Index

A

action (canonical_service_mesh.models.istio.AuthorizationPolicySpec attribute) Action (class in canonical_service_mesh.enums) allow (canonical_service_mesh.enums.Action attribute) allowedRoutes (canonical_service_mesh.models.Listener attribute) AllowedRoutes (class in canonical_service_mesh.models) annotations (canonical_service_mesh.models.Metadata attribute)

app (canonical_service_mesh.enums.PolicyTargetType attribute) apply() (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager method) apply_many() (in module canonical_service_mesh.k8s.resource_manager) audiences (canonical_service_mesh.models.istio.JWTRule attribute) auth_key (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentials attribute) AuthorizationPolicy (in module canonical_service_mesh.k8s.types.istio) AuthorizationPolicySpec (class in canonical_service_mesh.models.istio)

B

Backend (in module canonical_service_mesh.k8s.types.envoy) BackendEndpoint (class in canonical_service_mesh.models.envoy) BackendObjectRef (class in canonical_service_mesh.models.envoy) BackendRef (class in canonical_service_mesh.models) backendRefs (canonical_service_mesh.models.envoy.ExtAuthHTTPService attribute) (canonical_service_mesh.models.GRPCRouteRule attribute) (canonical_service_mesh.models.HTTPRouteRule attribute)

BackendSpec (class in canonical_service_mesh.models.envoy) bootstrap (canonical_service_mesh.models.envoy.EnvoyProxySpec attribute) build_policy_resources_istio() (in module canonical_service_mesh.utils.istio)

C

canonical_service_mesh module canonical_service_mesh.enums module canonical_service_mesh.interfaces module canonical_service_mesh.interfaces.envoy_extension_server module canonical_service_mesh.interfaces.istio_ingress_config module canonical_service_mesh.interfaces.tailscale_credentials module canonical_service_mesh.k8s module canonical_service_mesh.k8s.resource_manager module canonical_service_mesh.k8s.types module canonical_service_mesh.k8s.types.envoy module canonical_service_mesh.k8s.types.gateway_api module canonical_service_mesh.k8s.types.istio module

canonical_service_mesh.models module canonical_service_mesh.models.envoy module canonical_service_mesh.models.istio module canonical_service_mesh.utils module canonical_service_mesh.utils.istio module certificateRefs (canonical_service_mesh.models.GatewayTLSConfig attribute) charm_kubernetes_label() (in module canonical_service_mesh.utils) claim (canonical_service_mesh.models.istio.ClaimToHeader attribute) ClaimToHeader (class in canonical_service_mesh.models.istio) clear() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigProvider method) client_id (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentials attribute) Condition (class in canonical_service_mesh.models.istio) connect (canonical_service_mesh.enums.Method attribute) controller_name (canonical_service_mesh.interfaces.envoy_extension_server.ControllerIdentityData attribute) ControllerIdentityData (class in canonical_service_mesh.interfaces.envoy_extension_server) controllerName (canonical_service_mesh.models.GatewayClassSpec attribute) create_charm_default_labels() (in module canonical_service_mesh.k8s.resource_manager) custom (canonical_service_mesh.enums.Action attribute) CustomResourceDefinitionManager (class in canonical_service_mesh.k8s.resource_manager)

D

DEFAULT_EXTENSION_SERVER_PORT (in module canonical_service_mesh.interfaces.envoy_extension_server) DEFAULT_HEADERS_TO_DOWNSTREAM_ON_ALLOW (in module canonical_service_mesh.interfaces.istio_ingress_config) DEFAULT_HEADERS_TO_DOWNSTREAM_ON_DENY (in module canonical_service_mesh.interfaces.istio_ingress_config) DEFAULT_HEADERS_TO_UPSTREAM_ON_ALLOW (in module canonical_service_mesh.interfaces.istio_ingress_config) DEFAULT_INCLUDE_HEADERS_IN_CHECK (in module canonical_service_mesh.interfaces.istio_ingress_config) DEFAULT_RELATION_NAME (in module canonical_service_mesh.interfaces.envoy_extension_server) (in module canonical_service_mesh.interfaces.tailscale_credentials)

delete (canonical_service_mesh.enums.Method attribute) delete() (canonical_service_mesh.k8s.resource_manager.CustomResourceDefinitionManager method) (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager method) (canonical_service_mesh.k8s.resource_manager.PolicyResourceManager method) delete_many() (in module canonical_service_mesh.k8s.resource_manager) deny (canonical_service_mesh.enums.Action attribute)

