authv2beta1

package
v0.6.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 28, 2024 License: MPL-2.0 Imports: 7 Imported by: 4

Documentation

Overview

Code generated by protoc-gen-deepcopy. DO NOT EDIT.

Code generated by protoc-json-shim. DO NOT EDIT.

Code generated by protoc-gen-deepcopy. DO NOT EDIT.

Code generated by protoc-json-shim. DO NOT EDIT.

Code generated by protoc-gen-deepcopy. DO NOT EDIT.

Code generated by protoc-json-shim. DO NOT EDIT.

Index

Constants

View Source 
const (
	GroupName = "auth"
	Version   = "v2beta1"

	ComputedTrafficPermissionsKind  = "ComputedTrafficPermissions"
	NamespaceTrafficPermissionsKind = "NamespaceTrafficPermissions"
	PartitionTrafficPermissionsKind = "PartitionTrafficPermissions"
	TrafficPermissionsKind          = "TrafficPermissions"
	WorkloadIdentityKind            = "WorkloadIdentity"
)

Variables

View Source 
var (
	ComputedTrafficPermissionsMarshaler   = &protojson.MarshalOptions{}
	ComputedTrafficPermissionsUnmarshaler = &protojson.UnmarshalOptions{DiscardUnknown: false}
)
View Source 
var (
	ComputedTrafficPermissionsType = &pbresource.Type{
		Group:        GroupName,
		GroupVersion: Version,
		Kind:         ComputedTrafficPermissionsKind,
	}

	NamespaceTrafficPermissionsType = &pbresource.Type{
		Group:        GroupName,
		GroupVersion: Version,
		Kind:         NamespaceTrafficPermissionsKind,
	}

	PartitionTrafficPermissionsType = &pbresource.Type{
		Group:        GroupName,
		GroupVersion: Version,
		Kind:         PartitionTrafficPermissionsKind,
	}

	TrafficPermissionsType = &pbresource.Type{
		Group:        GroupName,
		GroupVersion: Version,
		Kind:         TrafficPermissionsKind,
	}

	WorkloadIdentityType = &pbresource.Type{
		Group:        GroupName,
		GroupVersion: Version,
		Kind:         WorkloadIdentityKind,
	}
)
View Source 
var (
	Action_name = map[int32]string{
		0: "ACTION_UNSPECIFIED",
		1: "ACTION_DENY",
		2: "ACTION_ALLOW",
	}
	Action_value = map[string]int32{
		"ACTION_UNSPECIFIED": 0,
		"ACTION_DENY":        1,
		"ACTION_ALLOW":       2,
	}
)

Enum value maps for Action.

View Source 
var (
	TrafficPermissionsMarshaler   = &protojson.MarshalOptions{}
	TrafficPermissionsUnmarshaler = &protojson.UnmarshalOptions{DiscardUnknown: false}
)
View Source 
var (
	WorkloadIdentityMarshaler   = &protojson.MarshalOptions{}
	WorkloadIdentityUnmarshaler = &protojson.UnmarshalOptions{DiscardUnknown: false}
)
View Source 
var File_pbauth_v2beta1_computed_traffic_permissions_proto protoreflect.FileDescriptor
View Source 
var File_pbauth_v2beta1_traffic_permissions_proto protoreflect.FileDescriptor
View Source 
var File_pbauth_v2beta1_workload_identity_proto protoreflect.FileDescriptor

Functions

func SourceToTenancy 

func SourceToTenancy(s SourceToSpiffe) *pbresource.Tenancy

TODO(peering/v2) handle peer tenancies which probably requires outputting a second object

Types

type Action 

type Action int32

+kubebuilder:validation:Enum=ACTION_ALLOW;ACTION_DENY;ACTION_UNKNOWN +kubebuilder:validation:Type=string 

const (
	Action_ACTION_UNSPECIFIED Action = 0
	Action_ACTION_DENY        Action = 1
	Action_ACTION_ALLOW       Action = 2
)

func (Action) Descriptor 

func (Action) Descriptor() protoreflect.EnumDescriptor

func (Action) Enum 

func (x Action) Enum() *Action

func (Action) EnumDescriptor deprecated 

func (Action) EnumDescriptor() ([]byte, []int)

Deprecated: Use Action.Descriptor instead.

