mirror of https://github.com/linkerd/linkerd2.git
b98c86700f
We've implemented a new controller--in Rust!--that implements discovery APIs for inbound server policies. This change imports this code from linkerd/polixy@25af9b5e. This policy controller watches nodes, pods, and the recently-introduced `policy.linkerd.io` CRD resources. It indexes these resources and serves a gRPC API that will be used by proxies to configure the inbound proxy for policy enforcement. This change introduces a new policy-controller container image and adds a container to the `Linkerd-destination` pod along with a `linkerd-policy` service to be used by proxies. This change adds a `policyController` object to the Helm `values.yaml` that supports configuring the policy controller at runtime. Proxies are not currently configured to use the policy controller at runtime. This will change in an upcoming proxy release. |
||
|---|---|---|
| .. | ||
| addr | ||
| admin | ||
| charts | ||
| cmd | ||
| config | ||
| filesonly | ||
| flags | ||
| healthcheck | ||
| identity | ||
| inject | ||
| issuercerts | ||
| k8s | ||
| multicluster | ||
| profiles | ||
| prometheus | ||
| protohttp | ||
| public | ||
| servicemirror | ||
| tls | ||
| trace | ||
| tree | ||
| util | ||
| version | ||