Skip to content

Commit

Permalink
add specific test file for new feature
Browse files Browse the repository at this point in the history
  • Loading branch information
AurelienPillevesse committed Nov 8, 2024
1 parent 9f63579 commit c8baa00
Show file tree
Hide file tree
Showing 4 changed files with 443 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -99,7 +99,6 @@ securityPolicies:
headersToExtAuth:
- header1
- header2
bodyToExtAuth: true
grpc:
backendRefs:
- name: service-2
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -179,7 +179,6 @@ securityPolicies:
headersToExtAuth:
- header1
- header2
bodyToExtAuth: true
targetRef:
group: gateway.networking.k8s.io
kind: HTTPRoute
Expand Down Expand Up @@ -263,7 +262,6 @@ xdsIR:
headersToExtAuth:
- header1
- header2
bodyToExtAuth: true
name: securitypolicy/default/policy-for-http-route-1
- destination:
name: httproute/default/httproute-1/rule/1
Expand Down Expand Up @@ -308,7 +306,6 @@ xdsIR:
headersToExtAuth:
- header1
- header2
bodyToExtAuth: true
name: securitypolicy/default/policy-for-http-route-1
- destination:
name: httproute/default/httproute-2/rule/0
Expand Down
111 changes: 111 additions & 0 deletions internal/gatewayapi/testdata/securitypolicy-with-extauth-body.in.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,111 @@
gateways:
- apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
namespace: default
name: gateway-1
spec:
gatewayClassName: envoy-gateway-class
listeners:
- name: http
protocol: HTTP
port: 80
allowedRoutes:
namespaces:
from: All
httpRoutes:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
namespace: default
name: httproute-1
spec:
hostnames:
- www.foo.com
parentRefs:
- namespace: default
name: gateway-1
sectionName: http
rules:
- matches:
- path:
value: /foo1
backendRefs:
- name: service-1
port: 8080
- matches:
- path:
value: /foo2
backendRefs:
- name: service-2
port: 8080
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
namespace: default
name: httproute-2
spec:
hostnames:
- www.bar.com
parentRefs:
- namespace: default
name: gateway-1
sectionName: http
rules:
- matches:
- path:
value: /bar
backendRefs:
- name: service-3
port: 8080
backends:
- apiVersion: gateway.envoyproxy.io/v1alpha1
kind: Backend
metadata:
name: backend-fqdn
namespace: default
spec:
endpoints:
- fqdn:
hostname: 'primary.foo.com'
port: 3000
referenceGrants:
- apiVersion: gateway.networking.k8s.io/v1alpha2
kind: ReferenceGrant
metadata:
namespace: envoy-gateway
name: referencegrant-1
spec:
from:
- group: gateway.envoyproxy.io
kind: SecurityPolicy
namespace: default
to:
- group: ""
kind: Service
securityPolicies:
- apiVersion: gateway.envoyproxy.io/v1alpha1
kind: SecurityPolicy
metadata:
namespace: default
name: policy-for-http-route-1
spec:
targetRef:
group: gateway.networking.k8s.io
kind: HTTPRoute
name: httproute-1
extAuth:
failOpen: true
headersToExtAuth:
- header1
- header2
bodyToExtAuth: true
grpc:
backendRefs:
- name: service-2
kind: Service
port: 8080
- name: backend-fqdn
kind: Backend
group: gateway.envoyproxy.io
port: 3000
Loading

0 comments on commit c8baa00

Please sign in to comment.