E

endpoints (canonical_service_mesh.models.envoy.BackendSpec attribute) EnvoyProxy (in module canonical_service_mesh.k8s.types.envoy) EnvoyProxySpec (class in canonical_service_mesh.models.envoy) established() (canonical_service_mesh.k8s.resource_manager.CustomResourceDefinitionManager method) ext_authz_port (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) ext_authz_protocol (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) ext_authz_service_name (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute)

extAuth (canonical_service_mesh.models.envoy.SecurityPolicySpec attribute) ExtAuth (class in canonical_service_mesh.models.envoy) ExtAuthHTTPService (class in canonical_service_mesh.models.envoy) extension_server_fqdn (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerData attribute) extension_server_port (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerData attribute) ExtensionServerData (class in canonical_service_mesh.interfaces.envoy_extension_server) ExtensionServerProvider (class in canonical_service_mesh.interfaces.envoy_extension_server) ExtensionServerRequirer (class in canonical_service_mesh.interfaces.envoy_extension_server)

F

FakeApiError (class in canonical_service_mesh.k8s.resource_manager) filters (canonical_service_mesh.models.GRPCRouteRule attribute) (canonical_service_mesh.models.HTTPRouteRule attribute) forwardOriginalToken (canonical_service_mesh.models.istio.JWTRule attribute) fqdn (canonical_service_mesh.models.envoy.BackendEndpoint attribute)

FQDNEndpoint (class in canonical_service_mesh.models.envoy) From (class in canonical_service_mesh.models.istio) from_ (canonical_service_mesh.models.istio.Rule attribute) FromHeader (class in canonical_service_mesh.models.istio) fromHeaders (canonical_service_mesh.models.istio.JWTRule attribute)

G

Gateway (in module canonical_service_mesh.k8s.types.gateway_api) GatewayClass (in module canonical_service_mesh.k8s.types.gateway_api) gatewayClassName (canonical_service_mesh.models.GatewaySpec attribute) (canonical_service_mesh.models.IstioGatewaySpec attribute) GatewayClassSpec (class in canonical_service_mesh.models) GatewaySpec (class in canonical_service_mesh.models) GatewayTLSConfig (class in canonical_service_mesh.models) generate_telemetry_labels() (in module canonical_service_mesh.utils) get (canonical_service_mesh.enums.Method attribute) get_controller_identity() (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerProvider method) get_deployed_resources() (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager method) get_ext_authz_provider_name() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigProvider method) (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer method) get_extension_server_data() (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerRequirer method)

get_peer_identity_for_juju_application() (in module canonical_service_mesh.utils) get_peer_identity_for_service_account() (in module canonical_service_mesh.utils) get_provider_data() (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentialsRequirer method) get_provider_ext_authz_info() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer method) group (canonical_service_mesh.models.envoy.BackendObjectRef attribute) (canonical_service_mesh.models.envoy.LocalPolicyTargetRef attribute) (canonical_service_mesh.models.istio.PolicyTargetReference attribute) (canonical_service_mesh.models.ParametersRef attribute) (canonical_service_mesh.models.SecretObjectReference attribute) GRPCMethodMatch (class in canonical_service_mesh.models) GRPCRoute (in module canonical_service_mesh.k8s.types.gateway_api) GRPCRouteMatch (class in canonical_service_mesh.models) GRPCRouteResource (class in canonical_service_mesh.models) GRPCRouteResourceSpec (class in canonical_service_mesh.models) GRPCRouteRule (class in canonical_service_mesh.models)

H

head (canonical_service_mesh.enums.Method attribute) header (canonical_service_mesh.models.istio.ClaimToHeader attribute) headers_to_downstream_on_allow (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) headers_to_downstream_on_deny (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) headers_to_upstream_on_allow (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) host (canonical_service_mesh.models.envoy.OpenTelemetrySink attribute) hostname (canonical_service_mesh.models.envoy.FQDNEndpoint attribute) (canonical_service_mesh.models.Listener attribute)

hosts (canonical_service_mesh.models.istio.Operation attribute) http (canonical_service_mesh.models.envoy.ExtAuth attribute) HTTPPathMatch (class in canonical_service_mesh.models) HTTPRoute (in module canonical_service_mesh.k8s.types.gateway_api) HTTPRouteMatch (class in canonical_service_mesh.models) HTTPRouteResource (class in canonical_service_mesh.models) HTTPRouteResourceSpec (class in canonical_service_mesh.models) HTTPRouteRule (class in canonical_service_mesh.models)

I

include_headers_in_check (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData attribute) IngressConfigProvider (class in canonical_service_mesh.interfaces.istio_ingress_config) IngressConfigRequirer (class in canonical_service_mesh.interfaces.istio_ingress_config) ipBlocks (canonical_service_mesh.models.istio.Source attribute) is_fake_authz_config() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer method) is_ready (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerRequirer property) is_ready() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigProvider method) (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer method) (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentialsRequirer method)

is_ready_for_use() (canonical_service_mesh.interfaces.tailscale_credentials.ProviderAppData method) issuer (canonical_service_mesh.models.istio.JWTRule attribute) istio (canonical_service_mesh.enums.MeshType attribute) IstioGatewayResource (class in canonical_service_mesh.models) IstioGatewaySpec (class in canonical_service_mesh.models)

J

jsonPatches (canonical_service_mesh.models.envoy.ProxyBootstrap attribute) JSONPatchOperation (class in canonical_service_mesh.models.envoy)

jwksUri (canonical_service_mesh.models.istio.JWTRule attribute) JWTRule (class in canonical_service_mesh.models.istio) jwtRules (canonical_service_mesh.models.istio.RequestAuthenticationSpec attribute)

K

K8sApiError key (canonical_service_mesh.models.istio.Condition attribute) kind (canonical_service_mesh.models.envoy.BackendObjectRef attribute) (canonical_service_mesh.models.envoy.LocalPolicyTargetRef attribute) (canonical_service_mesh.models.istio.PolicyTargetReference attribute) (canonical_service_mesh.models.ParametersRef attribute) (canonical_service_mesh.models.SecretObjectReference attribute)

KubernetesResourceManager (class in canonical_service_mesh.k8s.resource_manager)

L

label_configmap_name_template (in module canonical_service_mesh.utils.istio) labels (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager attribute) (canonical_service_mesh.models.Metadata attribute) lightkube_client (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager attribute) LightkubeResourcesList (in module canonical_service_mesh.k8s.types) LightkubeResourceType (in module canonical_service_mesh.k8s.types)

LightkubeResourceTypesSet (in module canonical_service_mesh.k8s.types) Listener (class in canonical_service_mesh.models) listeners (canonical_service_mesh.models.GatewaySpec attribute) (canonical_service_mesh.models.IstioGatewaySpec attribute) LocalPolicyTargetRef (class in canonical_service_mesh.models.envoy) log (canonical_service_mesh.k8s.resource_manager.CustomResourceDefinitionManager attribute) login_server (canonical_service_mesh.interfaces.tailscale_credentials.ProviderAppData attribute)

M

matches (canonical_service_mesh.models.GRPCRouteRule attribute) (canonical_service_mesh.models.HTTPRouteRule attribute) matchLabels (canonical_service_mesh.models.istio.WorkloadSelector attribute) MeshType (class in canonical_service_mesh.enums) metadata (canonical_service_mesh.models.GRPCRouteResource attribute) (canonical_service_mesh.models.HTTPRouteResource attribute) (canonical_service_mesh.models.IstioGatewayResource attribute) Metadata (class in canonical_service_mesh.models) method (canonical_service_mesh.models.GRPCMethodMatch attribute) (canonical_service_mesh.models.GRPCRouteMatch attribute) Method (class in canonical_service_mesh.enums) methods (canonical_service_mesh.models.istio.Operation attribute) metrics (canonical_service_mesh.models.envoy.TelemetryConfig attribute) MetricsConfig (class in canonical_service_mesh.models.envoy) MetricSink (class in canonical_service_mesh.models.envoy) model_config (canonical_service_mesh.interfaces.envoy_extension_server.ControllerIdentityData attribute) (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerData attribute) (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentials attribute) (canonical_service_mesh.models.istio.Rule attribute)

module canonical_service_mesh canonical_service_mesh.enums canonical_service_mesh.interfaces canonical_service_mesh.interfaces.envoy_extension_server canonical_service_mesh.interfaces.istio_ingress_config canonical_service_mesh.interfaces.tailscale_credentials canonical_service_mesh.k8s canonical_service_mesh.k8s.resource_manager canonical_service_mesh.k8s.types canonical_service_mesh.k8s.types.envoy canonical_service_mesh.k8s.types.gateway_api canonical_service_mesh.k8s.types.istio canonical_service_mesh.models canonical_service_mesh.models.envoy canonical_service_mesh.models.istio canonical_service_mesh.utils canonical_service_mesh.utils.istio

N

name (canonical_service_mesh.models.BackendRef attribute) (canonical_service_mesh.models.envoy.BackendObjectRef attribute) (canonical_service_mesh.models.envoy.LocalPolicyTargetRef attribute) (canonical_service_mesh.models.istio.FromHeader attribute) (canonical_service_mesh.models.istio.PolicyTargetReference attribute) (canonical_service_mesh.models.istio.Provider attribute) (canonical_service_mesh.models.Listener attribute) (canonical_service_mesh.models.Metadata attribute) (canonical_service_mesh.models.ParametersRef attribute) (canonical_service_mesh.models.ParentRef attribute) (canonical_service_mesh.models.SecretObjectReference attribute) namespace (canonical_service_mesh.interfaces.envoy_extension_server.ControllerIdentityData attribute) (canonical_service_mesh.models.BackendRef attribute) (canonical_service_mesh.models.envoy.BackendObjectRef attribute) (canonical_service_mesh.models.istio.PolicyTargetReference attribute) (canonical_service_mesh.models.Metadata attribute) (canonical_service_mesh.models.ParametersRef attribute) (canonical_service_mesh.models.ParentRef attribute) (canonical_service_mesh.models.SecretObjectReference attribute)

namespaces (canonical_service_mesh.models.AllowedRoutes attribute) (canonical_service_mesh.models.istio.Source attribute) notHosts (canonical_service_mesh.models.istio.Operation attribute) notIpBlocks (canonical_service_mesh.models.istio.Source attribute) notMethods (canonical_service_mesh.models.istio.Operation attribute) notPaths (canonical_service_mesh.models.istio.Operation attribute) notPrincipals (canonical_service_mesh.models.istio.Source attribute) notRequestPrincipals (canonical_service_mesh.models.istio.Source attribute) notValues (canonical_service_mesh.models.istio.Condition attribute)

O

op (canonical_service_mesh.models.envoy.JSONPatchOperation attribute) openTelemetry (canonical_service_mesh.models.envoy.MetricSink attribute) OpenTelemetrySink (class in canonical_service_mesh.models.envoy)

operation (canonical_service_mesh.models.istio.To attribute) Operation (class in canonical_service_mesh.models.istio) options (canonical_service_mesh.enums.Method attribute) outputClaimToHeaders (canonical_service_mesh.models.istio.JWTRule attribute)

P

parametersRef (canonical_service_mesh.models.GatewayClassSpec attribute) (canonical_service_mesh.models.GatewaySpec attribute) ParametersRef (class in canonical_service_mesh.models) ParentRef (class in canonical_service_mesh.models) parentRefs (canonical_service_mesh.models.GRPCRouteResourceSpec attribute) (canonical_service_mesh.models.HTTPRouteResourceSpec attribute) patch (canonical_service_mesh.enums.Method attribute) patch() (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager method) patch_many() (in module canonical_service_mesh.k8s.resource_manager) path (canonical_service_mesh.models.envoy.ExtAuthHTTPService attribute) (canonical_service_mesh.models.envoy.JSONPatchOperation attribute) (canonical_service_mesh.models.HTTPRouteMatch attribute) paths (canonical_service_mesh.models.istio.Operation attribute) POLICY_RESOURCE_TYPES (in module canonical_service_mesh.utils.istio) PolicyResourceManager (class in canonical_service_mesh.k8s.resource_manager) PolicyTargetReference (class in canonical_service_mesh.models.istio) PolicyTargetType (class in canonical_service_mesh.enums) port (canonical_service_mesh.models.BackendRef attribute) (canonical_service_mesh.models.envoy.FQDNEndpoint attribute) (canonical_service_mesh.models.envoy.OpenTelemetrySink attribute) (canonical_service_mesh.models.Listener attribute)

ports (canonical_service_mesh.models.istio.Operation attribute) post (canonical_service_mesh.enums.Method attribute) prefix (canonical_service_mesh.models.istio.FromHeader attribute) principals (canonical_service_mesh.models.istio.Source attribute) protocol (canonical_service_mesh.models.Listener attribute) provider (canonical_service_mesh.models.istio.AuthorizationPolicySpec attribute) Provider (class in canonical_service_mesh.models.istio) ProviderAppData (class in canonical_service_mesh.interfaces.tailscale_credentials) ProviderIngressConfigData (class in canonical_service_mesh.interfaces.istio_ingress_config) ProxyBootstrap (class in canonical_service_mesh.models.envoy) publish() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigProvider method) (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentialsProvider method) publish_controller_identity() (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerRequirer method) publish_data() (canonical_service_mesh.interfaces.envoy_extension_server.ExtensionServerProvider method) publish_ext_authz_provider_name() (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer method) put (canonical_service_mesh.enums.Method attribute)

R

reconcile() (canonical_service_mesh.k8s.resource_manager.CustomResourceDefinitionManager method) (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager method) (canonical_service_mesh.k8s.resource_manager.PolicyResourceManager method) reconcile_charm_labels() (in module canonical_service_mesh.utils.istio) ReferenceGrant (in module canonical_service_mesh.k8s.types.gateway_api) relations (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigProvider property) (canonical_service_mesh.interfaces.istio_ingress_config.IngressConfigRequirer property) (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentialsProvider property) (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentialsRequirer property)

RequestAuthenticationSpec (class in canonical_service_mesh.models.istio) requestPrincipals (canonical_service_mesh.models.istio.Source attribute) resource_types (canonical_service_mesh.k8s.resource_manager.KubernetesResourceManager attribute) Rule (class in canonical_service_mesh.models.istio) rules (canonical_service_mesh.models.GRPCRouteResourceSpec attribute) (canonical_service_mesh.models.HTTPRouteResourceSpec attribute) (canonical_service_mesh.models.istio.AuthorizationPolicySpec attribute)

S

secret_id (canonical_service_mesh.interfaces.tailscale_credentials.ProviderAppData attribute) SecretObjectReference (class in canonical_service_mesh.models) sectionName (canonical_service_mesh.models.ParentRef attribute) SecurityPolicy (in module canonical_service_mesh.k8s.types.envoy) SecurityPolicySpec (class in canonical_service_mesh.models.envoy) selector (canonical_service_mesh.models.istio.AuthorizationPolicySpec attribute) (canonical_service_mesh.models.istio.RequestAuthenticationSpec attribute)

service (canonical_service_mesh.models.GRPCMethodMatch attribute) sinks (canonical_service_mesh.models.envoy.MetricsConfig attribute) source (canonical_service_mesh.models.istio.From attribute) Source (class in canonical_service_mesh.models.istio) spec (canonical_service_mesh.models.GRPCRouteResource attribute) (canonical_service_mesh.models.HTTPRouteResource attribute) (canonical_service_mesh.models.IstioGatewayResource attribute)

T

tags (canonical_service_mesh.interfaces.tailscale_credentials.ProviderAppData attribute) TailscaleCredentials (class in canonical_service_mesh.interfaces.tailscale_credentials) TailscaleCredentialsProvider (class in canonical_service_mesh.interfaces.tailscale_credentials) TailscaleCredentialsRequirer (class in canonical_service_mesh.interfaces.tailscale_credentials) targetRef (canonical_service_mesh.models.envoy.SecurityPolicySpec attribute) targetRefs (canonical_service_mesh.models.istio.AuthorizationPolicySpec attribute) (canonical_service_mesh.models.istio.RequestAuthenticationSpec attribute) telemetry (canonical_service_mesh.models.envoy.EnvoyProxySpec attribute) TelemetryConfig (class in canonical_service_mesh.models.envoy)

tls (canonical_service_mesh.models.Listener attribute) to (canonical_service_mesh.models.istio.Rule attribute) To (class in canonical_service_mesh.models.istio) to_databag() (canonical_service_mesh.interfaces.tailscale_credentials.ProviderAppData method) to_secret_content() (canonical_service_mesh.interfaces.tailscale_credentials.TailscaleCredentials method) trace (canonical_service_mesh.enums.Method attribute) type (canonical_service_mesh.models.envoy.MetricSink attribute) (canonical_service_mesh.models.envoy.ProxyBootstrap attribute) (canonical_service_mesh.models.HTTPPathMatch attribute)

U

unit (canonical_service_mesh.enums.PolicyTargetType attribute)

V

validate_ext_authz_port() (canonical_service_mesh.interfaces.istio_ingress_config.ProviderIngressConfigData class method) validate_provider_action() (canonical_service_mesh.models.istio.AuthorizationPolicySpec method) validate_target() (canonical_service_mesh.models.istio.AuthorizationPolicySpec method) (canonical_service_mesh.models.istio.RequestAuthenticationSpec method)

value (canonical_service_mesh.models.envoy.JSONPatchOperation attribute) (canonical_service_mesh.models.envoy.ProxyBootstrap attribute) (canonical_service_mesh.models.HTTPPathMatch attribute) values (canonical_service_mesh.models.istio.Condition attribute)

W

when (canonical_service_mesh.models.istio.Rule attribute)

WorkloadSelector (class in canonical_service_mesh.models.istio)