egress

type Allowlist struct {
	// contains filtered or unexported fields
}

type Client struct {
	// contains filtered or unexported fields
}

type Credentials struct {
	User   string
	Secret string
}

type Options struct {
	// Resolver resolves host names (default net.DefaultResolver).
	Resolver *net.Resolver
	// RootCAs, when set, replaces the system roots (tests).
	RootCAs *x509.CertPool
	// Timeout bounds one request (default 60 s).
	Timeout time.Duration
	// AllowLinkLocal lets the dialer reach link-local addresses (tests
	// only: the cloud metadata service lives there).
	AllowLinkLocal bool
	// MaxResponseBytes overrides MaxResponseBytes (tests).
	MaxResponseBytes int64
	// Headers are fixed request headers of the source (e.g. Loki's
	// response-encoding flags), each on the extra-header allowlist
	// (checkHeaders). They never carry credentials: those go through the
	// auth mode.
	Headers map[string]string
}

type Recognizer func(body []byte) bool

type Response struct {
	Status int
	Body   []byte
}

type Route struct {
	Method string
	Path   string
	// Params are the query parameters the route may carry, each once:
	// name to fixed value, or to "" for any value. Any other parameter,
	// or one repeated, is refused.
	Params map[string]string
}