Skip to content

api: credential injection HTTPRouteFilter#5312

Merged
arkodg merged 2 commits intoenvoyproxy:mainfrom
zhaohuabing:credential-injector-api
Mar 7, 2025
Merged

api: credential injection HTTPRouteFilter#5312
arkodg merged 2 commits intoenvoyproxy:mainfrom
zhaohuabing:credential-injector-api

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

API for #4757

@zhaohuabing zhaohuabing requested a review from a team as a code owner February 19, 2025 08:58
@codecov
Copy link
Copy Markdown

codecov bot commented Feb 19, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.93%. Comparing base (d1730a8) to head (08643b3).
Report is 61 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5312      +/-   ##
==========================================
- Coverage   64.97%   64.93%   -0.05%     
==========================================
  Files         214      214              
  Lines       33532    33532              
==========================================
- Hits        21789    21774      -15     
- Misses      10400    10413      +13     
- Partials     1343     1345       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
@zhaohuabing zhaohuabing force-pushed the credential-injector-api branch from e3b7e4c to 8de2e22 Compare February 19, 2025 09:14
@mathetake
Copy link
Copy Markdown
Member

will the secret updates be picked up?

@mathetake
Copy link
Copy Markdown
Member

like changing the content

@arkodg
Copy link
Copy Markdown
Contributor

arkodg commented Feb 19, 2025

like changing the content

yah, we have existing logic for it, which is used in other places (TLS Certs, Basic Auth etc)

@mathetake
Copy link
Copy Markdown
Member

great! we might be able to utilize this in the future iteration and simplify the AI Gateway controller code cc @yuzisun @aabchoo @nacx

@mathetake
Copy link
Copy Markdown
Member

but at the moment the core logic is tied with AWS signing so this can only be used for API key auth 😞

@zhaohuabing
Copy link
Copy Markdown
Member Author

zhaohuabing commented Feb 20, 2025

but at the moment the core logic is tied with AWS signing so this can only be used for API key auth

I'm not familiar with the API Gateway AWS signing authentication. Could it be a new credential type for the CredentialInjector, similar to the oauth2 credential(which would require some non-trivial work on the Envoy side)? If so, then it could also be entirely handled within EG.

@zhaohuabing zhaohuabing changed the title API for credential injection HTTPRouteFilter api: credential injection HTTPRouteFilter Feb 20, 2025
@maulik13
Copy link
Copy Markdown

but at the moment the core logic is tied with AWS signing so this can only be used for API key auth 😞

I am not sure what this AWS signing has to do with credential injector, but in its current state credential injector will already be useful for us.

Copy link
Copy Markdown
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM thanks !

@arkodg arkodg requested review from a team March 7, 2025 01:39
@arkodg arkodg merged commit 708ad49 into envoyproxy:main Mar 7, 2025
28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants