auth

package
v1.13.15 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 25, 2022 License: MIT Imports: 26 Imported by: 0

Documentation

Index

Constants

View Source
const (
	ResourceApiVersion  = envoy_config_core_v3.ApiVersion_V3
	TransportApiVersion = envoy_config_core_v3.ApiVersion_V3
)

Variables

View Source
var (
	ErrorAuthIsNil                = fmt.Errorf("auth.ParseAuthOptions: `auth` is nil")
	ErrorMutuallyExclusiveOptions = fmt.Errorf("auth.ParseAuthOptions: `auth.auth-upstream` and `auth.oauth2` are enabled but are mutually exclusive")
)

Functions

func GenerateHMAC

func GenerateHMAC() (string, error)

func NewFilterHTTPExternalAuthorization

func NewFilterHTTPExternalAuthorization(upstreamHostname string, upstreamPort uint32, clusterName string, pathPrefix string, authHeaders []*envoy_config_core_v3.HeaderValue) (*anypb.Any, error)

func NewFilterHTTPOAuth2

func NewFilterHTTPOAuth2(oauth2Options *options.OAuth2, args *parseAuthOptionsArguments) (*anypb.Any, error)

func NewParseAuthOptionsArguments

func NewParseAuthOptionsArguments(
	logger logr.Logger,
	envoyConfiguration *config.EnvoyConfiguration,
	httpConnectionManagerBuilder *config.HCMBuilder,
	name string, routePathstring,
	method string,
	cloudEntityBuilder *cloudentity.Builder,
	generateClusterName generateClusterNameFunc,
	kubernetesClient client.Client,
) *parseAuthOptionsArguments

func ParseAuthOptions

func ParseAuthOptions(finalOpts options.SubOptions, args *parseAuthOptionsArguments) error

func ParseAuthUpstreamOptions

func ParseAuthUpstreamOptions(pathPrefix string, host options.AuthUpstreamHost, args *parseAuthOptionsArguments, scheme string) error

func ParseOAuth2Options

func ParseOAuth2Options(oauth2Options *options.OAuth2, arguments *parseAuthOptionsArguments) error

func PathMatcherExact

func PathMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.PathMatcher

func RouteAuthzDisabled

func RouteAuthzDisabled() (*anypb.Any, error)

RouteAuthzDisabled returns a per-route config to disable authorization.

func StringMatcherContains

func StringMatcherContains(contains string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

func StringMatcherExact

func StringMatcherExact(exact string, ignoreCase bool) *envoy_type_matcher_v3.StringMatcher

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL