Skip to content

ext_authz: configurable HTTP status code for network errors.#6669

Merged
mattklein123 merged 17 commits intoenvoyproxy:masterfrom
gsagula:status-on-error
May 23, 2019
Merged

ext_authz: configurable HTTP status code for network errors.#6669
mattklein123 merged 17 commits intoenvoyproxy:masterfrom
gsagula:status-on-error

Conversation

@gsagula
Copy link
Member

@gsagula gsagula commented Apr 22, 2019

Description: Adds a configurable HTTP status code that the filter will use to respond to the client when a network error occurs during the external authorization call.

Risk Level: Low
Testing: Yes
Docs Changes: Yes
Release Notes: Yes
Fixes #6119 #5974

Gabriel added 5 commits April 13, 2019 19:20
Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
…tus-on-error

Signed-off-by: Gabriel gsagula@gmail.com
Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
Copy link
Member

@dio dio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, @gsagula! Looks good. Let's fix the conflicted files. I have several comments to start with:

@gsagula
Copy link
Member Author

gsagula commented Apr 23, 2019

@dio Thanks for the review. I'm dealing with some other issues but I will try to get back to it asap.

Gabriel added 3 commits April 24, 2019 15:54
Signed-off-by: Gabriel <gsagula@gmail.com>
…tus-on-error

Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
@gsagula
Copy link
Member Author

gsagula commented Apr 25, 2019

/retest

@repokitteh-read-only
Copy link

🔨 rebuilding ci/circleci: coverage (failed build)

🐱

Caused by: a #6669 (comment) was created by @gsagula.

see: more, trace.

@gsagula
Copy link
Member Author

gsagula commented Apr 25, 2019

@dio PTAL. Thank you.

Gabriel added 2 commits April 26, 2019 10:16
…tus-on-error

Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
@gsagula
Copy link
Member Author

gsagula commented Apr 26, 2019

@dio I fixed the version history order. Thanks!

Gabriel added 2 commits April 26, 2019 15:03
Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
@stale
Copy link

stale bot commented May 4, 2019

This pull request has been automatically marked as stale because it has not had activity in the last 7 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

@stale stale bot added the stale stalebot believes this issue/PR has not been touched recently label May 4, 2019
@gsagula
Copy link
Member Author

gsagula commented May 4, 2019

@dio Whenever you get time, please let me know if there is anything else that needs to be changed. Thanks!

@stale stale bot removed the stale stalebot believes this issue/PR has not been touched recently label May 4, 2019
dio
dio previously approved these changes May 5, 2019
Copy link
Member

@dio dio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry. This is good. Thanks @gsagula!

Copy link
Member

@mattklein123 mattklein123 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, 1 question/comment.

/wait

@mattklein123 mattklein123 self-assigned this May 6, 2019
@stale
Copy link

stale bot commented May 13, 2019

This pull request has been automatically marked as stale because it has not had activity in the last 7 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

@stale stale bot added stale stalebot believes this issue/PR has not been touched recently and removed stale stalebot believes this issue/PR has not been touched recently labels May 13, 2019
Copy link

@hanyu-liu hanyu-liu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like this will not work for gRPC based ext-authz? May introduce a behavioral difference between protocols.

Ref: #6148

@gsagula
Copy link
Member Author

gsagula commented May 17, 2019

Sorry for the delay. Looking at this now.

Signed-off-by: Gabriel <gsagula@gmail.com>
Gabriel added 4 commits May 21, 2019 11:30
Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
Signed-off-by: Gabriel <gsagula@gmail.com>
…tus-on-error

Signed-off-by: Gabriel <gsagula@gmail.com>
Copy link
Member

@mattklein123 mattklein123 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@mattklein123 mattklein123 merged commit b0c3683 into envoyproxy:master May 23, 2019
mpuncel added a commit to mpuncel/envoy that referenced this pull request May 23, 2019
* master:
  test: Add coverage for IsolatedStoreImpl::find* (envoyproxy#7043)
  server: add ProcessContext (envoyproxy#7018)
  config: Implement both versions of onConfigUpdate() everywhere (envoyproxy#6879)
  gzip: add test for various compression strategy and level (envoyproxy#7055)
  Fix typo in comment for rds.RouteConfiguration.validate_clusters (envoyproxy#7056)
  mysql_filter: add handling for partial messages (envoyproxy#6885)
  migrate from v2alpha to v2 (envoyproxy#7044)
  tests: fix tsan test flake (envoyproxy#7052)
  upstream: fix HostUtility::healthFlagsToString (envoyproxy#7051)
  tech debt: eliminate absl::make_unique (envoyproxy#7034)
  router: add a route name field in route.Route list (envoyproxy#6776)
  ext_authz: configurable HTTP status code for network errors. (envoyproxy#6669)
  stats: remove const-cast for symbol-table in edcs_filter_test.cc (envoyproxy#7045)
  build: bump libevent to 3b1864b. (envoyproxy#7012)
  stats: improve test-coverage for a few stats-related functions. (envoyproxy#7038)
  docs: fix csrf filter source origin note (envoyproxy#7041)
  Fix common typo: grcp -> grpc (envoyproxy#7040)
  snapshot (envoyproxy#7036)

Signed-off-by: Michael Puncel <mpuncel@squareup.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Envoy returns 403 for failed gRPC ext_authz requests

4 participants