const (
InboundServerPolicies_GetPort_FullMethodName = "/io.linkerd.proxy.inbound.InboundServerPolicies/GetPort"
InboundServerPolicies_WatchPort_FullMethodName = "/io.linkerd.proxy.inbound.InboundServerPolicies/WatchPort"
)
var File_inbound_proto protoreflect.FileDescriptor
InboundServerPolicies_ServiceDesc is the grpc.ServiceDesc for InboundServerPolicies service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)
var InboundServerPolicies_ServiceDesc = grpc.ServiceDesc{ ServiceName: "io.linkerd.proxy.inbound.InboundServerPolicies", HandlerType: (*InboundServerPoliciesServer)(nil), Methods: []grpc.MethodDesc{ { MethodName: "GetPort", Handler: _InboundServerPolicies_GetPort_Handler, }, }, Streams: []grpc.StreamDesc{ { StreamName: "WatchPort", Handler: _InboundServerPolicies_WatchPort_Handler, ServerStreams: true, }, }, Metadata: "inbound.proto", }
func RegisterInboundServerPoliciesServer(s grpc.ServiceRegistrar, srv InboundServerPoliciesServer)
type Authn struct {
// Types that are assignable to Permit:
//
// *Authn_Unauthenticated
// *Authn_MeshTLS
Permit isAuthn_Permit `protobuf_oneof:"permit"`
// contains filtered or unexported fields
}
func (*Authn) Descriptor() ([]byte, []int)
Deprecated: Use Authn.ProtoReflect.Descriptor instead.
func (x *Authn) GetMeshTLS() *Authn_PermitMeshTLS
func (m *Authn) GetPermit() isAuthn_Permit
func (x *Authn) GetUnauthenticated() *Authn_PermitUnauthenticated
func (*Authn) ProtoMessage()
func (x *Authn) ProtoReflect() protoreflect.Message
func (x *Authn) Reset()
func (x *Authn) String() string
type Authn_MeshTLS struct {
// If set, requires that the connection is transported over mesh TLS.
MeshTLS *Authn_PermitMeshTLS `protobuf:"bytes,2,opt,name=meshTLS,proto3,oneof"`
}
type Authn_PermitMeshTLS struct {
// Types that are assignable to Clients:
//
// *Authn_PermitMeshTLS_Unauthenticated
// *Authn_PermitMeshTLS_Identities
Clients isAuthn_PermitMeshTLS_Clients `protobuf_oneof:"clients"`
// contains filtered or unexported fields
}
func (*Authn_PermitMeshTLS) Descriptor() ([]byte, []int)
Deprecated: Use Authn_PermitMeshTLS.ProtoReflect.Descriptor instead.
func (m *Authn_PermitMeshTLS) GetClients() isAuthn_PermitMeshTLS_Clients
func (x *Authn_PermitMeshTLS) GetIdentities() *Authn_PermitMeshTLS_PermitClientIdentities
func (x *Authn_PermitMeshTLS) GetUnauthenticated() *Authn_PermitUnauthenticated
func (*Authn_PermitMeshTLS) ProtoMessage()
func (x *Authn_PermitMeshTLS) ProtoReflect() protoreflect.Message
func (x *Authn_PermitMeshTLS) Reset()
func (x *Authn_PermitMeshTLS) String() string
type Authn_PermitMeshTLS_Identities struct {
// Indicates that mutually-authenticated connections are permitted from
// clients with matching identities.
Identities *Authn_PermitMeshTLS_PermitClientIdentities `protobuf:"bytes,2,opt,name=identities,proto3,oneof"`
}
type Authn_PermitMeshTLS_PermitClientIdentities struct {
// A list of literal identities.
Identities []*Identity `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
// A list of identity suffixes.
//
// If this contains an empty suffix, all identities are matched.
