Backport of Explicitly enable WebSocket upgrades into release/1.16.x (#18211)

This PR explicitly enables WebSocket upgrades in Envoy's UpgradeConfig for all
proxy types. (API Gateway, Ingress, and Sidecar.)

Fixes #8283

Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
This commit is contained in:
hc-github-team-consul-core 2023-07-20 17:57:13 -04:00 committed by GitHub
parent f618948c30
commit 354f1dc6ea
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
77 changed files with 3873 additions and 3772 deletions

3
.changelog/18150.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:improvement
xds: Explicitly enable WebSocket connection upgrades in HTTP connection manager
```

View File

@ -2470,6 +2470,10 @@ func makeHTTPFilter(opts listenerFilterOpts) (*envoy_listener_v3.Filter, error)
// sampled.
RandomSampling: &envoy_type_v3.Percent{Value: 0.0},
},
// Explicitly enable WebSocket upgrades for all HTTP listeners
UpgradeConfigs: []*envoy_http_v3.HttpConnectionManager_UpgradeConfig{
{UpgradeType: "websocket"},
},
}
if opts.tracing != nil {

View File

@ -209,7 +209,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -210,7 +210,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -233,7 +233,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -309,7 +309,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -58,6 +58,11 @@
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}
@ -239,7 +244,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -58,6 +58,11 @@
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}

View File

@ -95,6 +95,11 @@
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}

View File

@ -49,7 +49,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -58,6 +58,11 @@
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}

View File

@ -164,6 +164,11 @@
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}
@ -247,6 +252,11 @@
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}
@ -380,6 +390,11 @@
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}

View File

@ -214,6 +214,11 @@
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
],
"stripAnyHostPort": true
}
}

View File

@ -49,7 +49,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -199,7 +199,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -49,7 +49,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -230,7 +235,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -70,7 +70,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -109,7 +114,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -297,7 +307,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -56,7 +56,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -230,7 +235,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -49,7 +49,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -223,7 +228,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -49,7 +49,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -223,7 +228,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -195,7 +195,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -54,13 +54,13 @@
{
"@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
"name": "public_listener:0.0.0.0:9999",
"statPrefix": "custom.stats",
"address": {
"socketAddress": {
"address": "0.0.0.0",
"portValue": 9999
}
},
"statPrefix": "custom.stats",
"filterChains": [
{
"filters": [
@ -193,7 +193,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -194,7 +194,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -195,7 +195,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -193,7 +193,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -36,7 +36,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -210,7 +215,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -192,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -111,9 +109,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -127,9 +123,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -143,9 +137,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -159,9 +151,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -175,9 +165,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -216,9 +204,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -227,7 +213,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -236,9 +227,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -111,9 +109,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -127,9 +123,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -143,9 +137,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -159,9 +151,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -175,9 +165,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -221,9 +209,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -232,7 +218,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -241,9 +232,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -35,7 +35,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -35,7 +35,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -35,7 +35,12 @@
],
"tracing": {
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -20,9 +20,7 @@
"statPrefix": "upstream.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -49,13 +47,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -104,9 +103,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -124,9 +121,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -20,9 +20,7 @@
"statPrefix": "upstream.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -49,13 +47,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -104,9 +103,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -124,9 +121,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -20,9 +20,7 @@
"statPrefix": "upstream.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -88,9 +89,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -108,9 +107,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -20,9 +20,7 @@
"statPrefix": "upstream.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -36,13 +34,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -91,9 +90,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -111,9 +108,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -231,7 +231,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -111,9 +109,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -127,9 +123,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -143,9 +137,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -159,9 +151,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -175,9 +165,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -227,7 +215,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -236,9 +229,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -64,10 +64,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -91,9 +94,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -111,9 +112,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -48,10 +48,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -106,10 +109,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -133,9 +139,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -153,9 +157,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -48,13 +48,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -109,10 +110,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -136,9 +140,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -156,9 +158,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -107,9 +107,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -120,13 +118,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -135,9 +134,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -96,9 +96,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -113,9 +111,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -129,9 +125,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -145,9 +139,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -161,9 +153,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -177,9 +167,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -197,9 +185,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -208,7 +194,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -217,9 +208,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -107,10 +105,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -119,9 +120,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -111,9 +109,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -127,9 +123,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -143,9 +137,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -159,9 +151,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -175,9 +165,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -195,9 +183,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -206,7 +192,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -215,9 +206,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -48,10 +48,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -100,9 +103,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -120,9 +121,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -94,9 +94,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -111,9 +109,7 @@
"key": "trust-domain",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\1"
@ -127,9 +123,7 @@
"key": "partition",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\2"
@ -143,9 +137,7 @@
"key": "namespace",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\3"
@ -159,9 +151,7 @@
"key": "datacenter",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\4"
@ -175,9 +165,7 @@
"key": "service",
"regexValueRewrite": {
"pattern": {
"googleRe2": {
},
"googleRe2": {},
"regex": ".*URI=spiffe://([^/]+.[^/]+)(?:/ap/([^/]+))?/ns/([^/]+)/dc/([^/]+)/svc/([^/;,]+).*"
},
"substitution": "\\5"
@ -195,13 +183,9 @@
}
],
"tracing": {
"randomSampling": {
}
},
"http2ProtocolOptions": {
"randomSampling": {}
},
"http2ProtocolOptions": {},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
"subject": true,
@ -209,7 +193,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -218,9 +207,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -49,13 +47,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_443",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "443"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -66,9 +67,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -82,10 +81,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -49,13 +47,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -82,9 +81,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -111,13 +108,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -49,13 +47,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -113,9 +112,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -129,13 +126,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,13 +34,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -69,9 +68,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -85,13 +82,14 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"http2ProtocolOptions": {
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -25,9 +25,7 @@
"statPrefix": "ingress_upstream_8080_s1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080_s1"
@ -41,10 +39,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -53,9 +54,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "s1.example.com-cert",
@ -93,9 +92,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -109,10 +106,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -121,9 +121,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "*.example.com-cert",

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -48,9 +49,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "listener-cert",

View File

@ -25,9 +25,7 @@
"statPrefix": "ingress_upstream_8080_s1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080_s1"
@ -41,10 +39,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -53,9 +54,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "s1.example.com-cert",
@ -93,9 +92,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -109,10 +106,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -25,9 +25,7 @@
"statPrefix": "ingress_upstream_8080_s1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080_s1"
@ -41,10 +39,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -53,9 +54,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "s1.example.com-cert",
@ -98,9 +97,7 @@
"statPrefix": "ingress_upstream_8080_s2",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080_s2"
@ -114,10 +111,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -126,9 +126,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificateSdsSecretConfigs": [
{
"name": "s2.example.com-cert",

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -66,9 +67,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -82,10 +81,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -96,9 +97,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -112,10 +111,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -172,9 +174,7 @@
"statPrefix": "ingress_upstream_8082",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8082"
@ -188,10 +188,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -248,9 +251,7 @@
"statPrefix": "ingress_upstream_8083",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8083"
@ -264,10 +265,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -276,9 +280,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -324,9 +326,7 @@
"statPrefix": "ingress_upstream_8084",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8084"
@ -340,10 +340,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -48,9 +49,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -96,9 +95,7 @@
"statPrefix": "ingress_upstream_9090",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "9090"
@ -112,10 +109,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -20,9 +20,7 @@
"statPrefix": "ingress_upstream_8080",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8080"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -96,9 +97,7 @@
"statPrefix": "ingress_upstream_8081",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8081"
@ -112,10 +111,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -172,9 +174,7 @@
"statPrefix": "ingress_upstream_8082",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "8082"
@ -188,10 +188,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],

View File

@ -25,9 +25,7 @@
"statPrefix": "mesh_gateway_local_peered.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -41,9 +39,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "SANITIZE_SET",
"setCurrentClientCertDetails": {
@ -52,7 +48,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -61,9 +62,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -25,9 +25,7 @@
"statPrefix": "mesh_gateway_local_peered.bar.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "bar"
@ -41,9 +39,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "SANITIZE_SET",
"setCurrentClientCertDetails": {
@ -52,7 +48,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -61,9 +62,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -115,9 +114,7 @@
"statPrefix": "mesh_gateway_local_peered.foo.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "foo"
@ -131,9 +128,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "SANITIZE_SET",
"setCurrentClientCertDetails": {
@ -142,7 +137,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -151,9 +151,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -205,9 +203,7 @@
"statPrefix": "mesh_gateway_local_peered.gir.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "gir"
@ -221,9 +217,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "SANITIZE_SET",
"setCurrentClientCertDetails": {
@ -232,7 +226,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -241,9 +240,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -20,9 +20,7 @@
"statPrefix": "upstream.db.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "db"
@ -36,10 +34,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -88,9 +89,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -108,9 +107,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -62,7 +62,12 @@
"tracing": {
"randomSampling": {}
},
"http2ProtocolOptions": {}
"http2ProtocolOptions": {},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]

View File

@ -22,9 +22,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -42,9 +40,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -76,9 +72,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -96,9 +90,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -130,9 +122,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -150,9 +140,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -187,9 +175,7 @@
"statPrefix": "upstream.web.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "v1.web.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -199,9 +185,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -212,9 +196,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -223,7 +205,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -232,9 +219,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -269,9 +254,7 @@
"statPrefix": "upstream.web.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "v2.web.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -281,9 +264,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -294,9 +275,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -305,7 +284,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -314,9 +298,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -351,9 +333,7 @@
"statPrefix": "upstream.web.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "web.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -363,9 +343,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -376,9 +354,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -387,7 +363,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -396,9 +377,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -48,9 +48,7 @@
"statPrefix": "upstream.destination.443.~http.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "destination.443.~http.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -64,10 +62,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -84,9 +85,7 @@
"statPrefix": "upstream.destination.9093.~http.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "destination.9093.~http.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -100,10 +99,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -166,9 +168,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -186,9 +186,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -85,10 +85,13 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
]
@ -157,9 +160,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -177,9 +178,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -22,9 +22,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -42,9 +40,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -79,9 +75,7 @@
"statPrefix": "upstream.external-IP-HTTP.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "destination.192-168-0-2.external-IP-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -91,9 +85,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -104,9 +96,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -115,7 +105,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -124,9 +119,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -158,9 +151,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -178,9 +169,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -212,9 +201,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -232,9 +219,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -266,9 +251,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -286,9 +269,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -320,9 +301,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -340,9 +319,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -377,9 +354,7 @@
"statPrefix": "upstream.external-hostname-HTTP.default.default.dc1",
"rds": {
"configSource": {
"ads": {
},
"ads": {},
"resourceApiVersion": "V3"
},
"routeConfigName": "destination.httpbin-org.external-hostname-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
@ -389,9 +364,7 @@
"name": "envoy.filters.http.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
"rules": {
}
"rules": {}
}
},
{
@ -402,9 +375,7 @@
}
],
"tracing": {
"randomSampling": {
}
"randomSampling": {}
},
"forwardClientCertDetails": "APPEND_FORWARD",
"setCurrentClientCertDetails": {
@ -413,7 +384,12 @@
"chain": true,
"dns": true,
"uri": true
},
"upgradeConfigs": [
{
"upgradeType": "websocket"
}
]
}
}
],
@ -422,9 +398,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {
@ -456,9 +430,7 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {
},
"rules": {},
"statPrefix": "connect_authz"
}
},
@ -476,9 +448,7 @@
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
"commonTlsContext": {
"tlsParams": {
},
"tlsParams": {},
"tlsCertificates": [
{
"certificateChain": {

View File

@ -677,6 +677,9 @@ func makeTestListener(t *testing.T, snap *proxycfg.ConfigSnapshot, fixtureName s
Tracing: &envoy_http_v3.HttpConnectionManager_Tracing{
RandomSampling: &envoy_type_v3.Percent{Value: 0},
},
UpgradeConfigs: []*envoy_http_v3.HttpConnectionManager_UpgradeConfig{
{UpgradeType: "websocket"},
},
Http2ProtocolOptions: &envoy_core_v3.Http2ProtocolOptions{},
}),
},
@ -705,6 +708,9 @@ func makeTestListener(t *testing.T, snap *proxycfg.ConfigSnapshot, fixtureName s
Tracing: &envoy_http_v3.HttpConnectionManager_Tracing{
RandomSampling: &envoy_type_v3.Percent{Value: 0},
},
UpgradeConfigs: []*envoy_http_v3.HttpConnectionManager_UpgradeConfig{
{UpgradeType: "websocket"},
},
Http2ProtocolOptions: &envoy_core_v3.Http2ProtocolOptions{},
}),
},
@ -733,6 +739,9 @@ func makeTestListener(t *testing.T, snap *proxycfg.ConfigSnapshot, fixtureName s
Tracing: &envoy_http_v3.HttpConnectionManager_Tracing{
RandomSampling: &envoy_type_v3.Percent{Value: 0},
},
UpgradeConfigs: []*envoy_http_v3.HttpConnectionManager_UpgradeConfig{
{UpgradeType: "websocket"},
},
// HttpProtocolOptions: &envoy_core_v3.Http1ProtocolOptions{},
}),
},