mirror of https://github.com/linkerd/linkerd2.git
b98c86700f
We've implemented a new controller--in Rust!--that implements discovery APIs for inbound server policies. This change imports this code from linkerd/polixy@25af9b5e. This policy controller watches nodes, pods, and the recently-introduced `policy.linkerd.io` CRD resources. It indexes these resources and serves a gRPC API that will be used by proxies to configure the inbound proxy for policy enforcement. This change introduces a new policy-controller container image and adds a container to the `Linkerd-destination` pod along with a `linkerd-policy` service to be used by proxies. This change adds a `policyController` object to the Helm `values.yaml` that supports configuring the policy controller at runtime. Proxies are not currently configured to use the policy controller at runtime. This will change in an upcoming proxy release. |
||
|---|---|---|
| .. | ||
| cmd | ||
| flag | ||
| table | ||
| Dockerfile-bin | ||
| main.go | ||