Suffixes []*IdentitySuffix `protobuf:"bytes,2,rep,name=suffixes,proto3" json:"suffixes,omitempty"`
// contains filtered or unexported fields
}
func (*Authn_PermitMeshTLS_PermitClientIdentities) Descriptor() ([]byte, []int)
Deprecated: Use Authn_PermitMeshTLS_PermitClientIdentities.ProtoReflect.Descriptor instead.
func (x *Authn_PermitMeshTLS_PermitClientIdentities) GetIdentities() []*Identity
func (x *Authn_PermitMeshTLS_PermitClientIdentities) GetSuffixes() []*IdentitySuffix
func (*Authn_PermitMeshTLS_PermitClientIdentities) ProtoMessage()
func (x *Authn_PermitMeshTLS_PermitClientIdentities) ProtoReflect() protoreflect.Message
func (x *Authn_PermitMeshTLS_PermitClientIdentities) Reset()
func (x *Authn_PermitMeshTLS_PermitClientIdentities) String() string
type Authn_PermitMeshTLS_Unauthenticated struct {
// Indicates that client identities are not required.
Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}
type Authn_PermitUnauthenticated struct {
// contains filtered or unexported fields
}
func (*Authn_PermitUnauthenticated) Descriptor() ([]byte, []int)
Deprecated: Use Authn_PermitUnauthenticated.ProtoReflect.Descriptor instead.
func (*Authn_PermitUnauthenticated) ProtoMessage()
func (x *Authn_PermitUnauthenticated) ProtoReflect() protoreflect.Message
func (x *Authn_PermitUnauthenticated) Reset()
func (x *Authn_PermitUnauthenticated) String() string
type Authn_Unauthenticated struct {
Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}
type Authz struct {
// Limits this authorization to client addresses in the provided networks.
//
// Must have at least one network, otherwise the authorization must be
// ignored. An authorization matches all clients by including an explicit
// match on, i.e., `[0.0.0.0/0, 0::/0]“.
Networks []*Network `protobuf:"bytes,1,rep,name=networks,proto3" json:"networks,omitempty"`
// Must be set.
Authentication *Authn `protobuf:"bytes,2,opt,name=authentication,proto3" json:"authentication,omitempty"`
// Descriptive labels to be added to metrics, etc.
//
// A control plane SHOULD return the same keys in all authorizations. That is,
// we do NOT want to return arbitrary pod labels in this field.
//
// `labels` should be considered deprecated. `metadata` is preferred. However,
// controllers should continue to set `labels` for compatibility with older
// proxies.
Labels map[string]string `protobuf:"bytes,3,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
// If set, describes an Authorization configuration. Replaces the free-from
// `labels` field.
Metadata *meta.Metadata `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
// contains filtered or unexported fields
}
func (*Authz) Descriptor() ([]byte, []int)
Deprecated: Use Authz.ProtoReflect.Descriptor instead.
func (x *Authz) GetAuthentication() *Authn
func (x *Authz) GetLabels() map[string]string
func (x *Authz) GetMetadata() *meta.Metadata
func (x *Authz) GetNetworks() []*Network
func (*Authz) ProtoMessage()
func (x *Authz) ProtoReflect() protoreflect.Message
func (x *Authz) Reset()
func (x *Authz) String() string
Inbound-specific gRPC route configuration.
type GrpcRoute struct {
Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
// If empty, the host value is ignored.
Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
// The server MUST return at least one authorization, otherwise all requests
// to this route will fail with an unauthorized response.
Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
// Must have at least one rule.
Rules []*GrpcRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
// contains filtered or unexported fields
}
func (*GrpcRoute) Descriptor() ([]byte, []int)
Deprecated: Use GrpcRoute.ProtoReflect.Descriptor instead.
func (x *GrpcRoute) GetAuthorizations() []*Authz
func (x *GrpcRoute) GetHosts() []*http_route.HostMatch
func (x *GrpcRoute) GetMetadata() *meta.Metadata
func (x *GrpcRoute) GetRules() []*GrpcRoute_Rule
func (*GrpcRoute) ProtoMessage()
func (x *GrpcRoute) ProtoReflect() protoreflect.Message
func (x *GrpcRoute) Reset()
func (x *GrpcRoute) String() string
type GrpcRoute_Filter struct {
// Types that are assignable to Kind:
//
// *GrpcRoute_Filter_FailureInjector
// *GrpcRoute_Filter_RequestHeaderModifier
Kind isGrpcRoute_Filter_Kind `protobuf_oneof:"kind"`
// contains filtered or unexported fields
}
func (*GrpcRoute_Filter) Descriptor() ([]byte, []int)
Deprecated: Use GrpcRoute_Filter.ProtoReflect.Descriptor instead.