func (Action) Number 

func (x Action) Number() protoreflect.EnumNumber

func (Action) String 

func (x Action) String() string

func (Action) Type 

func (Action) Type() protoreflect.EnumType

type ComputedTrafficPermissions 

type ComputedTrafficPermissions struct {
	AllowPermissions []*Permission `protobuf:"bytes,1,rep,name=allow_permissions,json=allowPermissions,proto3" json:"allow_permissions,omitempty"`
	DenyPermissions  []*Permission `protobuf:"bytes,2,rep,name=deny_permissions,json=denyPermissions,proto3" json:"deny_permissions,omitempty"`
	IsDefault        bool          `protobuf:"varint,3,opt,name=is_default,json=isDefault,proto3" json:"is_default,omitempty"`
	// BoundReferences is a slice of mixed type references of resources that were
	// involved in the formulation of this resource.
	BoundReferences []*pbresource.Reference `protobuf:"bytes,4,rep,name=bound_references,json=boundReferences,proto3" json:"bound_references,omitempty"`
	// contains filtered or unexported fields
}

func (*ComputedTrafficPermissions) DeepCopy 

func (in *ComputedTrafficPermissions) DeepCopy() *ComputedTrafficPermissions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComputedTrafficPermissions. Required by controller-gen.

func (*ComputedTrafficPermissions) DeepCopyInterface 

func (in *ComputedTrafficPermissions) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new ComputedTrafficPermissions. Required by controller-gen.

func (*ComputedTrafficPermissions) DeepCopyInto 

func (in *ComputedTrafficPermissions) DeepCopyInto(out *ComputedTrafficPermissions)

DeepCopyInto supports using ComputedTrafficPermissions within kubernetes types, where deepcopy-gen is used.

func (*ComputedTrafficPermissions) Descriptor deprecated 

func (*ComputedTrafficPermissions) Descriptor() ([]byte, []int)

Deprecated: Use ComputedTrafficPermissions.ProtoReflect.Descriptor instead.

func (*ComputedTrafficPermissions) GetAllowPermissions 

func (x *ComputedTrafficPermissions) GetAllowPermissions() []*Permission

func (*ComputedTrafficPermissions) GetBoundReferences added in v0.6.0 

func (x *ComputedTrafficPermissions) GetBoundReferences() []*pbresource.Reference

func (*ComputedTrafficPermissions) GetDenyPermissions 

func (x *ComputedTrafficPermissions) GetDenyPermissions() []*Permission

func (*ComputedTrafficPermissions) GetIsDefault 

func (x *ComputedTrafficPermissions) GetIsDefault() bool

func (*ComputedTrafficPermissions) MarshalBinary 

func (msg *ComputedTrafficPermissions) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*ComputedTrafficPermissions) MarshalJSON 

func (this *ComputedTrafficPermissions) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for ComputedTrafficPermissions

func (*ComputedTrafficPermissions) ProtoMessage 

func (*ComputedTrafficPermissions) ProtoMessage()

func (*ComputedTrafficPermissions) ProtoReflect 

func (x *ComputedTrafficPermissions) ProtoReflect() protoreflect.Message

func (*ComputedTrafficPermissions) Reset 

func (x *ComputedTrafficPermissions) Reset()

func (*ComputedTrafficPermissions) String 

func (x *ComputedTrafficPermissions) String() string

func (*ComputedTrafficPermissions) UnmarshalBinary 

func (msg *ComputedTrafficPermissions) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*ComputedTrafficPermissions) UnmarshalJSON 

func (this *ComputedTrafficPermissions) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for ComputedTrafficPermissions

type Destination 

type Destination struct {
	IdentityName string `protobuf:"bytes,1,opt,name=identity_name,json=identityName,proto3" json:"identity_name,omitempty"`
	// contains filtered or unexported fields
}

Destination contains the name or name-prefix of the WorkloadIdentity. The WorkloadIdentity resource must be in the same tenancy as the TrafficPermissions resource.

func (*Destination) DeepCopy 

func (in *Destination) DeepCopy() *Destination

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Destination. Required by controller-gen.

func (*Destination) DeepCopyInterface 

func (in *Destination) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new Destination. Required by controller-gen.

func (*Destination) DeepCopyInto 

func (in *Destination) DeepCopyInto(out *Destination)

DeepCopyInto supports using Destination within kubernetes types, where deepcopy-gen is used.

func (*Destination) Descriptor deprecated 

func (*Destination) Descriptor() ([]byte, []int)

Deprecated: Use Destination.ProtoReflect.Descriptor instead.

func (*Destination) GetIdentityName 

func (x *Destination) GetIdentityName() string

func (*Destination) MarshalBinary 

func (msg *Destination) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*Destination) MarshalJSON 

func (this *Destination) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for Destination

func (*Destination) ProtoMessage 

func (*Destination) ProtoMessage()

func (*Destination) ProtoReflect 

func (x *Destination) ProtoReflect() protoreflect.Message

func (*Destination) Reset 

func (x *Destination) Reset()

func (*Destination) String 

func (x *Destination) String() string

func (*Destination) UnmarshalBinary 

func (msg *Destination) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*Destination) UnmarshalJSON 

func (this *Destination) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for Destination

