public static final class ExtAuthz.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder> implements ExtAuthzOrBuilder
[#next-free-field: 15]Protobuf type
envoy.extensions.filters.http.ext_authz.v4alpha.ExtAuthz| Modifier and Type | Method and Description |
|---|---|
ExtAuthz.Builder |
addAllMetadataContextNamespaces(Iterable<String> values)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.Builder |
addMetadataContextNamespaces(String value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.Builder |
addMetadataContextNamespacesBytes(com.google.protobuf.ByteString value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
ExtAuthz |
build() |
ExtAuthz |
buildPartial() |
ExtAuthz.Builder |
clear() |
ExtAuthz.Builder |
clearClearRouteCache()
Clears route cache in order to allow the external authorization service to correctly affect
routing decisions.
|
ExtAuthz.Builder |
clearDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled.
|
ExtAuthz.Builder |
clearFailureModeAllow()
Changes filter's behaviour on errors:
1.
|
ExtAuthz.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
ExtAuthz.Builder |
clearFilterEnabled()
Specifies if the filter is enabled.
|
ExtAuthz.Builder |
clearFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher.
|
ExtAuthz.Builder |
clearGrpcService()
gRPC service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
clearHttpService()
HTTP service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
clearIncludePeerCertificate()
Specifies if the peer certificate is sent to the external service.
|
ExtAuthz.Builder |
clearMetadataContextNamespaces()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
ExtAuthz.Builder |
clearServices() |
ExtAuthz.Builder |
clearStatPrefix()
Optional additional prefix to use when emitting statistics.
|
ExtAuthz.Builder |
clearStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
ExtAuthz.Builder |
clearTransportApiVersion()
API version for ext_authz transport protocol.
|
ExtAuthz.Builder |
clearWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request.
|
ExtAuthz.Builder |
clone() |
boolean |
getClearRouteCache()
Clears route cache in order to allow the external authorization service to correctly affect
routing decisions.
|
ExtAuthz |
getDefaultInstanceForType() |
RuntimeFeatureFlag |
getDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled.
|
RuntimeFeatureFlag.Builder |
getDenyAtDisableBuilder()
Specifies whether to deny the requests, when the filter is disabled.
|
RuntimeFeatureFlagOrBuilder |
getDenyAtDisableOrBuilder()
Specifies whether to deny the requests, when the filter is disabled.
|
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
boolean |
getFailureModeAllow()
Changes filter's behaviour on errors:
1.
|
RuntimeFractionalPercent |
getFilterEnabled()
Specifies if the filter is enabled.
|
RuntimeFractionalPercent.Builder |
getFilterEnabledBuilder()
Specifies if the filter is enabled.
|
MetadataMatcher |
getFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher.
|
MetadataMatcher.Builder |
getFilterEnabledMetadataBuilder()
Specifies if the filter is enabled with metadata matcher.
|
MetadataMatcherOrBuilder |
getFilterEnabledMetadataOrBuilder()
Specifies if the filter is enabled with metadata matcher.
|
RuntimeFractionalPercentOrBuilder |
getFilterEnabledOrBuilder()
Specifies if the filter is enabled.
|
GrpcService |
getGrpcService()
gRPC service configuration (default timeout: 200ms).
|
GrpcService.Builder |
getGrpcServiceBuilder()
gRPC service configuration (default timeout: 200ms).
|
GrpcServiceOrBuilder |
getGrpcServiceOrBuilder()
gRPC service configuration (default timeout: 200ms).
|
HttpService |
getHttpService()
HTTP service configuration (default timeout: 200ms).
|
HttpService.Builder |
getHttpServiceBuilder()
HTTP service configuration (default timeout: 200ms).
|
HttpServiceOrBuilder |
getHttpServiceOrBuilder()
HTTP service configuration (default timeout: 200ms).
|
boolean |
getIncludePeerCertificate()
Specifies if the peer certificate is sent to the external service.
|
String |
getMetadataContextNamespaces(int index)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
com.google.protobuf.ByteString |
getMetadataContextNamespacesBytes(int index)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
int |
getMetadataContextNamespacesCount()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
com.google.protobuf.ProtocolStringList |
getMetadataContextNamespacesList()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.ServicesCase |
getServicesCase() |
String |
getStatPrefix()
Optional additional prefix to use when emitting statistics.
|
com.google.protobuf.ByteString |
getStatPrefixBytes()
Optional additional prefix to use when emitting statistics.
|
HttpStatus |
getStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
HttpStatus.Builder |
getStatusOnErrorBuilder()
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
HttpStatusOrBuilder |
getStatusOnErrorOrBuilder()
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
ApiVersion |
getTransportApiVersion()
API version for ext_authz transport protocol.
|
int |
getTransportApiVersionValue()
API version for ext_authz transport protocol.
|
BufferSettings |
getWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request.
|
BufferSettings.Builder |
getWithRequestBodyBuilder()
Enables filter to buffer the client request body and send it within the authorization request.
|
BufferSettingsOrBuilder |
getWithRequestBodyOrBuilder()
Enables filter to buffer the client request body and send it within the authorization request.
|
boolean |
hasDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled.
|
boolean |
hasFilterEnabled()
Specifies if the filter is enabled.
|
boolean |
hasFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher.
|
boolean |
hasGrpcService()
gRPC service configuration (default timeout: 200ms).
|
boolean |
hasHttpService()
HTTP service configuration (default timeout: 200ms).
|
boolean |
hasStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
boolean |
hasWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
ExtAuthz.Builder |
mergeDenyAtDisable(RuntimeFeatureFlag value)
Specifies whether to deny the requests, when the filter is disabled.
|
ExtAuthz.Builder |
mergeFilterEnabled(RuntimeFractionalPercent value)
Specifies if the filter is enabled.
|
ExtAuthz.Builder |
mergeFilterEnabledMetadata(MetadataMatcher value)
Specifies if the filter is enabled with metadata matcher.
|
ExtAuthz.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
ExtAuthz.Builder |
mergeFrom(ExtAuthz other) |
ExtAuthz.Builder |
mergeFrom(com.google.protobuf.Message other) |
ExtAuthz.Builder |
mergeGrpcService(GrpcService value)
gRPC service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
mergeHttpService(HttpService value)
HTTP service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
mergeStatusOnError(HttpStatus value)
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
ExtAuthz.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
ExtAuthz.Builder |
mergeWithRequestBody(BufferSettings value)
Enables filter to buffer the client request body and send it within the authorization request.
|
ExtAuthz.Builder |
setClearRouteCache(boolean value)
Clears route cache in order to allow the external authorization service to correctly affect
routing decisions.
|
ExtAuthz.Builder |
setDenyAtDisable(RuntimeFeatureFlag.Builder builderForValue)
Specifies whether to deny the requests, when the filter is disabled.
|
ExtAuthz.Builder |
setDenyAtDisable(RuntimeFeatureFlag value)
Specifies whether to deny the requests, when the filter is disabled.
|
ExtAuthz.Builder |
setFailureModeAllow(boolean value)
Changes filter's behaviour on errors:
1.
|
ExtAuthz.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
ExtAuthz.Builder |
setFilterEnabled(RuntimeFractionalPercent.Builder builderForValue)
Specifies if the filter is enabled.
|
ExtAuthz.Builder |
setFilterEnabled(RuntimeFractionalPercent value)
Specifies if the filter is enabled.
|
ExtAuthz.Builder |
setFilterEnabledMetadata(MetadataMatcher.Builder builderForValue)
Specifies if the filter is enabled with metadata matcher.
|
ExtAuthz.Builder |
setFilterEnabledMetadata(MetadataMatcher value)
Specifies if the filter is enabled with metadata matcher.
|
ExtAuthz.Builder |
setGrpcService(GrpcService.Builder builderForValue)
gRPC service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
setGrpcService(GrpcService value)
gRPC service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
setHttpService(HttpService.Builder builderForValue)
HTTP service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
setHttpService(HttpService value)
HTTP service configuration (default timeout: 200ms).
|
ExtAuthz.Builder |
setIncludePeerCertificate(boolean value)
Specifies if the peer certificate is sent to the external service.
|
ExtAuthz.Builder |
setMetadataContextNamespaces(int index,
String value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
|
ExtAuthz.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
ExtAuthz.Builder |
setStatPrefix(String value)
Optional additional prefix to use when emitting statistics.
|
ExtAuthz.Builder |
setStatPrefixBytes(com.google.protobuf.ByteString value)
Optional additional prefix to use when emitting statistics.
|
ExtAuthz.Builder |
setStatusOnError(HttpStatus.Builder builderForValue)
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
ExtAuthz.Builder |
setStatusOnError(HttpStatus value)
Sets the HTTP status that is returned to the client when there is a network error between the
filter and the authorization server.