func (x *GrpcRoute_Filter) GetFailureInjector() *grpc_route.GrpcFailureInjector
func (m *GrpcRoute_Filter) GetKind() isGrpcRoute_Filter_Kind
func (x *GrpcRoute_Filter) GetRequestHeaderModifier() *http_route.RequestHeaderModifier
func (*GrpcRoute_Filter) ProtoMessage()
func (x *GrpcRoute_Filter) ProtoReflect() protoreflect.Message
func (x *GrpcRoute_Filter) Reset()
func (x *GrpcRoute_Filter) String() string
type GrpcRoute_Filter_FailureInjector struct {
FailureInjector *grpc_route.GrpcFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}
type GrpcRoute_Filter_RequestHeaderModifier struct {
RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}
type GrpcRoute_Rule struct {
Matches []*grpc_route.GrpcRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
Filters []*GrpcRoute_Filter `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
// contains filtered or unexported fields
}
func (*GrpcRoute_Rule) Descriptor() ([]byte, []int)
Deprecated: Use GrpcRoute_Rule.ProtoReflect.Descriptor instead.
func (x *GrpcRoute_Rule) GetFilters() []*GrpcRoute_Filter
func (x *GrpcRoute_Rule) GetMatches() []*grpc_route.GrpcRouteMatch
func (*GrpcRoute_Rule) ProtoMessage()
func (x *GrpcRoute_Rule) ProtoReflect() protoreflect.Message
func (x *GrpcRoute_Rule) Reset()
func (x *GrpcRoute_Rule) String() string
Inbound-specific HTTP route configuration (based on the [Gateway API](https://gateway-api.sigs.k8s.io/v1alpha2/references/spec/#gateway.networking.k8s.io/v1alpha2.HTTPRoute)).
type HttpRoute struct {
Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
// If empty, the host value is ignored.
Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
// Extends the list of authorizations on the `Server` with authorizations
// specific to this route.
Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
// Must have at least one rule.
Rules []*HttpRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
// contains filtered or unexported fields
}
func (*HttpRoute) Descriptor() ([]byte, []int)
Deprecated: Use HttpRoute.ProtoReflect.Descriptor instead.
func (x *HttpRoute) GetAuthorizations() []*Authz
func (x *HttpRoute) GetHosts() []*http_route.HostMatch
func (x *HttpRoute) GetMetadata() *meta.Metadata
func (x *HttpRoute) GetRules() []*HttpRoute_Rule
func (*HttpRoute) ProtoMessage()
func (x *HttpRoute) ProtoReflect() protoreflect.Message
func (x *HttpRoute) Reset()
func (x *HttpRoute) String() string
type HttpRoute_Filter struct {
// Types that are assignable to Kind:
//
// *HttpRoute_Filter_FailureInjector
// *HttpRoute_Filter_RequestHeaderModifier
// *HttpRoute_Filter_Redirect
Kind isHttpRoute_Filter_Kind `protobuf_oneof:"kind"`
// contains filtered or unexported fields
}
func (*HttpRoute_Filter) Descriptor() ([]byte, []int)
Deprecated: Use HttpRoute_Filter.ProtoReflect.Descriptor instead.
