proxy

package

v0.2.1 Latest Latest Go to latest Published: Jun 23, 2025 License: Apache-2.0 Imports: 55 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/authzed/spicedb-kubeapi-proxy

Links

Open Source Insights

Documentation ¶

Overview ¶

Code generated by github.com/ecordell/optgen. DO NOT EDIT.

Index ¶

Constants
func NewTransportForKubeconfig(config *clientcmdapi.Config) (*http.Transport, error)
type Authentication
- func NewAuthentication() *Authentication
type Authenticator
type Options
- func NewOptions() *Options
type Server
- func NewServer(ctx context.Context, o Options) (*Server, error)
- func (s *Server) PermissionClient() v1.PermissionsServiceClient
- func (s *Server) Run(ctx context.Context) error
type SpiceDBOptions
type SpiceDBOptionsOption

Constants ¶

View Source

const (
	EmbeddedSpiceDBEndpoint = "embedded://"
)

Variables ¶

This section is empty.

Functions ¶

func NewTransportForKubeconfig ¶

func NewTransportForKubeconfig(config *clientcmdapi.Config) (*http.Transport, error)

Types ¶

type Authentication ¶

type Authentication struct {
	BuiltInOptions *kubeoptions.BuiltInAuthenticationOptions
}

func NewAuthentication ¶

func NewAuthentication() *Authentication

func (*Authentication) AddFlags ¶

func (c *Authentication) AddFlags(fs *pflag.FlagSet)

func (*Authentication) AdditionalAuthEnabled ¶

func (c *Authentication) AdditionalAuthEnabled() bool

func (*Authentication) ApplyTo ¶

func (c *Authentication) ApplyTo(ctx context.Context, authenticationInfo *genericapiserver.AuthenticationInfo, servingInfo *genericapiserver.SecureServingInfo) error

func (*Authentication) Validate ¶

func (c *Authentication) Validate() []error

type Authenticator ¶

type Authenticator struct{}

type Options ¶

type Options struct {
	SecureServing  apiserveroptions.SecureServingOptionsWithLoopback `debugmap:"hidden"`
	Authentication Authentication                                    `debugmap:"hidden"`
	Logs           *logs.Options                                     `debugmap:"hidden"`

	// TODO: use genericclioptions.ConfigFlags instead of this?
	BackendKubeconfigPath string                                          `debugmap:"visible"`
	RestConfigFunc        func() (*rest.Config, http.RoundTripper, error) `debugmap:"hidden"`
	OverrideUpstream      bool                                            `debugmap:"visible"`
	UseInClusterConfig    bool                                            `debugmap:"visible"`

	RuleConfigFile string        `debugmap:"visible"`
	Matcher        rules.Matcher `debugmap:"hidden"`

	SpiceDBOptions SpiceDBOptions `debugmap:"visible"`

	CertDir string `debugmap:"visible"`

	AuthenticationInfo    genericapiserver.AuthenticationInfo `debugmap:"hidden"`
	ServingInfo           *genericapiserver.SecureServingInfo `debugmap:"hidden"`
	AdditionalAuthEnabled bool                                `debugmap:"visible"`

	InputExtractor rules.ResolveInputExtractor `debugmap:"hidden"`

	WorkflowDatabasePath string `debugmap:"visible"`
	LockMode             string `debugmap:"visible"`

	WatchClient       v1.WatchServiceClient       `debugmap:"hidden"`
	PermissionsClient v1.PermissionsServiceClient `debugmap:"hidden"`
}

func NewOptions ¶

func NewOptions() *Options

func (*Options) AddFlags ¶

func (o *Options) AddFlags(fs *pflag.FlagSet)

func (*Options) Complete ¶

func (o *Options) Complete(ctx context.Context) error

func (*Options) FromConfigFlags ¶ added in v0.2.0

func (o *Options) FromConfigFlags(configFlags *genericclioptions.ConfigFlags) *Options

func (*Options) Validate ¶

func (o *Options) Validate() []error

type Server ¶

type Server struct {
	Handler        http.Handler
	WorkflowWorker *distributedtx.Worker
	KubeClient     *kubernetes.Clientset
	Matcher        *rules.Matcher
	// contains filtered or unexported fields
}

func NewServer ¶

func NewServer(ctx context.Context, o Options) (*Server, error)

