envoyproxy/envoy

Pass gRPC metadata to ext_authz

Open

#7,272 创建于 2019年6月14日

在 GitHub 查看
 (2 评论) (11 反应) (0 负责人)C++ (5,373 fork)batch import
enhancementhelp wanted

仓库指标

Star
 (27,997 star)
PR 合并指标
 (平均合并 8天) (30 天内合并 378 个 PR)

描述

Title: Pass gRPC metadata to ext_authz

Description: With current ext_authz filter implementation an external grpc_service receives only subset of request information, such as IPs and TLS details. It would be really helpful to have ability to access gRPC metadata headers as well.

Our current authorization schema is based on metadata fields added to grpc calls. Metadata is checked on server side, and we would like to move it out to Envoy filters.

It seems to be possible for http_service to configure which http headers will be passed to authz service, but nothing like that is configurable for grpc_service type.

贡献者指南