func (x *HttpRoute_Filter) GetFailureInjector() *http_route.HttpFailureInjector
func (m *HttpRoute_Filter) GetKind() isHttpRoute_Filter_Kind
func (x *HttpRoute_Filter) GetRedirect() *http_route.RequestRedirect
func (x *HttpRoute_Filter) GetRequestHeaderModifier() *http_route.RequestHeaderModifier
func (*HttpRoute_Filter) ProtoMessage()
func (x *HttpRoute_Filter) ProtoReflect() protoreflect.Message
func (x *HttpRoute_Filter) Reset()
func (x *HttpRoute_Filter) String() string
type HttpRoute_Filter_FailureInjector struct {
FailureInjector *http_route.HttpFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}
type HttpRoute_Filter_Redirect struct {
Redirect *http_route.RequestRedirect `protobuf:"bytes,3,opt,name=redirect,proto3,oneof"`
}
type HttpRoute_Filter_RequestHeaderModifier struct {
RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}
type HttpRoute_Rule struct {
Matches []*http_route.HttpRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
Filters []*HttpRoute_Filter `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
// contains filtered or unexported fields
}
func (*HttpRoute_Rule) Descriptor() ([]byte, []int)
Deprecated: Use HttpRoute_Rule.ProtoReflect.Descriptor instead.
func (x *HttpRoute_Rule) GetFilters() []*HttpRoute_Filter
func (x *HttpRoute_Rule) GetMatches() []*http_route.HttpRouteMatch
func (*HttpRoute_Rule) ProtoMessage()
func (x *HttpRoute_Rule) ProtoReflect() protoreflect.Message
func (x *HttpRoute_Rule) Reset()
func (x *HttpRoute_Rule) String() string
type Identity struct {
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
// contains filtered or unexported fields
}
func (*Identity) Descriptor() ([]byte, []int)
Deprecated: Use Identity.ProtoReflect.Descriptor instead.
func (x *Identity) GetName() string
func (*Identity) ProtoMessage()
func (x *Identity) ProtoReflect() protoreflect.Message
func (x *Identity) Reset()
func (x *Identity) String() string
Encodes a DNS-like name suffix as sequence of parts.
An empty list is equivalent to `.` (matching all names); the list `["foo", "bar"]` is equivalent to "foo.bar." (matching `*.foo.bar`), etc.
type IdentitySuffix struct {
Parts []string `protobuf:"bytes,1,rep,name=parts,proto3" json:"parts,omitempty"`
// contains filtered or unexported fields
}
func (*IdentitySuffix) Descriptor() ([]byte, []int)
Deprecated: Use IdentitySuffix.ProtoReflect.Descriptor instead.
func (x *IdentitySuffix) GetParts() []string
func (*IdentitySuffix) ProtoMessage()
func (x *IdentitySuffix) ProtoReflect() protoreflect.Message
func (x *IdentitySuffix) Reset()
func (x *IdentitySuffix) String() string
InboundServerPoliciesClient is the client API for InboundServerPolicies service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
type InboundServerPoliciesClient interface {
// / Gets the inbound server policy for a given workload port.
GetPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (*Server, error)
// / Watches the inbound server policy for a given workload port.
WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (InboundServerPolicies_WatchPortClient, error)
}
func NewInboundServerPoliciesClient(cc grpc.ClientConnInterface) InboundServerPoliciesClient
InboundServerPoliciesServer is the server API for InboundServerPolicies service. All implementations must embed UnimplementedInboundServerPoliciesServer for forward compatibility
type InboundServerPoliciesServer interface {
// / Gets the inbound server policy for a given workload port.
GetPort(context.Context, *PortSpec) (*Server, error)
// / Watches the inbound server policy for a given workload port.
WatchPort(*PortSpec, InboundServerPolicies_WatchPortServer) error
// contains filtered or unexported methods
}
type InboundServerPolicies_WatchPortClient interface {
Recv() (*Server, error)
grpc.ClientStream
}
type InboundServerPolicies_WatchPortServer interface {
Send(*Server) error
grpc.ServerStream
}
Describes a network of authorized clients.
type Network struct {
Net *net.IPNetwork `protobuf:"bytes,1,opt,name=net,proto3" json:"net,omitempty"`
Except []*net.IPNetwork `protobuf:"bytes,2,rep,name=except,proto3" json:"except,omitempty"`
// contains filtered or unexported fields
}
func (*Network) Descriptor() ([]byte, []int)
Deprecated: Use Network.ProtoReflect.Descriptor instead.
func (x *Network) GetExcept() []*net.IPNetwork
func (x *Network) GetNet() *net.IPNetwork
func (*Network) ProtoMessage()
func (x *Network) ProtoReflect() protoreflect.Message
func (x *Network) Reset()
func (x *Network) String() string
type PortSpec struct {
// Identifies a proxy workload (e.g., pod name).
