internal/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
capture Package capture contains the node agent's transparent-capture controller: it watches the generated selectorless mesh Services (proposal 018, Phase 3a) and projects their cluster.local authorities into the snapshot cache, which builds the cap_http route table the per-pod capture listeners serve.	Package capture contains the node agent's transparent-capture controller: it watches the generated selectorless mesh Services (proposal 018, Phase 3a) and projects their cluster.local authorities into the snapshot cache, which builds the cap_http route table the per-pod capture listeners serve.
cmd Package cmd provides command-line interface configuration for the Aether agent.	Package cmd provides command-line interface configuration for the Aether agent.
cni
server Package server implements a gRPC server for the CNI plugin interface.	Package server implements a gRPC server for the CNI plugin interface.
cniconflist Package cniconflist keeps aether chained in the node's active CNI conflist.	Package cniconflist keeps aether chained in the node's active CNI conflist.
configimport Package configimport materializes cross-cluster GAMMA config on a spoke (proposal 026, multi-cluster config propagation — the consumer side).	Package configimport materializes cross-cluster GAMMA config on a spoke (proposal 026, multi-cluster config propagation — the consumer side).
edge
gatewayapi Package gatewayapi contains the edge proxy's Gateway API controller: it watches Gateway API HTTPRoutes, TCPRoutes, and TLSRoutes attached to a Gateway of the aether GatewayClass and projects them into the edge data plane (proposal 018 — north-south).	Package gatewayapi contains the edge proxy's Gateway API controller: it watches Gateway API HTTPRoutes, TCPRoutes, and TLSRoutes attached to a Gateway of the aether GatewayClass and projects them into the edge data plane (proposal 018 — north-south).
gatewayapi/attachment Package attachment holds the edge Gateway API controller's route→listener attachment resolution: parentRef matching, allowedRoutes (namespaces/kinds) admission, ReferenceGrant-gated backendRef admission, and listener/route hostname intersection.	Package attachment holds the edge Gateway API controller's route→listener attachment resolution: parentRef matching, allowedRoutes (namespaces/kinds) admission, ReferenceGrant-gated backendRef admission, and listener/route hostname intersection.
portalloc Package portalloc provides deterministic internal-port allocation for per-Gateway edge listeners (proposal 021 Phase 2).	Package portalloc provides deterministic internal-port allocation for per-Gateway edge listeners (proposal 021 Phase 2).
secret Package secret resolves edge downstream-TLS certificates from pluggable backends (the SecretProvider enum).	Package secret resolves edge downstream-TLS certificates from pluggable backends (the SecretProvider enum).
endpointpolicy Package endpointpolicy contains the node agent's EndpointPolicy controller: it watches the service-scoped delivery policies (proposal 034 Phase 1b) and projects them into the snapshot cache as a "<ns>/<svc>" → "<volume>/<file>" map.	Package endpointpolicy contains the node agent's EndpointPolicy controller: it watches the service-scoped delivery policies (proposal 034 Phase 1b) and projects them into the snapshot cache as a "<ns>/<svc>" → "<volume>/<file>" map.
gamma Package gamma contains the node agent's GAMMA controller: it watches Gateway API HTTPRoutes and GRPCRoutes attached to a Service (parentRef kind=Service) — plus the ReferenceGrants that authorise cross-namespace backendRefs and the HTTPFilter extensions those rules attach (proposal 025) — and projects their L7 rules into the node proxy's routing (proposal 018, Phase 2 — east-west).	Package gamma contains the node agent's GAMMA controller: it watches Gateway API HTTPRoutes and GRPCRoutes attached to a Service (parentRef kind=Service) — plus the ReferenceGrants that authorise cross-namespace backendRefs and the HTTPFilter extensions those rules attach (proposal 025) — and projects their L7 rules into the node proxy's routing (proposal 018, Phase 2 — east-west).
gatewaystatus Package gatewaystatus contains shared helpers for writing Gateway API status: controller-owned RouteParentStatus entries on Routes and conditions on Gateways/GatewayClasses.	Package gatewaystatus contains shared helpers for writing Gateway API status: controller-owned RouteParentStatus entries on Routes and conditions on Gateways/GatewayClasses.
identity Package identity holds the node agent's late-bound workload identity facts — the ones that used to be resolved synchronously on the startup path and are now folded in whenever SPIRE gets around to issuing an SVID (issue #740).	Package identity holds the node agent's late-bound workload identity facts — the ones that used to be resolved synchronously on the startup path and are now folded in whenever SPIRE gets around to issuing an SVID (issue #740).