|
ExtAuthz.Builder |
setTransportApiVersion(ApiVersion value)
API version for ext_authz transport protocol.
|
ExtAuthz.Builder |
setTransportApiVersionValue(int value)
API version for ext_authz transport protocol.
|
ExtAuthz.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
ExtAuthz.Builder |
setWithRequestBody(BufferSettings.Builder builderForValue)
Enables filter to buffer the client request body and send it within the authorization request.
|
ExtAuthz.Builder |
setWithRequestBody(BufferSettings value)
Enables filter to buffer the client request body and send it within the authorization request.
|
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, newBuilderForField, onBuilt, onChanged, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic ExtAuthz build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic ExtAuthz buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic ExtAuthz.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<ExtAuthz.Builder>public ExtAuthz.Builder mergeFrom(ExtAuthz other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public ExtAuthz.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<ExtAuthz.Builder>IOExceptionpublic ExtAuthz.ServicesCase getServicesCase()
getServicesCase in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder clearServices()
public boolean hasGrpcService()
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;hasGrpcService in interface ExtAuthzOrBuilderpublic GrpcService getGrpcService()
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;getGrpcService in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setGrpcService(GrpcService value)
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;public ExtAuthz.Builder setGrpcService(GrpcService.Builder builderForValue)
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;public ExtAuthz.Builder mergeGrpcService(GrpcService value)
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;public ExtAuthz.Builder clearGrpcService()
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;public GrpcService.Builder getGrpcServiceBuilder()
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;public GrpcServiceOrBuilder getGrpcServiceOrBuilder()
gRPC service configuration (default timeout: 200ms).
.envoy.config.core.v4alpha.GrpcService grpc_service = 1;getGrpcServiceOrBuilder in interface ExtAuthzOrBuilderpublic boolean hasHttpService()
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;hasHttpService in interface ExtAuthzOrBuilderpublic HttpService getHttpService()
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;getHttpService in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setHttpService(HttpService value)
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;public ExtAuthz.Builder setHttpService(HttpService.Builder builderForValue)
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;public ExtAuthz.Builder mergeHttpService(HttpService value)
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;public ExtAuthz.Builder clearHttpService()
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;public HttpService.Builder getHttpServiceBuilder()
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;public HttpServiceOrBuilder getHttpServiceOrBuilder()
HTTP service configuration (default timeout: 200ms).
.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;getHttpServiceOrBuilder in interface ExtAuthzOrBuilderpublic int getTransportApiVersionValue()
API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and version of messages used on the wire.
.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }getTransportApiVersionValue in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setTransportApiVersionValue(int value)
API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and version of messages used on the wire.
.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }public ApiVersion getTransportApiVersion()
API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and version of messages used on the wire.
.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }getTransportApiVersion in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setTransportApiVersion(ApiVersion value)
API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and version of messages used on the wire.
.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }public ExtAuthz.Builder clearTransportApiVersion()
API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and version of messages used on the wire.
.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }public boolean getFailureModeAllow()
Changes filter's behaviour on errors: 1. When set to true, the filter will *accept* client request even if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. 2. When set to false, ext-authz will *reject* client requests and return a *Forbidden* response if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. Note that errors can be *always* tracked in the :ref:`stats <config_http_filters_ext_authz_stats>`.
bool failure_mode_allow = 2;getFailureModeAllow in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setFailureModeAllow(boolean value)
Changes filter's behaviour on errors: 1. When set to true, the filter will *accept* client request even if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. 2. When set to false, ext-authz will *reject* client requests and return a *Forbidden* response if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. Note that errors can be *always* tracked in the :ref:`stats <config_http_filters_ext_authz_stats>`.
bool failure_mode_allow = 2;public ExtAuthz.Builder clearFailureModeAllow()
Changes filter's behaviour on errors: 1. When set to true, the filter will *accept* client request even if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. 2. When set to false, ext-authz will *reject* client requests and return a *Forbidden* response if the communication with the authorization service has failed, or if the authorization service has returned a HTTP 5xx error. Note that errors can be *always* tracked in the :ref:`stats <config_http_filters_ext_authz_stats>`.
bool failure_mode_allow = 2;public boolean hasWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;hasWithRequestBody in interface ExtAuthzOrBuilderpublic BufferSettings getWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;getWithRequestBody in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setWithRequestBody(BufferSettings value)
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;public ExtAuthz.Builder setWithRequestBody(BufferSettings.Builder builderForValue)
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;public ExtAuthz.Builder mergeWithRequestBody(BufferSettings value)
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;public ExtAuthz.Builder clearWithRequestBody()
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;public BufferSettings.Builder getWithRequestBodyBuilder()
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;public BufferSettingsOrBuilder getWithRequestBodyOrBuilder()
Enables filter to buffer the client request body and send it within the authorization request. A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization request message indicating if the body data is partial.
