NewAccessPolicyRoleProvider creates a new RoleProvider that uses the access policy in the state.

NewHTTPHandler creates a new HTTP handler that will proxy requests to the workload proxy.

NewPGPAccessValidator creates a new PGP signature validator.

NewReconciler creates a new Reconciler.

LegacyHostPrefix is the prefix used to distinguish subdomain requests in the legacy domain format which should be proxied to the workload clusters.

PublicKeyIDCookie is the name of the cookie used for workload proxy request authentication that contains the public key ID.

PublicKeyIDSignatureBase64Cookie is the name of the cookie used for workload proxy request authentication that contains the signed & base64'd public key ID.

AccessPolicyRoleProvider provides the role for a cluster by looking into the context and evaluating access policies.

HTTPHandler is an HTTP handler that will proxy matching requests to the workload proxy.

PGPAccessValidator validates a signature using PGP keys and roles/ACLs.

Reconciler reconciles the load balancers for a cluster.

AccessValidator validates workload proxy requests against the given cluster by the given public key ID and its signed & base64'd form.

ProxyProvider is a provider of HTTP proxies for the exposed services.

RoleProvider provides the current actor's role for a cluster.