type DestinationRule 

type DestinationRule struct {
	PathExact  string `protobuf:"bytes,1,opt,name=path_exact,json=pathExact,proto3" json:"path_exact,omitempty"`
	PathPrefix string `protobuf:"bytes,2,opt,name=path_prefix,json=pathPrefix,proto3" json:"path_prefix,omitempty"`
	PathRegex  string `protobuf:"bytes,3,opt,name=path_regex,json=pathRegex,proto3" json:"path_regex,omitempty"`
	// Methods is the list of HTTP methods. If no methods are specified,
	// this rule will apply to all methods.
	Methods   []string                 `protobuf:"bytes,4,rep,name=methods,proto3" json:"methods,omitempty"`
	Headers   []*DestinationRuleHeader `protobuf:"bytes,5,rep,name=headers,proto3" json:"headers,omitempty"`
	PortNames []string                 `protobuf:"bytes,6,rep,name=port_names,json=portNames,proto3" json:"port_names,omitempty"`
	// Exclude contains a list of rules to exclude when evaluating rules for the incoming connection.
	Exclude []*ExcludePermissionRule `protobuf:"bytes,7,rep,name=exclude,proto3" json:"exclude,omitempty"`
	// contains filtered or unexported fields
}

DestinationRule contains rules rules to apply to the incoming connection.

func (*DestinationRule) DeepCopy 

func (in *DestinationRule) DeepCopy() *DestinationRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DestinationRule. Required by controller-gen.

func (*DestinationRule) DeepCopyInterface 

func (in *DestinationRule) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new DestinationRule. Required by controller-gen.

func (*DestinationRule) DeepCopyInto 

func (in *DestinationRule) DeepCopyInto(out *DestinationRule)

DeepCopyInto supports using DestinationRule within kubernetes types, where deepcopy-gen is used.

func (*DestinationRule) Descriptor deprecated 

func (*DestinationRule) Descriptor() ([]byte, []int)

Deprecated: Use DestinationRule.ProtoReflect.Descriptor instead.

func (*DestinationRule) GetExclude 

func (x *DestinationRule) GetExclude() []*ExcludePermissionRule

func (*DestinationRule) GetHeaders added in v0.6.0 

func (x *DestinationRule) GetHeaders() []*DestinationRuleHeader

func (*DestinationRule) GetMethods 

func (x *DestinationRule) GetMethods() []string

func (*DestinationRule) GetPathExact 

func (x *DestinationRule) GetPathExact() string

func (*DestinationRule) GetPathPrefix 

func (x *DestinationRule) GetPathPrefix() string

func (*DestinationRule) GetPathRegex 

func (x *DestinationRule) GetPathRegex() string

func (*DestinationRule) GetPortNames 

func (x *DestinationRule) GetPortNames() []string

func (*DestinationRule) IsEmpty added in v0.6.0 

func (d *DestinationRule) IsEmpty() bool

IsEmpty returns true if a destination rule has no fields defined.

func (*DestinationRule) MarshalBinary 

func (msg *DestinationRule) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*DestinationRule) MarshalJSON 

func (this *DestinationRule) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for DestinationRule

func (*DestinationRule) PortsOnly added in v0.6.0 

func (d *DestinationRule) PortsOnly() bool

PortsOnly returns true if a destination rule only specifies port criteria

func (*DestinationRule) ProtoMessage 

func (*DestinationRule) ProtoMessage()

func (*DestinationRule) ProtoReflect 

func (x *DestinationRule) ProtoReflect() protoreflect.Message

func (*DestinationRule) Reset 

func (x *DestinationRule) Reset()

func (*DestinationRule) String 

func (x *DestinationRule) String() string

func (*DestinationRule) UnmarshalBinary 

func (msg *DestinationRule) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*DestinationRule) UnmarshalJSON 

func (this *DestinationRule) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for DestinationRule

type DestinationRuleHeader 

type DestinationRuleHeader struct {
	Name    string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Present bool   `protobuf:"varint,2,opt,name=present,proto3" json:"present,omitempty"`
	Exact   string `protobuf:"bytes,3,opt,name=exact,proto3" json:"exact,omitempty"`
	Prefix  string `protobuf:"bytes,4,opt,name=prefix,proto3" json:"prefix,omitempty"`
	Suffix  string `protobuf:"bytes,5,opt,name=suffix,proto3" json:"suffix,omitempty"`
	Regex   string `protobuf:"bytes,6,opt,name=regex,proto3" json:"regex,omitempty"`
	Invert  bool   `protobuf:"varint,7,opt,name=invert,proto3" json:"invert,omitempty"`
	// contains filtered or unexported fields
}

func (*DestinationRuleHeader) DeepCopy 

func (in *DestinationRuleHeader) DeepCopy() *DestinationRuleHeader

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DestinationRuleHeader. Required by controller-gen.

func (*DestinationRuleHeader) DeepCopyInterface 

func (in *DestinationRuleHeader) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new DestinationRuleHeader. Required by controller-gen.

