-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
UHV: enable for admin interface #29737
Conversation
Signed-off-by: Yan Avlasov <yavlasov@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for working on this.
It mostly looks good, but do we have test / do we enable uhv in a given CI run (if so which?)
case Http::Protocol::Http11: | ||
return Http::Http1::CodecStats::atomicGet(http1_codec_stats_, *server_.stats().rootScope()); | ||
case Http::Protocol::Http3: | ||
IS_ENVOY_BUG("HTTP/3 is not supported for admin UI"); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fall through issue here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, UHV is enabled in compile-time-options build. Admin endpoint is used in almost every integration test, and it should also be covered by existing admin tests.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also added checks in the admin_test
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Adding non Googler for another pass. |
Signed-off-by: Yan Avlasov <yavlasov@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm with only single nit comment (feel free to ignore it if you think it make no sense). Thanks.
Signed-off-by: Yan Avlasov <yavlasov@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks
Commit Message:
Make admin UI use the default universal header validator, when build with the ENVOY_ENABLE_UHV. UHV config matches admin UI configuration for header validation and normalization.
Noop for the normal Envoy build.
Risk Level: Low, build flag protected
Testing: Unit Tests
Docs Changes: N/A
Release Notes: N/A
Platform Specific Features: N/A
Fixes #29503