Skip to content

ext_authz: add grpc_service field on the per-route filter#40169

Merged
agrawroh merged 17 commits into
envoyproxy:mainfrom
agrawroh:ext-authz-cluster
Aug 22, 2025
Merged

ext_authz: add grpc_service field on the per-route filter#40169
agrawroh merged 17 commits into
envoyproxy:mainfrom
agrawroh:ext-authz-cluster

Merge branch 'main' into ext-authz-cluster

0b87c69
Select commit
Loading
Failed to load commit list.
CI (Envoy) / Envoy/Prechecks succeeded Aug 19, 2025 in 13m 22s

Envoy/Prechecks (success)

Check has finished

Details

Check run finished (success ✔️)

The check run can be viewed here:

Envoy/Prechecks (pr/40169/main@0b87c69)

Check started by

Request (pr/40169/main@0b87c69)

agrawroh @agrawroh 0b87c69 #40169 merge main@69fe44b

ext_authz: add grpc_service field on the per-route filter

Description

This PR adds support for per-route gRPC service override in the ext_authz HTTP filter, allowing different routes to use different external authorization backends. Routes would now be able to specify a different authorization service by configuring grpc_service in the per-route check_settings.


Commit Message: ext_authz: add grpc_service field on the per-route filter
Additional Description: Add a new grpc_service field on the per-route ExtAuthZ filter to be able to override the AuthService backend on a per-route basis.
Risk Level: Low
Testing: Added Unit & Integration Tests
Docs Changes: Added
Release Notes: Added

Environment

Request variables

Key Value
ref 9a4c74f
sha 0b87c69
pr 40169
base-sha 69fe44b
actor agrawroh @agrawroh
message ext_authz: add grpc_service field on the per-route filter...
started 1755583735.498295
target-branch main
trusted false
Build image

Container image/s (as used in this CI run)

Key Value
default envoyproxy/envoy-build-ubuntu:f4a881a1205e8e6db1a57162faf3df7aed88eae8
mobile envoyproxy/envoy-build-ubuntu:mobile-f4a881a1205e8e6db1a57162faf3df7aed88eae8
Version

Envoy version (as used in this CI run)

Key Value
major 1
minor 36
patch 0
dev true