envoyproxy/envoy

rbac: support match based on destination cluster

Open

#4,455 建立於 2018年9月18日

在 GitHub 查看
 (22 留言) (1 反應) (0 負責人)C++ (5,373 fork)batch import
design proposalhelp wanted

倉庫指標

Star
 (27,997 star)
PR 合併指標
 (平均合併 8天) (30 天內合併 378 個 PR)

描述

Description: Envoy can route traffic to clusters based on external given input, e.g. cluster_header in http_conn_manager, and there will be similar proposal for TCP in #4444. We should disallow traffic from listeners going to certain clusters, e.g. xDS API cluster (especially SDS), ratelimit cluster, ext_authz cluster etc.

cc @rshriram

Relevant Links: https://github.com/envoyproxy/envoy/pull/4444#discussion_r218427696

貢獻者指南