Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UHV: enable for admin interface #29737

Merged
merged 5 commits into from
Sep 22, 2023

Conversation

yanavlasov
Copy link
Contributor

Commit Message:
Make admin UI use the default universal header validator, when build with the ENVOY_ENABLE_UHV. UHV config matches admin UI configuration for header validation and normalization.

Noop for the normal Envoy build.

Risk Level: Low, build flag protected
Testing: Unit Tests
Docs Changes: N/A
Release Notes: N/A
Platform Specific Features: N/A
Fixes #29503

Signed-off-by: Yan Avlasov <yavlasov@google.com>
Copy link
Contributor

@KBaichoo KBaichoo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for working on this.

It mostly looks good, but do we have test / do we enable uhv in a given CI run (if so which?)

case Http::Protocol::Http11:
return Http::Http1::CodecStats::atomicGet(http1_codec_stats_, *server_.stats().rootScope());
case Http::Protocol::Http3:
IS_ENVOY_BUG("HTTP/3 is not supported for admin UI");
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fall through issue here

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, UHV is enabled in compile-time-options build. Admin endpoint is used in almost every integration test, and it should also be covered by existing admin tests.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also added checks in the admin_test

Signed-off-by: Yan Avlasov <yavlasov@google.com>
KBaichoo
KBaichoo previously approved these changes Sep 20, 2023
Signed-off-by: Yan Avlasov <yavlasov@google.com>
KBaichoo
KBaichoo previously approved these changes Sep 20, 2023
@yanavlasov
Copy link
Contributor Author

Adding non Googler for another pass.

Signed-off-by: Yan Avlasov <yavlasov@google.com>
wbpcode
wbpcode previously approved these changes Sep 22, 2023
Copy link
Member

@wbpcode wbpcode left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm with only single nit comment (feel free to ignore it if you think it make no sense). Thanks.

Signed-off-by: Yan Avlasov <yavlasov@google.com>
Copy link
Member

@wbpcode wbpcode left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks

@yanavlasov yanavlasov merged commit 9ecbbbe into envoyproxy:main Sep 22, 2023
114 of 116 checks passed
@yanavlasov yanavlasov deleted the uhv-enable-for-admin branch December 8, 2023 19:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

UHV: figure out story for admin interface
3 participants