func (*DestinationRuleHeader) DeepCopyInto 

func (in *DestinationRuleHeader) DeepCopyInto(out *DestinationRuleHeader)

DeepCopyInto supports using DestinationRuleHeader within kubernetes types, where deepcopy-gen is used.

func (*DestinationRuleHeader) Descriptor deprecated 

func (*DestinationRuleHeader) Descriptor() ([]byte, []int)

Deprecated: Use DestinationRuleHeader.ProtoReflect.Descriptor instead.

func (*DestinationRuleHeader) GetExact 

func (x *DestinationRuleHeader) GetExact() string

func (*DestinationRuleHeader) GetInvert 

func (x *DestinationRuleHeader) GetInvert() bool

func (*DestinationRuleHeader) GetName 

func (x *DestinationRuleHeader) GetName() string

func (*DestinationRuleHeader) GetPrefix 

func (x *DestinationRuleHeader) GetPrefix() string

func (*DestinationRuleHeader) GetPresent 

func (x *DestinationRuleHeader) GetPresent() bool

func (*DestinationRuleHeader) GetRegex 

func (x *DestinationRuleHeader) GetRegex() string

func (*DestinationRuleHeader) GetSuffix 

func (x *DestinationRuleHeader) GetSuffix() string

func (*DestinationRuleHeader) MarshalBinary 

func (msg *DestinationRuleHeader) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*DestinationRuleHeader) MarshalJSON 

func (this *DestinationRuleHeader) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for DestinationRuleHeader

func (*DestinationRuleHeader) ProtoMessage 

func (*DestinationRuleHeader) ProtoMessage()

func (*DestinationRuleHeader) ProtoReflect 

func (x *DestinationRuleHeader) ProtoReflect() protoreflect.Message

func (*DestinationRuleHeader) Reset 

func (x *DestinationRuleHeader) Reset()

func (*DestinationRuleHeader) String 

func (x *DestinationRuleHeader) String() string

func (*DestinationRuleHeader) UnmarshalBinary 

func (msg *DestinationRuleHeader) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*DestinationRuleHeader) UnmarshalJSON 

func (this *DestinationRuleHeader) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for DestinationRuleHeader

type ExcludePermissionRule 

type ExcludePermissionRule struct {
	PathExact  string `protobuf:"bytes,1,opt,name=path_exact,json=pathExact,proto3" json:"path_exact,omitempty"`
	PathPrefix string `protobuf:"bytes,2,opt,name=path_prefix,json=pathPrefix,proto3" json:"path_prefix,omitempty"`
	PathRegex  string `protobuf:"bytes,3,opt,name=path_regex,json=pathRegex,proto3" json:"path_regex,omitempty"`
	// Methods is the list of HTTP methods.
	Methods []string                 `protobuf:"bytes,4,rep,name=methods,proto3" json:"methods,omitempty"`
	Headers []*DestinationRuleHeader `protobuf:"bytes,5,rep,name=headers,proto3" json:"headers,omitempty"`
	// PortNames is a list of workload ports to apply this rule to. The ports specified here
	// must be the ports used in the connection.
	PortNames []string `protobuf:"bytes,6,rep,name=port_names,json=portNames,proto3" json:"port_names,omitempty"`
	// contains filtered or unexported fields
}

func (*ExcludePermissionRule) DeepCopy 

func (in *ExcludePermissionRule) DeepCopy() *ExcludePermissionRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExcludePermissionRule. Required by controller-gen.

func (*ExcludePermissionRule) DeepCopyInterface 

func (in *ExcludePermissionRule) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new ExcludePermissionRule. Required by controller-gen.

func (*ExcludePermissionRule) DeepCopyInto 

func (in *ExcludePermissionRule) DeepCopyInto(out *ExcludePermissionRule)

DeepCopyInto supports using ExcludePermissionRule within kubernetes types, where deepcopy-gen is used.

func (*ExcludePermissionRule) Descriptor deprecated 

func (*ExcludePermissionRule) Descriptor() ([]byte, []int)

Deprecated: Use ExcludePermissionRule.ProtoReflect.Descriptor instead.

func (*ExcludePermissionRule) GetHeaders added in v0.6.0 

func (x *ExcludePermissionRule) GetHeaders() []*DestinationRuleHeader

func (*ExcludePermissionRule) GetMethods 

func (x *ExcludePermissionRule) GetMethods() []string

func (*ExcludePermissionRule) GetPathExact 

func (x *ExcludePermissionRule) GetPathExact() string

func (*ExcludePermissionRule) GetPathPrefix 

func (x *ExcludePermissionRule) GetPathPrefix() string

func (*ExcludePermissionRule) GetPathRegex 

func (x *ExcludePermissionRule) GetPathRegex() string

func (*ExcludePermissionRule) GetPortNames 

func (x *ExcludePermissionRule) GetPortNames() []string

func (*ExcludePermissionRule) IsEmpty added in v0.6.0 

func (e *ExcludePermissionRule) IsEmpty() bool

IsEmpty returns true if an exclude permission has no fields defined.

