envoyproxy/envoy

rbac: support match based on destination cluster

オープン

#4,455 opened on 2018/09/18

 (22 件のコメント) (1 件のリアクション) (0 人の担当者)C++ (5,373 件のフォーク)batch import
design proposalhelp wanted

Repository metrics

Stars
 (27,997 個のスター)
PR merge metrics
 (PR metrics pending)

説明

Description: Envoy can route traffic to clusters based on external given input, e.g. cluster_header in http_conn_manager, and there will be similar proposal for TCP in #4444. We should disallow traffic from listeners going to certain clusters, e.g. xDS API cluster (especially SDS), ratelimit cluster, ext_authz cluster etc.

cc @rshriram

Relevant Links: https://github.com/envoyproxy/envoy/pull/4444#discussion_r218427696

コントリビューターガイド