Documentation
¶
Index ¶
Constants ¶
View Source
const ( APLName = "application-layer" RoleName = "application-layer" PodSecurityPolicyName = "application-layer" ApplicationLayerDaemonsetName = "l7-log-collector" L7CollectorContainerName = "l7-collector" ProxyContainerName = "envoy-proxy" EnvoyLogsVolumeName = "envoy-logs" EnvoyConfigMapName = "envoy-config" EnvoyConfigMapKey = "envoy-config.yaml" FelixSync = "felix-sync" DikastesSyncVolumeName = "dikastes-sync" DikastesContainerName = "dikastes" ModSecurityRulesetVolumeName = "modsecurity-ruleset" ModSecurityRulesetVolumePath = "/etc/modsecurity-ruleset" ModSecurityRulesetConfigMapName = "modsecurity-ruleset" ModSecurityRulesetHashAnnotation = "hash.operator.tigera.io/modsecurity-ruleset" CalicoLogsVolumeName = "var-log-calico" CalicologsVolumePath = "/var/log/calico" )
Variables ¶
This section is empty.
Functions ¶
func ApplicationLayer ¶
Types ¶
type Config ¶
type Config struct {
// Required config.
PullSecrets []*corev1.Secret
Installation *operatorv1.InstallationSpec
OsType rmeta.OSType
// Optional config for WAF.
WAFEnabled bool
ModSecurityConfigMap *corev1.ConfigMap
// Optional config for L7 logs.
LogsEnabled bool
LogRequestsPerInterval *int64
LogIntervalSeconds *int64
// Optional config for ALP
ALPEnabled bool
// envoy user-configurable overrides
UseRemoteAddressXFF bool
NumTrustedHopsXFF int32
// Whether the cluster supports pod security policies.
UsePSP bool
ApplicationLayer *operatorv1.ApplicationLayer
// contains filtered or unexported fields
}
Config contains all the config information ApplicationLayer needs to render component.
Click to show internal directories.
Click to hide internal directories.