func (*ExcludePermissionRule) MarshalBinary 

func (msg *ExcludePermissionRule) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*ExcludePermissionRule) MarshalJSON 

func (this *ExcludePermissionRule) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for ExcludePermissionRule

func (*ExcludePermissionRule) PortsOnly added in v0.6.0 

func (e *ExcludePermissionRule) PortsOnly() bool

PortsOnly returns true if an exclude rule only specifies port criteria

func (*ExcludePermissionRule) ProtoMessage 

func (*ExcludePermissionRule) ProtoMessage()

func (*ExcludePermissionRule) ProtoReflect 

func (x *ExcludePermissionRule) ProtoReflect() protoreflect.Message

func (*ExcludePermissionRule) Reset 

func (x *ExcludePermissionRule) Reset()

func (*ExcludePermissionRule) String 

func (x *ExcludePermissionRule) String() string

func (*ExcludePermissionRule) UnmarshalBinary 

func (msg *ExcludePermissionRule) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*ExcludePermissionRule) UnmarshalJSON 

func (this *ExcludePermissionRule) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for ExcludePermissionRule

type ExcludeSource 

type ExcludeSource struct {
	IdentityName  string `protobuf:"bytes,1,opt,name=identity_name,json=identityName,proto3" json:"identity_name,omitempty"`
	Namespace     string `protobuf:"bytes,2,opt,name=namespace,proto3" json:"namespace,omitempty"`
	Partition     string `protobuf:"bytes,3,opt,name=partition,proto3" json:"partition,omitempty"`
	Peer          string `protobuf:"bytes,4,opt,name=peer,proto3" json:"peer,omitempty"`
	SamenessGroup string `protobuf:"bytes,5,opt,name=sameness_group,json=samenessGroup,proto3" json:"sameness_group,omitempty"`
	// contains filtered or unexported fields
}

ExcludeSource is almost the same as source but it prevents the addition of matching sources.

func (*ExcludeSource) DeepCopy 

func (in *ExcludeSource) DeepCopy() *ExcludeSource

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExcludeSource. Required by controller-gen.

func (*ExcludeSource) DeepCopyInterface 

func (in *ExcludeSource) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new ExcludeSource. Required by controller-gen.

func (*ExcludeSource) DeepCopyInto 

func (in *ExcludeSource) DeepCopyInto(out *ExcludeSource)

DeepCopyInto supports using ExcludeSource within kubernetes types, where deepcopy-gen is used.

func (*ExcludeSource) Descriptor deprecated 

func (*ExcludeSource) Descriptor() ([]byte, []int)

Deprecated: Use ExcludeSource.ProtoReflect.Descriptor instead.

func (*ExcludeSource) GetIdentityName 

func (x *ExcludeSource) GetIdentityName() string

func (*ExcludeSource) GetNamespace 

func (x *ExcludeSource) GetNamespace() string

func (*ExcludeSource) GetPartition 

func (x *ExcludeSource) GetPartition() string

func (*ExcludeSource) GetPeer 

func (x *ExcludeSource) GetPeer() string

func (*ExcludeSource) GetSamenessGroup 

func (x *ExcludeSource) GetSamenessGroup() string

func (*ExcludeSource) MarshalBinary 

func (msg *ExcludeSource) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*ExcludeSource) MarshalJSON 

func (this *ExcludeSource) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for ExcludeSource

func (*ExcludeSource) ProtoMessage 

func (*ExcludeSource) ProtoMessage()

func (*ExcludeSource) ProtoReflect 

func (x *ExcludeSource) ProtoReflect() protoreflect.Message

func (*ExcludeSource) Reset 

func (x *ExcludeSource) Reset()

func (*ExcludeSource) String 

func (x *ExcludeSource) String() string

func (*ExcludeSource) UnmarshalBinary 

func (msg *ExcludeSource) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*ExcludeSource) UnmarshalJSON 

func (this *ExcludeSource) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for ExcludeSource

type NamespaceTrafficPermissions 

type NamespaceTrafficPermissions struct {
	Action      Action        `protobuf:"varint,1,opt,name=action,proto3,enum=hashicorp.consul.auth.v2beta1.Action" json:"action,omitempty"`
	Permissions []*Permission `protobuf:"bytes,2,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

func (*NamespaceTrafficPermissions) DeepCopy 

func (in *NamespaceTrafficPermissions) DeepCopy() *NamespaceTrafficPermissions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamespaceTrafficPermissions. Required by controller-gen.

