Skip to content

feat: init SecurityPolicy#1957

Merged
zirain merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:security-policy-plumbing
Oct 25, 2023
Merged

feat: init SecurityPolicy#1957
zirain merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:security-policy-plumbing

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

@zhaohuabing zhaohuabing commented Oct 12, 2023

This is a shameless copy && paste from @arkodg 's BackendTrafficPolicy, with replacing key word from "BackendTraffic" to "Security".

The processing of the listener layer is missing in both the BackendTrafficPolicy and SecurityPolicy. Considering the tight deadline of 0.6, we can keep this as is and improve it in 0.7.

Relates to #1845

@zhaohuabing zhaohuabing requested a review from a team as a code owner October 12, 2023 07:47
@zhaohuabing zhaohuabing marked this pull request as draft October 12, 2023 07:47
@arkodg
Copy link
Copy Markdown
Contributor

arkodg commented Oct 12, 2023

also needs a status eq check in

func isStatusEqual(objA, objB interface{}) bool {

@zhaohuabing
Copy link
Copy Markdown
Member Author

zhaohuabing commented Oct 13, 2023

Hold this until BackendTrafficPolicy is done since these two have similar structures and the latter is in a better shape now.
@arkodg @AliceProxy

@zhaohuabing zhaohuabing force-pushed the security-policy-plumbing branch from 1340d36 to f1ede3e Compare October 24, 2023 08:07
@zhaohuabing zhaohuabing marked this pull request as ready for review October 24, 2023 08:14
@zhaohuabing zhaohuabing requested a review from arkodg October 24, 2023 08:16
@zhaohuabing zhaohuabing force-pushed the security-policy-plumbing branch from f1ede3e to 9b18692 Compare October 24, 2023 09:03
@codecov
Copy link
Copy Markdown

codecov bot commented Oct 24, 2023

Codecov Report

Merging #1957 (f010cd5) into main (a858547) will decrease coverage by 0.10%.
Report is 1 commits behind head on main.
The diff coverage is 61.76%.

@@            Coverage Diff             @@
##             main    #1957      +/-   ##
==========================================
- Coverage   65.25%   65.16%   -0.10%     
==========================================
  Files          97       99       +2     
  Lines       14199    14400     +201     
==========================================
+ Hits         9266     9384     +118     
- Misses       4359     4434      +75     
- Partials      574      582       +8     
Files Coverage Δ
internal/gatewayapi/translator.go 98.50% <100.00%> (+0.08%) ⬆️
internal/gatewayapi/resource.go 64.91% <0.00%> (-1.16%) ⬇️
internal/message/types.go 0.00% <0.00%> (ø)
internal/status/securitypolicy.go 0.00% <0.00%> (ø)
internal/gatewayapi/runner/runner.go 21.13% <0.00%> (-0.90%) ⬇️
internal/provider/kubernetes/controller.go 53.50% <36.36%> (-0.97%) ⬇️
internal/gatewayapi/zz_generated.deepcopy.go 0.00% <0.00%> (ø)
internal/gatewayapi/securitypolicy.go 68.48% <68.48%> (ø)

... and 1 file with indirect coverage changes

Signed-off-by: huabing zhao <zhaohuabing@gmail.com>
@zhaohuabing zhaohuabing force-pushed the security-policy-plumbing branch from 9b18692 to f010cd5 Compare October 24, 2023 09:32
@zhaohuabing
Copy link
Copy Markdown
Member Author

If this is acceptable, I'd like to add design and user docs of SecurityPolicy later when we have a concrete feature coming in, like CORS or JWT.

@zirain zirain merged commit a00d289 into envoyproxy:main Oct 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants