rbac: support match based on destination cluster
Aperta
design proposal
help wanted
- Lingua principale
- C++
- Stelle
- 28.9k
- Fork
- 5.6k
- Merge medio
- 1g 22h
- PR unite (30g)
- 430
Descrizione
*Description*:
Envoy can route traffic to clusters based on external given input, e.g. `cluster_header` in http_conn_manager, and there will be similar proposal for TCP in #4444. We should disallow traffic from listeners going to certain clusters, e.g. xDS API cluster (especially SDS), ratelimit cluster, ext_authz cluster etc.
cc @rshriram
*Relevant Links*:
https://github.com/envoyproxy/envoy/pull/4444#discussion_r218427696
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.