func (*NamespaceTrafficPermissions) DeepCopyInterface 

func (in *NamespaceTrafficPermissions) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new NamespaceTrafficPermissions. Required by controller-gen.

func (*NamespaceTrafficPermissions) DeepCopyInto 

func (in *NamespaceTrafficPermissions) DeepCopyInto(out *NamespaceTrafficPermissions)

DeepCopyInto supports using NamespaceTrafficPermissions within kubernetes types, where deepcopy-gen is used.

func (*NamespaceTrafficPermissions) Descriptor deprecated 

func (*NamespaceTrafficPermissions) Descriptor() ([]byte, []int)

Deprecated: Use NamespaceTrafficPermissions.ProtoReflect.Descriptor instead.

func (*NamespaceTrafficPermissions) GetAction 

func (x *NamespaceTrafficPermissions) GetAction() Action

func (*NamespaceTrafficPermissions) GetPermissions 

func (x *NamespaceTrafficPermissions) GetPermissions() []*Permission

func (*NamespaceTrafficPermissions) MarshalBinary 

func (msg *NamespaceTrafficPermissions) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*NamespaceTrafficPermissions) MarshalJSON 

func (this *NamespaceTrafficPermissions) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for NamespaceTrafficPermissions

func (*NamespaceTrafficPermissions) ProtoMessage 

func (*NamespaceTrafficPermissions) ProtoMessage()

func (*NamespaceTrafficPermissions) ProtoReflect 

func (x *NamespaceTrafficPermissions) ProtoReflect() protoreflect.Message

func (*NamespaceTrafficPermissions) Reset 

func (x *NamespaceTrafficPermissions) Reset()

func (*NamespaceTrafficPermissions) String 

func (x *NamespaceTrafficPermissions) String() string

func (*NamespaceTrafficPermissions) UnmarshalBinary 

func (msg *NamespaceTrafficPermissions) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*NamespaceTrafficPermissions) UnmarshalJSON 

func (this *NamespaceTrafficPermissions) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for NamespaceTrafficPermissions

type PartitionTrafficPermissions 

type PartitionTrafficPermissions struct {
	Action      Action        `protobuf:"varint,1,opt,name=action,proto3,enum=hashicorp.consul.auth.v2beta1.Action" json:"action,omitempty"`
	Permissions []*Permission `protobuf:"bytes,2,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

func (*PartitionTrafficPermissions) DeepCopy 

func (in *PartitionTrafficPermissions) DeepCopy() *PartitionTrafficPermissions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PartitionTrafficPermissions. Required by controller-gen.

func (*PartitionTrafficPermissions) DeepCopyInterface 

func (in *PartitionTrafficPermissions) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new PartitionTrafficPermissions. Required by controller-gen.

func (*PartitionTrafficPermissions) DeepCopyInto 

func (in *PartitionTrafficPermissions) DeepCopyInto(out *PartitionTrafficPermissions)

DeepCopyInto supports using PartitionTrafficPermissions within kubernetes types, where deepcopy-gen is used.

func (*PartitionTrafficPermissions) Descriptor deprecated 

func (*PartitionTrafficPermissions) Descriptor() ([]byte, []int)

Deprecated: Use PartitionTrafficPermissions.ProtoReflect.Descriptor instead.

func (*PartitionTrafficPermissions) GetAction 

func (x *PartitionTrafficPermissions) GetAction() Action

func (*PartitionTrafficPermissions) GetPermissions 

func (x *PartitionTrafficPermissions) GetPermissions() []*Permission

func (*PartitionTrafficPermissions) MarshalBinary 

func (msg *PartitionTrafficPermissions) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*PartitionTrafficPermissions) MarshalJSON 

func (this *PartitionTrafficPermissions) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for PartitionTrafficPermissions

func (*PartitionTrafficPermissions) ProtoMessage 

func (*PartitionTrafficPermissions) ProtoMessage()

func (*PartitionTrafficPermissions) ProtoReflect 

func (x *PartitionTrafficPermissions) ProtoReflect() protoreflect.Message

func (*PartitionTrafficPermissions) Reset 

func (x *PartitionTrafficPermissions) Reset()

func (*PartitionTrafficPermissions) String 

func (x *PartitionTrafficPermissions) String() string

func (*PartitionTrafficPermissions) UnmarshalBinary 

func (msg *PartitionTrafficPermissions) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*PartitionTrafficPermissions) UnmarshalJSON 

func (this *PartitionTrafficPermissions) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for PartitionTrafficPermissions

type Permission 

type Permission struct {

	// Sources is a list of sources in this traffic permission.
	Sources []*Source `protobuf:"bytes,1,rep,name=sources,proto3" json:"sources,omitempty"`
	// DestinationRules is a list of rules to apply for matching sources in this Permission.
	// These rules are specific to the request or connection that is going to the destination(s)
	// selected by the TrafficPermissions resource.
	DestinationRules []*DestinationRule `protobuf:"bytes,2,rep,name=destination_rules,json=destinationRules,proto3" json:"destination_rules,omitempty"`
	// contains filtered or unexported fields
}

