy with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*PortNetworkPolicy) ValidateAll

func (m *PortNetworkPolicy) ValidateAll() error

ValidateAll checks the field values on PortNetworkPolicy with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in PortNetworkPolicyMultiError, or nil if none found.

type PortNetworkPolicyMultiError

type PortNetworkPolicyMultiError []error

PortNetworkPolicyMultiError is an error wrapping multiple validation errors returned by PortNetworkPolicy.ValidateAll() if the designated constraints aren't met.

func (PortNetworkPolicyMultiError) AllErrors

func (m PortNetworkPolicyMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (PortNetworkPolicyMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type PortNetworkPolicyRule

type PortNetworkPolicyRule struct {

	// Traffic on this port is denied for all `remote_policies` if true
	Deny bool `protobuf:"varint,8,opt,name=deny,proto3" json:"deny,omitempty"`
	// Optional name for the rule, can be used in logging and error messages.
	Name string `protobuf:"bytes,5,opt,name=name,proto3" json:"name,omitempty"`
	// The set of numeric remote security IDs explicitly allowed or denied.
	// A flow is matched by this predicate if the identifier of the policy
	// applied on the flow's remote host is contained in this set.
	// Optional. If not specified, any remote host is matched by this predicate.
	// This field is deprecated, use remote_policies instead.
	// TODO: Remove when Cilium 1.14 no longer supported.
	DeprecatedRemotePolicies_64 []uint64 `` /* 151-byte string literal not displayed */
	RemotePolicies              []uint32 `protobuf:"varint,7,rep,packed,name=remote_policies,json=remotePolicies,proto3" json:"remote_policies,omitempty"`
	// Optional downstream TLS context. If present, the incoming connection must
	// be a TLS connection.
	DownstreamTlsContext *TLSContext `protobuf:"bytes,3,opt,name=downstream_tls_context,json=downstreamTlsContext,proto3" json:"downstream_tls_context,omitempty"`
	// Optional upstream TLS context. If present, the outgoing connection will use
	// TLS.
	UpstreamTlsContext *TLSContext `protobuf:"bytes,4,opt,name=upstream_tls_context,json=upstreamTlsContext,proto3" json:"upstream_tls_context,omitempty"`
	// Optional allowed SNIs in TLS handshake.
	ServerNames []string `protobuf:"bytes,6,rep,name=server_names,json=serverNames,proto3" json:"server_names,omitempty"`
	// Optional L7 protocol parser name. This is only used if the parser is not
	// one of the well knows ones. If specified, the l7 parser having this name
	// needs to be built in to libcilium.so.
	L7Proto string `protobuf:"bytes,2,opt,name=l7_proto,json=l7Proto,proto3" json:"l7_proto,omitempty"`
	// Optional. If not specified, any L7 request is matched by this predicate.
	// All rules on any given port must have the same type of L7 rules!
	//
	// Types that are assignable to L7:
	//
	//	*PortNetworkPolicyRule_HttpRules
	//	*PortNetworkPolicyRule_KafkaRules
	//	*PortNetworkPolicyRule_L7Rules
	L7 isPortNetworkPolicyRule_L7 `protobuf_oneof:"l7"`
	// contains filtered or unexported fields
}

A network policy rule, as a conjunction of predicates on L3/L7 flows. If all the predicates of a rule match a flow, the flow is matched by the rule.

func (*PortNetworkPolicyRule) Descriptor deprecated

func (*PortNetworkPolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use PortNetworkPolicyRule.ProtoReflect.Descriptor instead.

