Add disallowed_headers knob to ext_authz config
Commit Message: Add disallowed_headers knob to ext_authz config Additional Description: This PR adds a config field to ext_authz that will prevent the specified headers from being sent to the external authentication service. This new field (disallowed_headers) will always override the allowed_headers field. Risk Level: low Testing: unit tests & integration tests Docs Changes: none Release Notes: added to changelog Platform Specific Features: n/a [Optional Runtime guard:] [Optional Fixes #Issue] [Optional Fixes commit #PR or SHA] [Optional Deprecated:] [Optional API Considerations:]
CC @envoyproxy/api-shepherds: Your approval is needed for changes made to (api/envoy/|docs/root/api-docs/).
envoyproxy/api-shepherds assignee is @wbpcode
CC @envoyproxy/api-watchers: FYI only for changes made to (api/envoy/|docs/root/api-docs/).
/assign @tyxia
/retest
/retest
/retest
/assign @yanjunxiang-google
Could you take a first pass on it? Thanks
Just realized, #33244 should probably be merged before this one.
#33244 refactors HttpFilterTestParam, which is a parameterized test fixture used to write some of this PR's tests.
ping me if this is ready for a maintainer review. :)
/wait
This PR is ready for review. @wbpcode
/wait-any
@yanjunxiang-google please review
/retest
/retest
@wbpcode I think I need your API review again.
@wbpcode ping for api re-review
/lgtm api
Because @tyxia is the owner and has approved this PR. And it's LGTM, so will merge it directly. :)