Permissions is a list of permissions to match on.

func (*Permission) DeepCopy 

func (in *Permission) DeepCopy() *Permission

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Permission. Required by controller-gen.

func (*Permission) DeepCopyInterface 

func (in *Permission) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new Permission. Required by controller-gen.

func (*Permission) DeepCopyInto 

func (in *Permission) DeepCopyInto(out *Permission)

DeepCopyInto supports using Permission within kubernetes types, where deepcopy-gen is used.

func (*Permission) Descriptor deprecated 

func (*Permission) Descriptor() ([]byte, []int)

Deprecated: Use Permission.ProtoReflect.Descriptor instead.

func (*Permission) GetDestinationRules 

func (x *Permission) GetDestinationRules() []*DestinationRule

func (*Permission) GetSources 

func (x *Permission) GetSources() []*Source

func (*Permission) MarshalBinary 

func (msg *Permission) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*Permission) MarshalJSON 

func (this *Permission) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for Permission

func (*Permission) ProtoMessage 

func (*Permission) ProtoMessage()

func (*Permission) ProtoReflect 

func (x *Permission) ProtoReflect() protoreflect.Message

func (*Permission) Reset 

func (x *Permission) Reset()

func (*Permission) String 

func (x *Permission) String() string

func (*Permission) UnmarshalBinary 

func (msg *Permission) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*Permission) UnmarshalJSON 

func (this *Permission) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for Permission

type Source 

type Source struct {
	IdentityName  string `protobuf:"bytes,1,opt,name=identity_name,json=identityName,proto3" json:"identity_name,omitempty"`
	Namespace     string `protobuf:"bytes,2,opt,name=namespace,proto3" json:"namespace,omitempty"`
	Partition     string `protobuf:"bytes,3,opt,name=partition,proto3" json:"partition,omitempty"`
	Peer          string `protobuf:"bytes,4,opt,name=peer,proto3" json:"peer,omitempty"`
	SamenessGroup string `protobuf:"bytes,5,opt,name=sameness_group,json=samenessGroup,proto3" json:"sameness_group,omitempty"`
	// Exclude is a list of sources to exclude from this source.
	Exclude []*ExcludeSource `protobuf:"bytes,6,rep,name=exclude,proto3" json:"exclude,omitempty"`
	// contains filtered or unexported fields
}

Source represents the source identity. To specify any of the wildcard sources, the specific fields need to be omitted. For example, for a wildcard namespace, identity_name should be omitted.

func (*Source) DeepCopy 

func (in *Source) DeepCopy() *Source

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Source. Required by controller-gen.

func (*Source) DeepCopyInterface 

func (in *Source) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new Source. Required by controller-gen.

func (*Source) DeepCopyInto 

func (in *Source) DeepCopyInto(out *Source)

DeepCopyInto supports using Source within kubernetes types, where deepcopy-gen is used.

func (*Source) Descriptor deprecated 

func (*Source) Descriptor() ([]byte, []int)

Deprecated: Use Source.ProtoReflect.Descriptor instead.

func (*Source) GetExclude 

func (x *Source) GetExclude() []*ExcludeSource

func (*Source) GetIdentityName 

func (x *Source) GetIdentityName() string

func (*Source) GetNamespace 

func (x *Source) GetNamespace() string

func (*Source) GetPartition 

func (x *Source) GetPartition() string

func (*Source) GetPeer 

func (x *Source) GetPeer() string

func (*Source) GetSamenessGroup 

func (x *Source) GetSamenessGroup() string

func (*Source) MarshalBinary 

func (msg *Source) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*Source) MarshalJSON 

func (this *Source) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for Source

func (*Source) ProtoMessage 

func (*Source) ProtoMessage()

func (*Source) ProtoReflect 

func (x *Source) ProtoReflect() protoreflect.Message

func (*Source) Reset 

func (x *Source) Reset()

func (*Source) String 

func (x *Source) String() string

func (*Source) UnmarshalBinary 

func (msg *Source) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*Source) UnmarshalJSON 

func (this *Source) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for Source

type SourceToSpiffe 

type SourceToSpiffe interface {
	GetIdentityName() string
	GetPartition() string
	GetNamespace() string
	GetPeer() string
	GetSamenessGroup() string
}