func (*Server) PermissionClient ¶

func (s *Server) PermissionClient() v1.PermissionsServiceClient

func (*Server) Run ¶

func (s *Server) Run(ctx context.Context) error

type SpiceDBOptions ¶ added in v0.2.0

type SpiceDBOptions struct {
	SpiceDBEndpoint            string                `debugmap:"visible"`
	EmbeddedSpiceDB            server.RunnableServer `debugmap:"hidden"`
	Insecure                   bool                  `debugmap:"sensitive"`
	SkipVerifyCA               bool                  `debugmap:"visible"`
	SecureSpiceDBTokensBySpace string                `debugmap:"sensitive"`
	SpicedbCAPath              string                `debugmap:"visible"`
}

func NewSpiceDBOptions ¶ added in v0.2.0

func NewSpiceDBOptions() SpiceDBOptions

func NewSpiceDBOptionsWithOptions ¶ added in v0.2.0

func NewSpiceDBOptionsWithOptions(opts ...SpiceDBOptionsOption) *SpiceDBOptions

NewSpiceDBOptionsWithOptions creates a new SpiceDBOptions with the passed in options set

func NewSpiceDBOptionsWithOptionsAndDefaults ¶ added in v0.2.0

func NewSpiceDBOptionsWithOptionsAndDefaults(opts ...SpiceDBOptionsOption) *SpiceDBOptions

NewSpiceDBOptionsWithOptionsAndDefaults creates a new SpiceDBOptions with the passed in options set starting from the defaults

func SpiceDBOptionsWithOptions ¶ added in v0.2.0

func SpiceDBOptionsWithOptions(s *SpiceDBOptions, opts ...SpiceDBOptionsOption) *SpiceDBOptions

SpiceDBOptionsWithOptions configures an existing SpiceDBOptions with the passed in options set

func (*SpiceDBOptions) AddFlags ¶ added in v0.2.0

func (so *SpiceDBOptions) AddFlags(fs *pflag.FlagSet)

func (SpiceDBOptions) DebugMap ¶ added in v0.2.0

func (s SpiceDBOptions) DebugMap() map[string]any

DebugMap returns a map form of SpiceDBOptions for debugging

func (*SpiceDBOptions) ToOption ¶ added in v0.2.0

func (s *SpiceDBOptions) ToOption() SpiceDBOptionsOption

ToOption returns a new SpiceDBOptionsOption that sets the values from the passed in SpiceDBOptions

func (*SpiceDBOptions) WithOptions ¶ added in v0.2.0

func (s *SpiceDBOptions) WithOptions(opts ...SpiceDBOptionsOption) *SpiceDBOptions

WithOptions configures the receiver SpiceDBOptions with the passed in options set

type SpiceDBOptionsOption ¶ added in v0.2.0

type SpiceDBOptionsOption func(s *SpiceDBOptions)

func WithEmbeddedSpiceDB ¶ added in v0.2.0

func WithEmbeddedSpiceDB(embeddedSpiceDB server.RunnableServer) SpiceDBOptionsOption

WithEmbeddedSpiceDB returns an option that can set EmbeddedSpiceDB on a SpiceDBOptions

func WithInsecure ¶ added in v0.2.0

func WithInsecure(insecure bool) SpiceDBOptionsOption

WithInsecure returns an option that can set Insecure on a SpiceDBOptions

func WithSecureSpiceDBTokensBySpace ¶ added in v0.2.0

func WithSecureSpiceDBTokensBySpace(secureSpiceDBTokensBySpace string) SpiceDBOptionsOption

WithSecureSpiceDBTokensBySpace returns an option that can set SecureSpiceDBTokensBySpace on a SpiceDBOptions

func WithSkipVerifyCA ¶ added in v0.2.0

func WithSkipVerifyCA(skipVerifyCA bool) SpiceDBOptionsOption

WithSkipVerifyCA returns an option that can set SkipVerifyCA on a SpiceDBOptions

func WithSpiceDBEndpoint ¶ added in v0.2.0

func WithSpiceDBEndpoint(spiceDBEndpoint string) SpiceDBOptionsOption

WithSpiceDBEndpoint returns an option that can set SpiceDBEndpoint on a SpiceDBOptions

func WithSpicedbCAPath ¶ added in v0.2.0

func WithSpicedbCAPath(spicedbCAPath string) SpiceDBOptionsOption

WithSpicedbCAPath returns an option that can set SpicedbCAPath on a SpiceDBOptions

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL