Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-3979

Implement envoyExtAuthzGrpc extension provider

    XMLWordPrintable

Details

    • Story
    • Resolution: Done-Errata
    • Critical
    • OSSM 2.4.3
    • OSSM 2.4.0
    • Customer Impact, Maistra
    • None

    Description

      This is required to enable External Authorization for gRPC, and to complete the external authorization story.

      Related (Gateway API): https://issues.redhat.com/browse/OSSM-983

      As a workaround, this field is accessible via the "techPreview" configuration today.

      Acceptance criteria:

      Users can deploy SMCP v2.4 with envoyExtAuthzGrpc:

      apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata: 
  name: basic
spec: 
  meshConfig: 
    extensionProviders: 
    - name: ext-authz
      envoyExtAuthzGrpc: 
        service: ext-authz.foo.svc.cluster.local
        port: 8000
        ...

      The implementation will be almost 1:1 copy of this pull request: https://github.com/maistra/istio-operator/pull/1136.

      Attachments

        Issue Links

          is cloned by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. OSSM-4628 Casting envoyExtAuthzGrpc extension provider

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          links to

          Web Link RHBA-2023:120107 Red Hat OpenShift Service Mesh Containers for 2.4.3

          mentioned on

          GitLab Merge request - Updated US source to: 821f8f4 OSSM-3979 Adding EnvoyExtAuthzGRPC to GA (#1231)

          Activity

            People

              rh-ee-mamyers Mayleigh Myers
              jlongmui@redhat.com Jamie Longmuir
              Gwynne Monahan, Praneeth Bajjuri
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: