internal/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
capture Package capture contains the node agent's transparent-capture controller: it watches the generated selectorless mesh Services (proposal 018, Phase 3a) and projects their cluster.local authorities into the snapshot cache, which builds the cap_http route table the per-pod capture listeners serve.	Package capture contains the node agent's transparent-capture controller: it watches the generated selectorless mesh Services (proposal 018, Phase 3a) and projects their cluster.local authorities into the snapshot cache, which builds the cap_http route table the per-pod capture listeners serve.
cmd Package cmd provides command-line interface configuration for the Aether agent.	Package cmd provides command-line interface configuration for the Aether agent.
cni
server Package server implements a gRPC server for the CNI plugin interface.	Package server implements a gRPC server for the CNI plugin interface.
configimport Package configimport materializes cross-cluster GAMMA config on a spoke (proposal 026, multi-cluster config propagation — the consumer side).	Package configimport materializes cross-cluster GAMMA config on a spoke (proposal 026, multi-cluster config propagation — the consumer side).
edge
gatewayapi Package gatewayapi contains the edge proxy's Gateway API controller: it watches Gateway API HTTPRoutes, TCPRoutes, and TLSRoutes attached to a Gateway of the aether GatewayClass and projects them into the edge data plane (proposal 018 — north-south).	Package gatewayapi contains the edge proxy's Gateway API controller: it watches Gateway API HTTPRoutes, TCPRoutes, and TLSRoutes attached to a Gateway of the aether GatewayClass and projects them into the edge data plane (proposal 018 — north-south).
gatewayapi/attachment Package attachment holds the edge Gateway API controller's route→listener attachment resolution: parentRef matching, allowedRoutes (namespaces/kinds) admission, ReferenceGrant-gated backendRef admission, and listener/route hostname intersection.	Package attachment holds the edge Gateway API controller's route→listener attachment resolution: parentRef matching, allowedRoutes (namespaces/kinds) admission, ReferenceGrant-gated backendRef admission, and listener/route hostname intersection.
portalloc Package portalloc provides deterministic internal-port allocation for per-Gateway edge listeners (proposal 021 Phase 2).	Package portalloc provides deterministic internal-port allocation for per-Gateway edge listeners (proposal 021 Phase 2).
secret Package secret resolves edge downstream-TLS certificates from pluggable backends (the SecretProvider enum).	Package secret resolves edge downstream-TLS certificates from pluggable backends (the SecretProvider enum).
endpointpolicy Package endpointpolicy contains the node agent's EndpointPolicy controller: it watches the service-scoped delivery policies (proposal 034 Phase 1b) and projects them into the snapshot cache as a "<ns>/<svc>" → "<volume>/<file>" map.	Package endpointpolicy contains the node agent's EndpointPolicy controller: it watches the service-scoped delivery policies (proposal 034 Phase 1b) and projects them into the snapshot cache as a "<ns>/<svc>" → "<volume>/<file>" map.
gamma Package gamma contains the node agent's GAMMA controller: it watches Gateway API HTTPRoutes attached to a Service (parentRef kind=Service) and projects their L7 rules into the node proxy's outbound routing (proposal 018, Phase 2 — east-west).	Package gamma contains the node agent's GAMMA controller: it watches Gateway API HTTPRoutes attached to a Service (parentRef kind=Service) and projects their L7 rules into the node proxy's outbound routing (proposal 018, Phase 2 — east-west).
gatewaystatus Package gatewaystatus contains shared helpers for writing Gateway API status: controller-owned RouteParentStatus entries on Routes and conditions on Gateways/GatewayClasses.	Package gatewaystatus contains shared helpers for writing Gateway API status: controller-owned RouteParentStatus entries on Routes and conditions on Gateways/GatewayClasses.
l4route Package l4route contains the node agent's L4 route controller: it watches Gateway API TCPRoutes, TLSRoutes, and UDPRoutes (parentRef kind=Service) and projects their rules into the node proxy's capture listener filter chains.	Package l4route contains the node agent's L4 route controller: it watches Gateway API TCPRoutes, TLSRoutes, and UDPRoutes (parentRef kind=Service) and projects their rules into the node proxy's capture listener filter chains.
meshdns Package meshdns is the node agent's in-process DNS resolver (Istio-style, proposal 018 mesh-global FQDN).	Package meshdns is the node agent's in-process DNS resolver (Istio-style, proposal 018 mesh-global FQDN).
node Package node provides node-level operations for the agent — notably removing the aether startup taint once the agent's CNI is serving, so workload pods can schedule onto the node (the Cilium-style cold-start gate; see issue #261).	Package node provides node-level operations for the agent — notably removing the aether startup taint once the agent's CNI is serving, so workload pods can schedule onto the node (the Cilium-style cold-start gate; see issue #261).
proxy
hotrestart Package hotrestart implements a supervisor that manages the aether-proxy Envoy process and performs Envoy hot restarts across restart epochs, replicating the behavior of Envoy's hot-restarter.py in Go (see docs/proposals/001_proxy-hot-restart.md).	Package hotrestart implements a supervisor that manages the aether-proxy Envoy process and performs Envoy hot restarts across restart epochs, replicating the behavior of Envoy's hot-restarter.py in Go (see docs/proposals/001_proxy-hot-restart.md).
spire Package spire provides integration with SPIRE for X.509 SVID management.	Package spire provides integration with SPIRE for X.509 SVID management.
xds
ack Package ack tracks Envoy's delta-xDS ACK/NACKs per resource, replacing admin /config_dump polling (which serializes config on Envoy's main thread) as the agent's confirmation that a config update reached the proxy.	Package ack tracks Envoy's delta-xDS ACK/NACKs per resource, replacing admin /config_dump polling (which serializes config on Envoy's main thread) as the agent's confirmation that a config update reached the proxy.
cache Package cache manages Envoy xDS snapshot resources for the agent.	Package cache manages Envoy xDS snapshot resources for the agent.
cache/cachemetrics Package cachemetrics holds the agent xDS snapshot-generation instruments.	Package cachemetrics holds the agent xDS snapshot-generation instruments.
cache/snapversion Package snapversion generates xDS snapshot version strings for the agent cache.	Package snapversion generates xDS snapshot version strings for the agent cache.
config Package config provides Envoy configuration helpers for xDS resources.	Package config provides Envoy configuration helpers for xDS resources.
proxy Package proxy provides functions to generate Envoy resource types (listeners, clusters, endpoints, routes, filter chains) from pod and service registry data.	Package proxy provides functions to generate Envoy resource types (listeners, clusters, endpoints, routes, filter chains) from pod and service registry data.
server Package server implements the agent-specific Envoy xDS server.	Package server implements the agent-specific Envoy xDS server.
xdsconst Package xdsconst holds the Aether pod annotation keys consumed exclusively by the agent's xDS proxy-config generation (proxy/cache/server), keeping them out of the cross-tree common/constants fan-in.	Package xdsconst holds the Aether pod annotation keys consumed exclusively by the agent's xDS proxy-config generation (proxy/cache/server), keeping them out of the cross-tree common/constants fan-in.