Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

inbound: Support multiple authorization types #1560

Merged
merged 5 commits into from
Mar 24, 2022
Merged

inbound: Support multiple authorization types #1560

merged 5 commits into from
Mar 24, 2022

Commits on Mar 24, 2022

  1. inbound: Support multiple authorization types 

    The inbound policy module uses the label `saz_name` to indicate the
authorization resource being employed to allow/deny traffic. This
corresponds to the `ServerAuthorization` kubernetes resource (with the
`saz` shortname). This resource type is going to be deprecated in favor
of a new, more general, `AuthorizationPolicy` resource.

When this change is made in the control plane, the policy controller
will include a `kind` label on gRPC messages indicating whether the
resource type, or `default` if a default policy is in effect.

This change honors this new `kind` field and adds a dedicated label to
indicate the kind.

Server labels are changed from:

    srv_name="default:foo"
    srv_name="fah"

to:

    srv_kind="default",srv_name="foo"
    srv_kind="server",srv_name="fah"

Authorization labels are changed from:

    saz_name="default:bar"
    saz_name="bah"

to:

    authz_kind="default",authz_name="bar"
    authz_kind="serverauthorization",authz_name="bah"

Signed-off-by: Oliver Gould <ver@buoyant.io>
    @olix0r
    olix0r committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    097fb1e View commit details
    Browse the repository at this point in the history

  2. helper 

    Signed-off-by: Oliver Gould <ver@buoyant.io>
    @olix0r
    olix0r committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    fabf865 View commit details
    Browse the repository at this point in the history

  3. fixups 

    Signed-off-by: Oliver Gould <ver@buoyant.io>
    @olix0r
    olix0r committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    fe7a009 View commit details
    Browse the repository at this point in the history

  4. ci 

    Signed-off-by: Oliver Gould <ver@buoyant.io>
    @olix0r
    olix0r committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    13f108d View commit details
    Browse the repository at this point in the history

  5. fixup labels 

    Signed-off-by: Oliver Gould <ver@buoyant.io>
    @olix0r
    olix0r committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    3d80bd6 View commit details
    Browse the repository at this point in the history