Workload string `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
// An inbound port on _workload_.
Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
// contains filtered or unexported fields
}
func (*PortSpec) Descriptor() ([]byte, []int)
Deprecated: Use PortSpec.ProtoReflect.Descriptor instead.
func (x *PortSpec) GetPort() uint32
func (x *PortSpec) GetWorkload() string
func (*PortSpec) ProtoMessage()
func (x *PortSpec) ProtoReflect() protoreflect.Message
func (x *PortSpec) Reset()
func (x *PortSpec) String() string
type ProxyProtocol struct {
// Types that are assignable to Kind:
//
// *ProxyProtocol_Detect_
// *ProxyProtocol_Opaque_
// *ProxyProtocol_Tls_
// *ProxyProtocol_Http1_
// *ProxyProtocol_Http2_
// *ProxyProtocol_Grpc_
Kind isProxyProtocol_Kind `protobuf_oneof:"kind"`
// contains filtered or unexported fields
}
func (*ProxyProtocol) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol.ProtoReflect.Descriptor instead.
func (x *ProxyProtocol) GetDetect() *ProxyProtocol_Detect
func (x *ProxyProtocol) GetGrpc() *ProxyProtocol_Grpc
func (x *ProxyProtocol) GetHttp1() *ProxyProtocol_Http1
func (x *ProxyProtocol) GetHttp2() *ProxyProtocol_Http2
func (m *ProxyProtocol) GetKind() isProxyProtocol_Kind
func (x *ProxyProtocol) GetOpaque() *ProxyProtocol_Opaque
func (x *ProxyProtocol) GetTls() *ProxyProtocol_Tls
func (*ProxyProtocol) ProtoMessage()
func (x *ProxyProtocol) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol) Reset()
func (x *ProxyProtocol) String() string
type ProxyProtocol_Detect struct {
Timeout *duration.Duration `protobuf:"bytes,1,opt,name=timeout,proto3" json:"timeout,omitempty"`
// If the protocol detected as HTTP, a list of HTTP routes that should be
// matched.
HttpRoutes []*HttpRoute `protobuf:"bytes,3,rep,name=http_routes,json=httpRoutes,proto3" json:"http_routes,omitempty"`
// contains filtered or unexported fields
}
func (*ProxyProtocol_Detect) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Detect.ProtoReflect.Descriptor instead.
func (x *ProxyProtocol_Detect) GetHttpRoutes() []*HttpRoute
func (x *ProxyProtocol_Detect) GetTimeout() *duration.Duration
func (*ProxyProtocol_Detect) ProtoMessage()
func (x *ProxyProtocol_Detect) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Detect) Reset()
func (x *ProxyProtocol_Detect) String() string
type ProxyProtocol_Detect_ struct {
Detect *ProxyProtocol_Detect `protobuf:"bytes,1,opt,name=detect,proto3,oneof"`
}
type ProxyProtocol_Grpc struct {
Routes []*GrpcRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
// contains filtered or unexported fields
}
func (*ProxyProtocol_Grpc) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Grpc.ProtoReflect.Descriptor instead.
func (x *ProxyProtocol_Grpc) GetRoutes() []*GrpcRoute
func (*ProxyProtocol_Grpc) ProtoMessage()
func (x *ProxyProtocol_Grpc) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Grpc) Reset()
func (x *ProxyProtocol_Grpc) String() string
type ProxyProtocol_Grpc_ struct {
Grpc *ProxyProtocol_Grpc `protobuf:"bytes,6,opt,name=grpc,proto3,oneof"`
}
type ProxyProtocol_Http1 struct {
Routes []*HttpRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
// contains filtered or unexported fields
}
func (*ProxyProtocol_Http1) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Http1.ProtoReflect.Descriptor instead.