func (*PortNetworkPolicyRule) GetDeny

func (x *PortNetworkPolicyRule) GetDeny() bool

func (*PortNetworkPolicyRule) GetDeprecatedRemotePolicies_64

func (x *PortNetworkPolicyRule) GetDeprecatedRemotePolicies_64() []uint64

func (*PortNetworkPolicyRule) GetDownstreamTlsContext

func (x *PortNetworkPolicyRule) GetDownstreamTlsContext() *TLSContext

func (*PortNetworkPolicyRule) GetHttpRules

func (x *PortNetworkPolicyRule) GetHttpRules() *HttpNetworkPolicyRules

func (*PortNetworkPolicyRule) GetKafkaRules

func (x *PortNetworkPolicyRule) GetKafkaRules() *KafkaNetworkPolicyRules

func (*PortNetworkPolicyRule) GetL7

func (m *PortNetworkPolicyRule) GetL7() isPortNetworkPolicyRule_L7

func (*PortNetworkPolicyRule) GetL7Proto

func (x *PortNetworkPolicyRule) GetL7Proto() string

func (*PortNetworkPolicyRule) GetL7Rules

func (*PortNetworkPolicyRule) GetName

func (x *PortNetworkPolicyRule) GetName() string

func (*PortNetworkPolicyRule) GetRemotePolicies

func (x *PortNetworkPolicyRule) GetRemotePolicies() []uint32

func (*PortNetworkPolicyRule) GetServerNames

func (x *PortNetworkPolicyRule) GetServerNames() []string

func (*PortNetworkPolicyRule) GetUpstreamTlsContext

func (x *PortNetworkPolicyRule) GetUpstreamTlsContext() *TLSContext

func (*PortNetworkPolicyRule) ProtoMessage

func (*PortNetworkPolicyRule) ProtoMessage()

func (*PortNetworkPolicyRule) ProtoReflect

func (x *PortNetworkPolicyRule) ProtoReflect() protoreflect.Message

func (*PortNetworkPolicyRule) Reset

func (x *PortNetworkPolicyRule) Reset()

func (*PortNetworkPolicyRule) String

func (x *PortNetworkPolicyRule) String() string

func (*PortNetworkPolicyRule) Validate

func (m *PortNetworkPolicyRule) Validate() error

Validate checks the field values on PortNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*PortNetworkPolicyRule) ValidateAll

func (m *PortNetworkPolicyRule) ValidateAll() error

ValidateAll checks the field values on PortNetworkPolicyRule with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in PortNetworkPolicyRuleMultiError, or nil if none found.

type PortNetworkPolicyRuleMultiError

type PortNetworkPolicyRuleMultiError []error

PortNetworkPolicyRuleMultiError is an error wrapping multiple validation errors returned by PortNetworkPolicyRule.ValidateAll() if the designated constraints aren't met.

func (PortNetworkPolicyRuleMultiError) AllErrors

func (m PortNetworkPolicyRuleMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (PortNetworkPolicyRuleMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type PortNetworkPolicyRuleValidationError

type PortNetworkPolicyRuleValidationError struct {
	// contains filtered or unexported fields
}

PortNetworkPolicyRuleValidationError is the validation error returned by PortNetworkPolicyRule.Validate if the designated constraints aren't met.

func (PortNetworkPolicyRuleValidationError) Cause

Cause function returns cause value.

func (PortNetworkPolicyRuleValidationError) Error

Error satisfies the builtin error interface

func (PortNetworkPolicyRuleValidationError) ErrorName

ErrorName returns error name.

func (PortNetworkPolicyRuleValidationError) Field

Field function returns field value.

func (PortNetworkPolicyRuleValidationError) Key

Key function returns key value.

func (PortNetworkPolicyRuleValidationError) Reason

Reason function returns reason value.

type PortNetworkPolicyRule_HttpRules

type PortNetworkPolicyRule_HttpRules struct {
	// The set of HTTP network policy rules.
	// An HTTP request is matched by this predicate if any of its rules matches
	// the request.
	HttpRules *HttpNetworkPolicyRules `protobuf:"bytes,100,opt,name=http_rules,json=httpRules,proto3,oneof"`
}

type PortNetworkPolicyRule_KafkaRules

type PortNetworkPolicyRule_KafkaRules struct {
	// The set of Kafka network policy rules.
	// A Kafka request is matched by this predicate if any of its rules matches
	// the request.
	KafkaRules *KafkaNetworkPolicyRules `protobuf:"bytes,101,opt,name=kafka_rules,json=kafkaRules,proto3,oneof"`
}

type PortNetworkPolicyRule_L7Rules

type PortNetworkPolicyRule_L7Rules struct {
	// Set of Generic policy rules used when 'l7_proto' is defined.
	// Only to be used for l7 protocols for which a specific oneof
	// is not defined
	L7Rules *L7NetworkPolicyRules `protobuf:"bytes,102,opt,name=l7_rules,json=l7Rules,proto3,oneof"`
}

type PortNetworkPolicyValidationError

type PortNetworkPolicyValidationError struct {
	// contains filtered or unexported fields
}

PortNetworkPolicyValidationError is the validation error returned by PortNetworkPolicy.Validate if the designated constraints aren't met.

func (PortNetworkPolicyValidationError) Cause

Cause function returns cause value.

func (PortNetworkPolicyValidationError) Error

Error satisfies the builtin error interface

func (PortNetworkPolicyValidationError) ErrorName

ErrorName returns error name.

func (PortNetworkPolicyValidationError) Field

Field function returns field value.

func (PortNetworkPolicyValidationError) Key

Key function returns key value.

func (PortNetworkPolicyValidationError) Reason

Reason function returns reason value.

type TLSContext

type TLSContext struct {

	// CA certificates. If present, the counterparty must provide a valid
	// certificate.
	// Deprecated, use 'validation_context_sds_secret' instead.
	TrustedCa string `protobuf:"bytes,1,opt,name=trusted_ca,json=trustedCa,proto3" json:"trusted_ca,omitempty"`
	// Certificate chain.
	// Deprecated, use 'tls_sds_secret' instead.
	CertificateChain string `protobuf:"bytes,2,opt,name=certificate_chain,json=certificateChain,proto3" json:"certificate_chain,omitempty"`
	// Private key
	// Deprecated, use 'tls_sds_secret' instead.
	PrivateKey string `protobuf:"bytes,3,opt,name=private_key,json=privateKey,proto3" json:"private_key,omitempty"`
	// Server Name Indicator. For downstream this helps choose the certificate to
	// present to the client. For upstream this will be used as the SNI on the
	// client connection.
	ServerNames []string `protobuf:"bytes,4,rep,name=server_names,json=serverNames,proto3" json:"server_names,omitempty"`
	// Name of an SDS secret for CA certificates. Secret is fetched from the same gRPC source as
	// this Network Policy. If present, the counterparty must provide a valid certificate.
	// May not be used at the same time with 'trusted_ca'.
	ValidationContextSdsSecret string `` /* 143-byte string literal not displayed */
	// Name of an SDS secret for both TLS private key and certificate chain. Secret is fetched
	// from the same gRPC source as this Network Policy.
	// May not be used at the same time with 'certificate_chain' or 'private_key'.
	TlsSdsSecret string `protobuf:"bytes,6,opt,name=tls_sds_secret,json=tlsSdsSecret,proto3" json:"tls_sds_secret,omitempty"`
	// contains filtered or unexported fields
}

func (*TLSContext) Descriptor deprecated

func (*TLSContext) Descriptor() ([]byte, []int)

Deprecated: Use TLSContext.ProtoReflect.Descriptor instead.

func (*TLSContext) GetCertificateChain

func (x *TLSContext) GetCertificateChain() string

func (*TLSContext) GetPrivateKey

func (x *TLSContext) GetPrivateKey() string

func (*TLSContext) GetServerNames

func (x *TLSContext) GetServerNames() []string

func (*TLSContext) GetTlsSdsSecret

func (x *TLSContext) GetTlsSdsSecret() string

func (*TLSContext) GetTrustedCa

func (x *TLSContext) GetTrustedCa() string

func (*TLSContext) GetValidationContextSdsSecret

func (x *TLSContext) GetValidationContextSdsSecret() string

func (*TLSContext) ProtoMessage

func (*TLSContext) ProtoMessage()

func (*TLSContext) ProtoReflect

func (x *TLSContext) ProtoReflect() protoreflect.Message

func (*TLSContext) Reset

func (x *TLSContext) Reset()

func (*TLSContext) String

func (x *TLSContext) String() string

func (*TLSContext) Validate

func (m *TLSContext) Validate() error

Validate checks the field values on TLSContext with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*TLSContext) ValidateAll

func (m *TLSContext) ValidateAll() error

ValidateAll checks the field values on TLSContext with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in TLSContextMultiError, or nil if none found.

type TLSContextMultiError

type TLSContextMultiError []error

TLSContextMultiError is an error wrapping multiple validation errors returned by TLSContext.ValidateAll() if the designated constraints aren't met.

func (TLSContextMultiError) AllErrors

func (m TLSContextMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (TLSContextMultiError) Error

func (m TLSContextMultiError) Error() string

Error returns a concatenation of all the error messages it wraps.

type TLSContextValidationError

type TLSContextValidationError struct {
	// contains filtered or unexported fields
}

TLSContextValidationError is the validation error returned by TLSContext.Validate if the designated constraints aren't met.

func (TLSContextValidationError) Cause

func (e TLSContextValidationError) Cause() error

Cause function returns cause value.