l4route Package l4route contains the node agent's L4 route controller: it watches Gateway API TCPRoutes, TLSRoutes, and UDPRoutes (parentRef kind=Service) and projects their rules into the node proxy's capture listener filter chains.	Package l4route contains the node agent's L4 route controller: it watches Gateway API TCPRoutes, TLSRoutes, and UDPRoutes (parentRef kind=Service) and projects their rules into the node proxy's capture listener filter chains.
meshdns Package meshdns is Aether's DNS resolver (Istio-style, proposal 018 mesh-global FQDN).	Package meshdns is Aether's DNS resolver (Istio-style, proposal 018 mesh-global FQDN).
node Package node provides node-level operations for the agent — notably removing the aether startup taint once the agent's CNI is serving, so workload pods can schedule onto the node (the Cilium-style cold-start gate; see issue #261).	Package node provides node-level operations for the agent — notably removing the aether startup taint once the agent's CNI is serving, so workload pods can schedule onto the node (the Cilium-style cold-start gate; see issue #261).
ownership Package ownership decides which node agent owns its node (proposal 041).	Package ownership decides which node agent owns its node (proposal 041).
proxy
hotrestart Package hotrestart implements a supervisor that manages the aether-proxy Envoy process and performs Envoy hot restarts across restart epochs, replicating the behavior of Envoy's hot-restarter.py in Go (see docs/proposals/001_proxy-hot-restart.md).	Package hotrestart implements a supervisor that manages the aether-proxy Envoy process and performs Envoy hot restarts across restart epochs, replicating the behavior of Envoy's hot-restarter.py in Go (see docs/proposals/001_proxy-hot-restart.md).
schedmetrics Package schedmetrics exports the node agent's own kernel scheduler counters as OpenTelemetry instruments under aether.agent.sched.* (issue #1131).	Package schedmetrics exports the node agent's own kernel scheduler counters as OpenTelemetry instruments under aether.agent.sched.* (issue #1131).
spire Package spire provides integration with SPIRE for X.509 SVID management.	Package spire provides integration with SPIRE for X.509 SVID management.
supervisorcmd Package supervisorcmd builds the cobra command for the Envoy hot-restart supervisor (proposal 001).	Package supervisorcmd builds the cobra command for the Envoy hot-restart supervisor (proposal 001).
udscsi Package udscsi is the csi.aether.io node plugin (proposal 039 Phase 1): the CSI driver that gives each UDS-served workload a mesh-owned socket directory.	Package udscsi is the csi.aether.io node plugin (proposal 039 Phase 1): the CSI driver that gives each UDS-served workload a mesh-owned socket directory.
xds
ack Package ack tracks Envoy's delta-xDS ACK/NACKs per resource, replacing admin /config_dump polling (which serializes config on Envoy's main thread) as the agent's confirmation that a config update reached the proxy.	Package ack tracks Envoy's delta-xDS ACK/NACKs per resource, replacing admin /config_dump polling (which serializes config on Envoy's main thread) as the agent's confirmation that a config update reached the proxy.
cache Package cache manages Envoy xDS snapshot resources for the agent.	Package cache manages Envoy xDS snapshot resources for the agent.
cache/cachemetrics Package cachemetrics holds the agent xDS snapshot-generation instruments.	Package cachemetrics holds the agent xDS snapshot-generation instruments.
cache/snapversion Package snapversion generates xDS snapshot version strings for the agent cache.	Package snapversion generates xDS snapshot version strings for the agent cache.
config Package config provides Envoy configuration helpers for xDS resources.	Package config provides Envoy configuration helpers for xDS resources.
proxy Package proxy provides functions to generate Envoy resource types (listeners, clusters, endpoints, routes, filter chains) from pod and service registry data.	Package proxy provides functions to generate Envoy resource types (listeners, clusters, endpoints, routes, filter chains) from pod and service registry data.
quicdemand Package quicdemand sorts the `quic:` twin names in the node proxy's delta CDS requests into the three things they can mean (issues #1020, #1033).	Package quicdemand sorts the `quic:` twin names in the node proxy's delta CDS requests into the three things they can mean (issues #1020, #1033).
server Package server implements the agent-specific Envoy xDS server.	Package server implements the agent-specific Envoy xDS server.
xdsconst Package xdsconst holds the Aether pod annotation keys consumed exclusively by the agent's xDS proxy-config generation (proxy/cache/server), keeping them out of the cross-tree common/constants fan-in.	Package xdsconst holds the Aether pod annotation keys consumed exclusively by the agent's xDS proxy-config generation (proxy/cache/server), keeping them out of the cross-tree common/constants fan-in.