type TrafficPermissions 

type TrafficPermissions struct {

	// Destination is a configuration of the destination proxies
	// where these traffic permissions should apply.
	Destination *Destination `protobuf:"bytes,1,opt,name=destination,proto3" json:"destination,omitempty"`
	// Action can be either allow or deny for the entire object. It will default to allow.
	//
	// If action is allow, we will allow the connection if one of the rules in Rules matches, in other words, we will deny
	// all requests except for the ones that match Rules. If Consul is in default allow mode, then allow
	// actions have no effect without a deny permission as everything is allowed by default.
	//
	// If action is deny, we will deny the connection if one of the rules in Rules match, in other words,
	// we will allow all requests except for the ones that match Rules. If Consul is default deny mode,
	// then deny permissions have no effect without an allow permission as everything is denied by default.
	//
	// Action unspecified is reserved for compatibility with the addition of future actions.
	Action Action `protobuf:"varint,2,opt,name=action,proto3,enum=hashicorp.consul.auth.v2beta1.Action" json:"action,omitempty"`
	// Permissions is a list of permissions to match on. They are applied using OR semantics.
	Permissions []*Permission `protobuf:"bytes,3,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

func (*TrafficPermissions) DeepCopy 

func (in *TrafficPermissions) DeepCopy() *TrafficPermissions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TrafficPermissions. Required by controller-gen.

func (*TrafficPermissions) DeepCopyInterface 

func (in *TrafficPermissions) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new TrafficPermissions. Required by controller-gen.

func (*TrafficPermissions) DeepCopyInto 

func (in *TrafficPermissions) DeepCopyInto(out *TrafficPermissions)

DeepCopyInto supports using TrafficPermissions within kubernetes types, where deepcopy-gen is used.

func (*TrafficPermissions) Descriptor deprecated 

func (*TrafficPermissions) Descriptor() ([]byte, []int)

Deprecated: Use TrafficPermissions.ProtoReflect.Descriptor instead.

func (*TrafficPermissions) GetAction 

func (x *TrafficPermissions) GetAction() Action

func (*TrafficPermissions) GetDestination 

func (x *TrafficPermissions) GetDestination() *Destination

func (*TrafficPermissions) GetPermissions 

func (x *TrafficPermissions) GetPermissions() []*Permission

func (*TrafficPermissions) MarshalBinary 

func (msg *TrafficPermissions) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*TrafficPermissions) MarshalJSON 

func (this *TrafficPermissions) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for TrafficPermissions

func (*TrafficPermissions) ProtoMessage 

func (*TrafficPermissions) ProtoMessage()

func (*TrafficPermissions) ProtoReflect 

func (x *TrafficPermissions) ProtoReflect() protoreflect.Message

func (*TrafficPermissions) Reset 

func (x *TrafficPermissions) Reset()

func (*TrafficPermissions) String 

func (x *TrafficPermissions) String() string

func (*TrafficPermissions) UnmarshalBinary 

func (msg *TrafficPermissions) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*TrafficPermissions) UnmarshalJSON 

func (this *TrafficPermissions) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for TrafficPermissions

type WorkloadIdentity 

type WorkloadIdentity struct {
	// contains filtered or unexported fields
}

func (*WorkloadIdentity) DeepCopy 

func (in *WorkloadIdentity) DeepCopy() *WorkloadIdentity

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WorkloadIdentity. Required by controller-gen.

func (*WorkloadIdentity) DeepCopyInterface 

func (in *WorkloadIdentity) DeepCopyInterface() interface{}

DeepCopyInterface is an autogenerated deepcopy function, copying the receiver, creating a new WorkloadIdentity. Required by controller-gen.

func (*WorkloadIdentity) DeepCopyInto 

func (in *WorkloadIdentity) DeepCopyInto(out *WorkloadIdentity)

DeepCopyInto supports using WorkloadIdentity within kubernetes types, where deepcopy-gen is used.

func (*WorkloadIdentity) Descriptor deprecated 

func (*WorkloadIdentity) Descriptor() ([]byte, []int)

Deprecated: Use WorkloadIdentity.ProtoReflect.Descriptor instead.

func (*WorkloadIdentity) MarshalBinary 

func (msg *WorkloadIdentity) MarshalBinary() ([]byte, error)

MarshalBinary implements encoding.BinaryMarshaler

func (*WorkloadIdentity) MarshalJSON 

func (this *WorkloadIdentity) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for WorkloadIdentity

func (*WorkloadIdentity) ProtoMessage 

func (*WorkloadIdentity) ProtoMessage()

func (*WorkloadIdentity) ProtoReflect 

func (x *WorkloadIdentity) ProtoReflect() protoreflect.Message

func (*WorkloadIdentity) Reset 

func (x *WorkloadIdentity) Reset()

func (*WorkloadIdentity) String 

func (x *WorkloadIdentity) String() string

func (*WorkloadIdentity) UnmarshalBinary 

func (msg *WorkloadIdentity) UnmarshalBinary(b []byte) error

UnmarshalBinary implements encoding.BinaryUnmarshaler

func (*WorkloadIdentity) UnmarshalJSON 

func (this *WorkloadIdentity) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for WorkloadIdentity

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.