Uses of Class
io.envoyproxy.envoy.extensions.filters.http.ext_authz.v3.ExtAuthz.Builder
Packages that use ExtAuthz.Builder
-
Uses of ExtAuthz.Builder in io.envoyproxy.envoy.extensions.filters.http.ext_authz.v3
Methods in io.envoyproxy.envoy.extensions.filters.http.ext_authz.v3 that return ExtAuthz.BuilderModifier and TypeMethodDescriptionExtAuthz.Builder.addAllMetadataContextNamespaces(Iterable<String> values) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.addAllRouteMetadataContextNamespaces(Iterable<String> values) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addAllRouteTypedMetadataContextNamespaces(Iterable<String> values) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addAllTypedMetadataContextNamespaces(Iterable<String> values) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.addMetadataContextNamespaces(String value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.addMetadataContextNamespacesBytes(com.google.protobuf.ByteString value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) ExtAuthz.Builder.addRouteMetadataContextNamespaces(String value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addRouteMetadataContextNamespacesBytes(com.google.protobuf.ByteString value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addRouteTypedMetadataContextNamespaces(String value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addRouteTypedMetadataContextNamespacesBytes(com.google.protobuf.ByteString value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.addTypedMetadataContextNamespaces(String value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.addTypedMetadataContextNamespacesBytes(com.google.protobuf.ByteString value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.clear()ExtAuthz.Builder.clearAllowedHeaders()Check request to authorization server will include the client request headers that have a correspondent match in the list.ExtAuthz.Builder.clearBootstrapMetadataLabelsKey()Optional labels that will be passed to :ref:`labels<envoy_v3_api_field_service.auth.v3.AttributeContext.Peer.labels>` in :ref:`destination<envoy_v3_api_field_service.auth.v3.AttributeContext.destination>`.ExtAuthz.Builder.clearChargeClusterResponseStats()Whether to increment cluster statistics (e.g. cluster.<cluster_name>.upstream_rq_*) on authorization failure.ExtAuthz.Builder.clearClearRouteCache()Clears the route cache in order to allow the external authorization service to correctly affect routing decisions.ExtAuthz.Builder.clearDecoderHeaderMutationRules()Rules for what modifications an ext_authz server may make to the request headers before continuing decoding or forwarding upstream.ExtAuthz.Builder.clearDenyAtDisable()Specifies whether to deny the requests when the filter is disabled.ExtAuthz.Builder.clearDisallowedHeaders()If set, specifically disallow any header in this list to be forwarded to the external authentication server.ExtAuthz.Builder.clearEmitFilterStateStats()When set to ``true``, the filter will emit per-stream stats for access logging.ExtAuthz.Builder.clearEnableDynamicMetadataIngestion()Enable or disable ingestion of dynamic metadata from the ext_authz service.ExtAuthz.Builder.clearEncodeRawHeaders()Whether to encode the raw headers (i.e., unsanitized values and unconcatenated multi-line headers) in the authorization request.ExtAuthz.Builder.clearEnforceResponseHeaderLimits()When set to ``true``, the filter will enforce the response header map's count and size limits by sending a local reply when those limits are violated.ExtAuthz.Builder.clearFailureModeAllow()Changes the filter's behavior on errors: * When set to ``true``, the filter will ``accept`` the client request even if communication with the authorization service has failed, or if the authorization service has returned an HTTP 5xx errorExtAuthz.Builder.clearFailureModeAllowHeaderAdd()When ``failure_mode_allow`` and ``failure_mode_allow_header_add`` are both set to ``true``, ``x-envoy-auth-failure-mode-allowed: true`` will be added to request headers if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error.ExtAuthz.Builder.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) ExtAuthz.Builder.clearFilterEnabled()Specifies if the filter is enabled.ExtAuthz.Builder.clearFilterEnabledMetadata()Specifies if the filter is enabled with metadata matcher.ExtAuthz.Builder.clearFilterMetadata()Additional metadata to be added to the filter state for logging purposes.ExtAuthz.Builder.clearGrpcService()gRPC service configuration (default timeout: 200ms).ExtAuthz.Builder.clearHttpService()HTTP service configuration (default timeout: 200ms).ExtAuthz.Builder.clearIncludePeerCertificate()Specifies if the peer certificate is sent to the external service.ExtAuthz.Builder.clearIncludeTlsSession()Specifies if the TLS session level details like SNI are sent to the external service.ExtAuthz.Builder.clearMaxDeniedResponseBodyBytes()Sets the maximum size (in bytes) of the response body that the filter will send downstream when a request is denied by the external authorization service.ExtAuthz.Builder.clearMetadataContextNamespaces()Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) ExtAuthz.Builder.clearRouteMetadataContextNamespaces()Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.clearRouteTypedMetadataContextNamespaces()Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.clearServices()ExtAuthz.Builder.clearStatPrefix()Optional additional prefix to use when emitting statistics.ExtAuthz.Builder.clearStatusOnError()Sets the HTTP status that is returned to the client when the authorization server returns an error or cannot be reached.ExtAuthz.Builder.clearTransportApiVersion()API version for ext_authz transport protocol.ExtAuthz.Builder.clearTypedMetadataContextNamespaces()Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.clearValidateMutations()When set to ``true``, the filter will check the :ref:`ext_authz response <envoy_v3_api_msg_service.auth.v3.CheckResponse>` for invalid header and query parameter mutations.ExtAuthz.Builder.clearWithRequestBody()Enables the filter to buffer the client request body and send it within the authorization request.ExtAuthz.Builder.clone()ExtAuthz.Builder.mergeAllowedHeaders(ListStringMatcher value) Check request to authorization server will include the client request headers that have a correspondent match in the list.ExtAuthz.Builder.mergeChargeClusterResponseStats(com.google.protobuf.BoolValue value) Whether to increment cluster statistics (e.g. cluster.<cluster_name>.upstream_rq_*) on authorization failure.ExtAuthz.Builder.mergeDecoderHeaderMutationRules(HeaderMutationRules value) Rules for what modifications an ext_authz server may make to the request headers before continuing decoding or forwarding upstream.ExtAuthz.Builder.mergeDenyAtDisable(RuntimeFeatureFlag value) Specifies whether to deny the requests when the filter is disabled.ExtAuthz.Builder.mergeDisallowedHeaders(ListStringMatcher value) If set, specifically disallow any header in this list to be forwarded to the external authentication server.ExtAuthz.Builder.mergeEnableDynamicMetadataIngestion(com.google.protobuf.BoolValue value) Enable or disable ingestion of dynamic metadata from the ext_authz service.ExtAuthz.Builder.mergeFilterEnabled(RuntimeFractionalPercent value) Specifies if the filter is enabled.ExtAuthz.Builder.mergeFilterEnabledMetadata(MetadataMatcher value) Specifies if the filter is enabled with metadata matcher.ExtAuthz.Builder.mergeFilterMetadata(com.google.protobuf.Struct value) Additional metadata to be added to the filter state for logging purposes.ExtAuthz.Builder.mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) ExtAuthz.Builder.mergeFrom(com.google.protobuf.Message other) ExtAuthz.Builder.mergeGrpcService(GrpcService value) gRPC service configuration (default timeout: 200ms).ExtAuthz.Builder.mergeHttpService(HttpService value) HTTP service configuration (default timeout: 200ms).ExtAuthz.Builder.mergeStatusOnError(HttpStatus value) Sets the HTTP status that is returned to the client when the authorization server returns an error or cannot be reached.final ExtAuthz.BuilderExtAuthz.Builder.mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) ExtAuthz.Builder.mergeWithRequestBody(BufferSettings value) Enables the filter to buffer the client request body and send it within the authorization request.static ExtAuthz.BuilderExtAuthz.newBuilder()static ExtAuthz.BuilderExtAuthz.newBuilder(ExtAuthz prototype) ExtAuthz.newBuilderForType()protected ExtAuthz.BuilderExtAuthz.newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) ExtAuthz.Builder.setAllowedHeaders(ListStringMatcher value) Check request to authorization server will include the client request headers that have a correspondent match in the list.ExtAuthz.Builder.setAllowedHeaders(ListStringMatcher.Builder builderForValue) Check request to authorization server will include the client request headers that have a correspondent match in the list.ExtAuthz.Builder.setBootstrapMetadataLabelsKey(String value) Optional labels that will be passed to :ref:`labels<envoy_v3_api_field_service.auth.v3.AttributeContext.Peer.labels>` in :ref:`destination<envoy_v3_api_field_service.auth.v3.AttributeContext.destination>`.ExtAuthz.Builder.setBootstrapMetadataLabelsKeyBytes(com.google.protobuf.ByteString value) Optional labels that will be passed to :ref:`labels<envoy_v3_api_field_service.auth.v3.AttributeContext.Peer.labels>` in :ref:`destination<envoy_v3_api_field_service.auth.v3.AttributeContext.destination>`.ExtAuthz.Builder.setChargeClusterResponseStats(com.google.protobuf.BoolValue value) Whether to increment cluster statistics (e.g. cluster.<cluster_name>.upstream_rq_*) on authorization failure.ExtAuthz.Builder.setChargeClusterResponseStats(com.google.protobuf.BoolValue.Builder builderForValue) Whether to increment cluster statistics (e.g. cluster.<cluster_name>.upstream_rq_*) on authorization failure.ExtAuthz.Builder.setClearRouteCache(boolean value) Clears the route cache in order to allow the external authorization service to correctly affect routing decisions.ExtAuthz.Builder.setDecoderHeaderMutationRules(HeaderMutationRules value) Rules for what modifications an ext_authz server may make to the request headers before continuing decoding or forwarding upstream.ExtAuthz.Builder.setDecoderHeaderMutationRules(HeaderMutationRules.Builder builderForValue) Rules for what modifications an ext_authz server may make to the request headers before continuing decoding or forwarding upstream.ExtAuthz.Builder.setDenyAtDisable(RuntimeFeatureFlag value) Specifies whether to deny the requests when the filter is disabled.ExtAuthz.Builder.setDenyAtDisable(RuntimeFeatureFlag.Builder builderForValue) Specifies whether to deny the requests when the filter is disabled.ExtAuthz.Builder.setDisallowedHeaders(ListStringMatcher value) If set, specifically disallow any header in this list to be forwarded to the external authentication server.ExtAuthz.Builder.setDisallowedHeaders(ListStringMatcher.Builder builderForValue) If set, specifically disallow any header in this list to be forwarded to the external authentication server.ExtAuthz.Builder.setEmitFilterStateStats(boolean value) When set to ``true``, the filter will emit per-stream stats for access logging.ExtAuthz.Builder.setEnableDynamicMetadataIngestion(com.google.protobuf.BoolValue value) Enable or disable ingestion of dynamic metadata from the ext_authz service.ExtAuthz.Builder.setEnableDynamicMetadataIngestion(com.google.protobuf.BoolValue.Builder builderForValue) Enable or disable ingestion of dynamic metadata from the ext_authz service.ExtAuthz.Builder.setEncodeRawHeaders(boolean value) Whether to encode the raw headers (i.e., unsanitized values and unconcatenated multi-line headers) in the authorization request.ExtAuthz.Builder.setEnforceResponseHeaderLimits(boolean value) When set to ``true``, the filter will enforce the response header map's count and size limits by sending a local reply when those limits are violated.ExtAuthz.Builder.setFailureModeAllow(boolean value) Changes the filter's behavior on errors: * When set to ``true``, the filter will ``accept`` the client request even if communication with the authorization service has failed, or if the authorization service has returned an HTTP 5xx errorExtAuthz.Builder.setFailureModeAllowHeaderAdd(boolean value) When ``failure_mode_allow`` and ``failure_mode_allow_header_add`` are both set to ``true``, ``x-envoy-auth-failure-mode-allowed: true`` will be added to request headers if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error.ExtAuthz.Builder.setFilterEnabled(RuntimeFractionalPercent value) Specifies if the filter is enabled.ExtAuthz.Builder.setFilterEnabled(RuntimeFractionalPercent.Builder builderForValue) Specifies if the filter is enabled.ExtAuthz.Builder.setFilterEnabledMetadata(MetadataMatcher value) Specifies if the filter is enabled with metadata matcher.ExtAuthz.Builder.setFilterEnabledMetadata(MetadataMatcher.Builder builderForValue) Specifies if the filter is enabled with metadata matcher.ExtAuthz.Builder.setFilterMetadata(com.google.protobuf.Struct value) Additional metadata to be added to the filter state for logging purposes.ExtAuthz.Builder.setFilterMetadata(com.google.protobuf.Struct.Builder builderForValue) Additional metadata to be added to the filter state for logging purposes.ExtAuthz.Builder.setGrpcService(GrpcService value) gRPC service configuration (default timeout: 200ms).ExtAuthz.Builder.setGrpcService(GrpcService.Builder builderForValue) gRPC service configuration (default timeout: 200ms).ExtAuthz.Builder.setHttpService(HttpService value) HTTP service configuration (default timeout: 200ms).ExtAuthz.Builder.setHttpService(HttpService.Builder builderForValue) HTTP service configuration (default timeout: 200ms).ExtAuthz.Builder.setIncludePeerCertificate(boolean value) Specifies if the peer certificate is sent to the external service.ExtAuthz.Builder.setIncludeTlsSession(boolean value) Specifies if the TLS session level details like SNI are sent to the external service.ExtAuthz.Builder.setMaxDeniedResponseBodyBytes(int value) Sets the maximum size (in bytes) of the response body that the filter will send downstream when a request is denied by the external authorization service.ExtAuthz.Builder.setMetadataContextNamespaces(int index, String value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.ExtAuthz.Builder.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) ExtAuthz.Builder.setRouteMetadataContextNamespaces(int index, String value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.setRouteTypedMetadataContextNamespaces(int index, String value) Specifies a list of route metadata namespaces whose values, if present, will be passed to the ext_authz service at :ref:`route_metadata_context <envoy_v3_api_field_service.auth.v3.AttributeContext.route_metadata_context>` in :ref:`CheckRequest <envoy_v3_api_field_service.auth.v3.CheckRequest.attributes>`.ExtAuthz.Builder.setStatPrefix(String value) Optional additional prefix to use when emitting statistics.ExtAuthz.Builder.setStatPrefixBytes(com.google.protobuf.ByteString value) Optional additional prefix to use when emitting statistics.ExtAuthz.Builder.setStatusOnError(HttpStatus value) Sets the HTTP status that is returned to the client when the authorization server returns an error or cannot be reached.ExtAuthz.Builder.setStatusOnError(HttpStatus.Builder builderForValue) Sets the HTTP status that is returned to the client when the authorization server returns an error or cannot be reached.ExtAuthz.Builder.setTransportApiVersion(ApiVersion value) API version for ext_authz transport protocol.ExtAuthz.Builder.setTransportApiVersionValue(int value) API version for ext_authz transport protocol.ExtAuthz.Builder.setTypedMetadataContextNamespaces(int index, String value) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service.final ExtAuthz.BuilderExtAuthz.Builder.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) ExtAuthz.Builder.setValidateMutations(boolean value) When set to ``true``, the filter will check the :ref:`ext_authz response <envoy_v3_api_msg_service.auth.v3.CheckResponse>` for invalid header and query parameter mutations.ExtAuthz.Builder.setWithRequestBody(BufferSettings value) Enables the filter to buffer the client request body and send it within the authorization request.ExtAuthz.Builder.setWithRequestBody(BufferSettings.Builder builderForValue) Enables the filter to buffer the client request body and send it within the authorization request.ExtAuthz.toBuilder()