Merge pull request #8739 from stubenhuang/issue-gw-token-8725

feat: 转发请求到容器化网关时带上token #8725
TencentBlueKing · Apr 25, 2023 · 743fc68 · 743fc68
2 parents f9f6039 + bff9087
commit 743fc68
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/src/gateway/core/backend.conf b/src/gateway/core/backend.conf
@@ -156,6 +156,10 @@ location ~ /(ms/|)([\w-_]+)/api/service/(.*) {
     set $service $2;
     set $path $3;
     set $target '';
+    set $devops_token '';
+
+    proxy_set_header X-DEVOPS-TOKEN $devops_token;
+
     access_by_lua_file 'conf/lua/router_srv.lua';
 
     # 设置proxy header的变量

diff --git a/src/gateway/core/lua/util/loadbalance_util.lua b/src/gateway/core/lua/util/loadbalance_util.lua
@@ -34,6 +34,9 @@ function _M:getTarget(devops_tag, service_name, cache_tail, ns_config)
 
     -- 转发到容器环境里
     if not in_container and string.find(devops_tag, '^kubernetes-') then
+        if config.gw_token ~= nil and ngx.var.devops_token == '' then
+            ngx.var.devops_token = config.gw_token
+        end
         local kubernetes_domain = nil
         if gateway_project == 'codecc' then
             kubernetes_domain = config.kubernetes.codecc.domain