func (TLSContextValidationError) Error

Error satisfies the builtin error interface

func (TLSContextValidationError) ErrorName

func (e TLSContextValidationError) ErrorName() string

ErrorName returns error name.

func (TLSContextValidationError) Field

Field function returns field value.

func (TLSContextValidationError) Key

Key function returns key value.

func (TLSContextValidationError) Reason

func (e TLSContextValidationError) Reason() string

Reason function returns reason value.

type UnimplementedNetworkPolicyDiscoveryServiceServer

type UnimplementedNetworkPolicyDiscoveryServiceServer struct {
}

UnimplementedNetworkPolicyDiscoveryServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedNetworkPolicyDiscoveryServiceServer) FetchNetworkPolicies

func (*UnimplementedNetworkPolicyDiscoveryServiceServer) StreamNetworkPolicies

type UnimplementedNetworkPolicyHostsDiscoveryServiceServer

type UnimplementedNetworkPolicyHostsDiscoveryServiceServer struct {
}

UnimplementedNetworkPolicyHostsDiscoveryServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedNetworkPolicyHostsDiscoveryServiceServer) FetchNetworkPolicyHosts

func (*UnimplementedNetworkPolicyHostsDiscoveryServiceServer) StreamNetworkPolicyHosts

type UpstreamTlsWrapperContext

type UpstreamTlsWrapperContext struct {
	// contains filtered or unexported fields
}

Empty configuration messages for Cilium TLS wrapper to make Envoy happy

func (*UpstreamTlsWrapperContext) Descriptor deprecated

func (*UpstreamTlsWrapperContext) Descriptor() ([]byte, []int)

Deprecated: Use UpstreamTlsWrapperContext.ProtoReflect.Descriptor instead.

func (*UpstreamTlsWrapperContext) ProtoMessage

func (*UpstreamTlsWrapperContext) ProtoMessage()

func (*UpstreamTlsWrapperContext) ProtoReflect

func (*UpstreamTlsWrapperContext) Reset

func (x *UpstreamTlsWrapperContext) Reset()

func (*UpstreamTlsWrapperContext) String

func (x *UpstreamTlsWrapperContext) String() string

func (*UpstreamTlsWrapperContext) Validate

func (m *UpstreamTlsWrapperContext) Validate() error

Validate checks the field values on UpstreamTlsWrapperContext with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*UpstreamTlsWrapperContext) ValidateAll

func (m *UpstreamTlsWrapperContext) ValidateAll() error

ValidateAll checks the field values on UpstreamTlsWrapperContext with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in UpstreamTlsWrapperContextMultiError, or nil if none found.

type UpstreamTlsWrapperContextMultiError

type UpstreamTlsWrapperContextMultiError []error

UpstreamTlsWrapperContextMultiError is an error wrapping multiple validation errors returned by UpstreamTlsWrapperContext.ValidateAll() if the designated constraints aren't met.

func (UpstreamTlsWrapperContextMultiError) AllErrors

AllErrors returns a list of validation violation errors.

func (UpstreamTlsWrapperContextMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type UpstreamTlsWrapperContextValidationError

type UpstreamTlsWrapperContextValidationError struct {
	// contains filtered or unexported fields
}

UpstreamTlsWrapperContextValidationError is the validation error returned by UpstreamTlsWrapperContext.Validate if the designated constraints aren't met.

func (UpstreamTlsWrapperContextValidationError) Cause

Cause function returns cause value.

func (UpstreamTlsWrapperContextValidationError) Error

Error satisfies the builtin error interface

func (UpstreamTlsWrapperContextValidationError) ErrorName

ErrorName returns error name.

func (UpstreamTlsWrapperContextValidationError) Field

Field function returns field value.

func (UpstreamTlsWrapperContextValidationError) Key

Key function returns key value.

func (UpstreamTlsWrapperContextValidationError) Reason

Reason function returns reason value.

type WebSocketClient

type WebSocketClient struct {

	// Path to the unix domain socket for the cilium access log, if any.
	AccessLogPath string `protobuf:"bytes,1,opt,name=access_log_path,json=accessLogPath,proto3" json:"access_log_path,omitempty"`
	// Host header value, required.
	Host string `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	// Path value. Defaults to "/".
	Path string `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	// sec-websocket-key value to use, defaults to a random key.
	Key string `protobuf:"bytes,4,opt,name=key,proto3" json:"key,omitempty"`
	// Websocket version, defaults to "13".
	Version string `protobuf:"bytes,5,opt,name=version,proto3" json:"version,omitempty"`
	// Origin header, if any.
	Origin string `protobuf:"bytes,6,opt,name=origin,proto3" json:"origin,omitempty"`
	// Websocket handshake timeout, default is 5 seconds.
	HandshakeTimeout *durationpb.Duration `protobuf:"bytes,7,opt,name=handshake_timeout,json=handshakeTimeout,proto3" json:"handshake_timeout,omitempty"`
	// ping interval, default is 0 (disabled).
	// Connection is assumed dead if response is not received before the next ping is to be sent.
	PingInterval *durationpb.Duration `protobuf:"bytes,8,opt,name=ping_interval,json=pingInterval,proto3" json:"ping_interval,omitempty"`
	// ping only on when idle on both directions.
	// ping_interval must be non-zero when this is true.
	PingWhenIdle bool `protobuf:"varint,9,opt,name=ping_when_idle,json=pingWhenIdle,proto3" json:"ping_when_idle,omitempty"`
	// contains filtered or unexported fields
}

func (*WebSocketClient) Descriptor deprecated

func (*WebSocketClient) Descriptor() ([]byte, []int)

Deprecated: Use WebSocketClient.ProtoReflect.Descriptor instead.

func (*WebSocketClient) GetAccessLogPath

func (x *WebSocketClient) GetAccessLogPath() string

func (*WebSocketClient) GetHandshakeTimeout

func (x *WebSocketClient) GetHandshakeTimeout() *durationpb.Duration

func (*WebSocketClient) GetHost

func (x *WebSocketClient) GetHost() string

func (*WebSocketClient) GetKey

func (x *WebSocketClient) GetKey() string

func (*WebSocketClient) GetOrigin

func (x *WebSocketClient) GetOrigin() string

func (*WebSocketClient) GetPath

func (x *WebSocketClient) GetPath() string

func (*WebSocketClient) GetPingInterval

func (x *WebSocketClient) GetPingInterval() *durationpb.Duration

func (*WebSocketClient) GetPingWhenIdle

func (x *WebSocketClient) GetPingWhenIdle() bool

func (*WebSocketClient) GetVersion

func (x *WebSocketClient) GetVersion() string

func (*WebSocketClient) ProtoMessage

func (*WebSocketClient) ProtoMessage()

func (*WebSocketClient) ProtoReflect

func (x *WebSocketClient) ProtoReflect() protoreflect.Message

func (*WebSocketClient) Reset

func (x *WebSocketClient) Reset()

func (*WebSocketClient) String

func (x *WebSocketClient) String() string

func (*WebSocketClient) Validate

func (m *WebSocketClient) Validate() error

Validate checks the field values on WebSocketClient with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*WebSocketClient) ValidateAll

func (m *WebSocketClient) ValidateAll() error

ValidateAll checks the field values on WebSocketClient with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in WebSocketClientMultiError, or nil if none found.

type WebSocketClientMultiError

type WebSocketClientMultiError []error

WebSocketClientMultiError is an error wrapping multiple validation errors returned by WebSocketClient.ValidateAll() if the designated constraints aren't met.

func (WebSocketClientMultiError) AllErrors

func (m WebSocketClientMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (WebSocketClientMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type WebSocketClientValidationError

type WebSocketClientValidationError struct {
	// contains filtered or unexported fields
}

WebSocketClientValidationError is the validation error returned by WebSocketClient.Validate if the designated constraints aren't met.

func (WebSocketClientValidationError) Cause

Cause function returns cause value.

func (WebSocketClientValidationError) Error

Error satisfies the builtin error interface

func (WebSocketClientValidationError) ErrorName

func (e WebSocketClientValidationError) ErrorName() string

ErrorName returns error name.

func (WebSocketClientValidationError) Field

Field function returns field value.

func (WebSocketClientValidationError) Key

Key function returns key value.

func (WebSocketClientValidationError) Reason

Reason function returns reason value.

type WebSocketServer

type WebSocketServer struct {

	// Path to the unix domain socket for the cilium access log, if any.
	AccessLogPath string `protobuf:"bytes,1,opt,name=access_log_path,json=accessLogPath,proto3" json:"access_log_path,omitempty"`
	// Expected host header value, if any.
	Host string `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	// Expected path value, if any.
	Path string `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	// sec-websocket-key value to expect, if any.
	Key string `protobuf:"bytes,4,opt,name=key,proto3" json:"key,omitempty"`
	// Websocket version, ignored if omitted.
	Version string `protobuf:"bytes,5,opt,name=version,proto3" json:"version,omitempty"`
	// Origin header, if any. Origin header is not allowed if omitted.
	Origin string `protobuf:"bytes,6,opt,name=origin,proto3" json:"origin,omitempty"`
	// Websocket handshake timeout, default is 5 seconds.
	HandshakeTimeout *durationpb.Duration `protobuf:"bytes,7,opt,name=handshake_timeout,json=handshakeTimeout,proto3" json:"handshake_timeout,omitempty"`
	// ping interval, default is 0 (disabled).
	// Connection is assumed dead if response is not received before the next ping is to be sent.
	PingInterval *durationpb.Duration `protobuf:"bytes,8,opt,name=ping_interval,json=pingInterval,proto3" json:"ping_interval,omitempty"`
	// ping only on when idle on both directions.
	// ping_interval must be non-zero when this is true.
	PingWhenIdle bool `protobuf:"varint,9,opt,name=ping_when_idle,json=pingWhenIdle,proto3" json:"ping_when_idle,omitempty"`
	// contains filtered or unexported fields
}

func (*WebSocketServer) Descriptor deprecated

func (*WebSocketServer) Descriptor() ([]byte, []int)

Deprecated: Use WebSocketServer.ProtoReflect.Descriptor instead.

func (*WebSocketServer) GetAccessLogPath

func (x *WebSocketServer) GetAccessLogPath() string

func (*WebSocketServer) GetHandshakeTimeout

func (x *WebSocketServer) GetHandshakeTimeout() *durationpb.Duration

func (*WebSocketServer) GetHost

func (x *WebSocketServer) GetHost() string

func (*WebSocketServer) GetKey

func (x *WebSocketServer) GetKey() string

func (*WebSocketServer) GetOrigin

func (x *WebSocketServer) GetOrigin() string

func (*WebSocketServer) GetPath

func (x *WebSocketServer) GetPath() string

func (*WebSocketServer) GetPingInterval

func (x *WebSocketServer) GetPingInterval() *durationpb.Duration

func (*WebSocketServer) GetPingWhenIdle

func (x *WebSocketServer) GetPingWhenIdle() bool

func (*WebSocketServer) GetVersion

func (x *WebSocketServer) GetVersion() string

func (*WebSocketServer) ProtoMessage

func (*WebSocketServer) ProtoMessage()

func (*WebSocketServer) ProtoReflect

func (x *WebSocketServer) ProtoReflect() protoreflect.Message

func (*WebSocketServer) Reset

func (x *WebSocketServer) Reset()

func (*WebSocketServer) String

func (x *WebSocketServer) String() string

func (*WebSocketServer) Validate

func (m *WebSocketServer) Validate() error

Validate checks the field values on WebSocketServer with the rules defined in the proto definition for this message. If any rules are violated, the first error encountered is returned, or nil if there are no violations.

func (*WebSocketServer) ValidateAll

func (m *WebSocketServer) ValidateAll() error

ValidateAll checks the field values on WebSocketServer with the rules defined in the proto definition for this message. If any rules are violated, the result is a list of violation errors wrapped in WebSocketServerMultiError, or nil if none found.

type WebSocketServerMultiError

type WebSocketServerMultiError []error

WebSocketServerMultiError is an error wrapping multiple validation errors returned by WebSocketServer.ValidateAll() if the designated constraints aren't met.

func (WebSocketServerMultiError) AllErrors

func (m WebSocketServerMultiError) AllErrors() []error

AllErrors returns a list of validation violation errors.

func (WebSocketServerMultiError) Error

Error returns a concatenation of all the error messages it wraps.

type WebSocketServerValidationError

type WebSocketServerValidationError struct {
	// contains filtered or unexported fields
}

WebSocketServerValidationError is the validation error returned by WebSocketServer.Validate if the designated constraints aren't met.

func (WebSocketServerValidationError) Cause

Cause function returns cause value.

func (WebSocketServerValidationError) Error

Error satisfies the builtin error interface

func (WebSocketServerValidationError) ErrorName

func (e WebSocketServerValidationError) ErrorName() string

ErrorName returns error name.

func (WebSocketServerValidationError) Field

Field function returns field value.

func (WebSocketServerValidationError) Key

Key function returns key value.

func (WebSocketServerValidationError) Reason

Reason function returns reason value.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL