Envoy: Ext_authz server_uri.uri for http_service

Created on 27 Feb 2019  路  5Comments  路  Source: envoyproxy/envoy

Today, ext_authz http_service filter configuration requires the property server_uri.uri to be filled but it does not seem to be used although envoy will fail to boot up if it does not have at least the string "http".
I was expecting that the filter would at least use that information to connect to the correct upstream authentication service and send the correct hostname for my load balancer but instead it seems to only use the cluster information and then it sends the original host in this request.
Is this supposition correct? Or am I missing something?

areext_authz enhancement help wanted

All 5 comments

@gsagula

@pedro-tramontin, your supposition is correct. The use of URI was more of a suggestion in the initial design. IRC, the idea was that only use the URI object in the future. I think we could make it optional and more functional when defined. @mattklein123 can you tag this as an issue, please? Thanks!

/assign gsagula

@gsagula, in that case, how to send the authorization request to URI something like this
http://host/api/authorize

I am also facing this issue, any updates on this? Can't we use http_service in ext_authz filter at all?

Was this page helpful?
0 / 5 - 0 ratings