func (x *ProxyProtocol_Http1) GetRoutes() []*HttpRoute
func (*ProxyProtocol_Http1) ProtoMessage()
func (x *ProxyProtocol_Http1) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Http1) Reset()
func (x *ProxyProtocol_Http1) String() string
type ProxyProtocol_Http1_ struct {
Http1 *ProxyProtocol_Http1 `protobuf:"bytes,4,opt,name=http1,proto3,oneof"`
}
type ProxyProtocol_Http2 struct {
Routes []*HttpRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
// contains filtered or unexported fields
}
func (*ProxyProtocol_Http2) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Http2.ProtoReflect.Descriptor instead.
func (x *ProxyProtocol_Http2) GetRoutes() []*HttpRoute
func (*ProxyProtocol_Http2) ProtoMessage()
func (x *ProxyProtocol_Http2) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Http2) Reset()
func (x *ProxyProtocol_Http2) String() string
type ProxyProtocol_Http2_ struct {
Http2 *ProxyProtocol_Http2 `protobuf:"bytes,5,opt,name=http2,proto3,oneof"`
}
type ProxyProtocol_Opaque struct {
// contains filtered or unexported fields
}
func (*ProxyProtocol_Opaque) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Opaque.ProtoReflect.Descriptor instead.
func (*ProxyProtocol_Opaque) ProtoMessage()
func (x *ProxyProtocol_Opaque) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Opaque) Reset()
func (x *ProxyProtocol_Opaque) String() string
type ProxyProtocol_Opaque_ struct {
Opaque *ProxyProtocol_Opaque `protobuf:"bytes,2,opt,name=opaque,proto3,oneof"`
}
type ProxyProtocol_Tls struct {
// contains filtered or unexported fields
}
func (*ProxyProtocol_Tls) Descriptor() ([]byte, []int)
Deprecated: Use ProxyProtocol_Tls.ProtoReflect.Descriptor instead.
func (*ProxyProtocol_Tls) ProtoMessage()
func (x *ProxyProtocol_Tls) ProtoReflect() protoreflect.Message
func (x *ProxyProtocol_Tls) Reset()
func (x *ProxyProtocol_Tls) String() string
type ProxyProtocol_Tls_ struct {
Tls *ProxyProtocol_Tls `protobuf:"bytes,3,opt,name=tls,proto3,oneof"`
}
type Server struct {
// If set, indicates how the proxy should proxy connections on the specified
// port.
Protocol *ProxyProtocol `protobuf:"bytes,1,opt,name=protocol,proto3" json:"protocol,omitempty"`
// Indicates the IP addresses on which the proxy may receive connections.
// Connections targetting other IP addresses will be dropped.
ServerIps []*net.IPAddress `protobuf:"bytes,2,rep,name=server_ips,json=serverIps,proto3" json:"server_ips,omitempty"`
// Configures a proxy to allow connections from the specified clients.
//
// If unset, no connections are permitted.
Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
// Descriptive labels to be added to metrics, etc.
//
// A control plane SHOULD return the same keys in all policies. That is, we do
// NOT want to return arbitrary pod labels in this field.
Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
// contains filtered or unexported fields
}
func (*Server) Descriptor() ([]byte, []int)
Deprecated: Use Server.ProtoReflect.Descriptor instead.
func (x *Server) GetAuthorizations() []*Authz
func (x *Server) GetLabels() map[string]string
func (x *Server) GetProtocol() *ProxyProtocol
func (x *Server) GetServerIps() []*net.IPAddress
func (*Server) ProtoMessage()
func (x *Server) ProtoReflect() protoreflect.Message
func (x *Server) Reset()
func (x *Server) String() string
UnimplementedInboundServerPoliciesServer must be embedded to have forward compatible implementations.
type UnimplementedInboundServerPoliciesServer struct {
}
func (UnimplementedInboundServerPoliciesServer) GetPort(context.Context, *PortSpec) (*Server, error)
func (UnimplementedInboundServerPoliciesServer) WatchPort(*PortSpec, InboundServerPolicies_WatchPortServer) error
UnsafeInboundServerPoliciesServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to InboundServerPoliciesServer will result in compilation errors.
type UnsafeInboundServerPoliciesServer interface {
// contains filtered or unexported methods
}