.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;getWithRequestBodyOrBuilder in interface ExtAuthzOrBuilderpublic boolean getClearRouteCache()
Clears route cache in order to allow the external authorization service to correctly affect routing decisions. Filter clears all cached routes when: 1. The field is set to *true*. 2. The status returned from the authorization service is a HTTP 200 or gRPC 0. 3. At least one *authorization response header* is added to the client request, or is used for altering another client request header.
bool clear_route_cache = 6;getClearRouteCache in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setClearRouteCache(boolean value)
Clears route cache in order to allow the external authorization service to correctly affect routing decisions. Filter clears all cached routes when: 1. The field is set to *true*. 2. The status returned from the authorization service is a HTTP 200 or gRPC 0. 3. At least one *authorization response header* is added to the client request, or is used for altering another client request header.
bool clear_route_cache = 6;public ExtAuthz.Builder clearClearRouteCache()
Clears route cache in order to allow the external authorization service to correctly affect routing decisions. Filter clears all cached routes when: 1. The field is set to *true*. 2. The status returned from the authorization service is a HTTP 200 or gRPC 0. 3. At least one *authorization response header* is added to the client request, or is used for altering another client request header.
bool clear_route_cache = 6;public boolean hasStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;hasStatusOnError in interface ExtAuthzOrBuilderpublic HttpStatus getStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;getStatusOnError in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setStatusOnError(HttpStatus value)
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;public ExtAuthz.Builder setStatusOnError(HttpStatus.Builder builderForValue)
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;public ExtAuthz.Builder mergeStatusOnError(HttpStatus value)
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;public ExtAuthz.Builder clearStatusOnError()
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;public HttpStatus.Builder getStatusOnErrorBuilder()
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;public HttpStatusOrBuilder getStatusOnErrorOrBuilder()
Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server. The default status is HTTP 403 Forbidden.
.envoy.type.v3.HttpStatus status_on_error = 7;getStatusOnErrorOrBuilder in interface ExtAuthzOrBuilderpublic com.google.protobuf.ProtocolStringList getMetadataContextNamespacesList()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;getMetadataContextNamespacesList in interface ExtAuthzOrBuilderpublic int getMetadataContextNamespacesCount()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;getMetadataContextNamespacesCount in interface ExtAuthzOrBuilderpublic String getMetadataContextNamespaces(int index)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;getMetadataContextNamespaces in interface ExtAuthzOrBuilderpublic com.google.protobuf.ByteString getMetadataContextNamespacesBytes(int index)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;getMetadataContextNamespacesBytes in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setMetadataContextNamespaces(int index, String value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;public ExtAuthz.Builder addMetadataContextNamespaces(String value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;public ExtAuthz.Builder addAllMetadataContextNamespaces(Iterable<String> values)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;public ExtAuthz.Builder clearMetadataContextNamespaces()
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;public ExtAuthz.Builder addMetadataContextNamespacesBytes(com.google.protobuf.ByteString value)
Specifies a list of metadata namespaces whose values, if present, will be passed to the
ext_authz service as an opaque *protobuf::Struct*.
For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
<envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
then the following will pass the jwt payload to the authorization server.
.. code-block:: yaml
metadata_context_namespaces:
- envoy.filters.http.jwt_authn
repeated string metadata_context_namespaces = 8;public boolean hasFilterEnabled()
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;hasFilterEnabled in interface ExtAuthzOrBuilderpublic RuntimeFractionalPercent getFilterEnabled()
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;getFilterEnabled in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setFilterEnabled(RuntimeFractionalPercent value)
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;public ExtAuthz.Builder setFilterEnabled(RuntimeFractionalPercent.Builder builderForValue)
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;public ExtAuthz.Builder mergeFilterEnabled(RuntimeFractionalPercent value)
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;public ExtAuthz.Builder clearFilterEnabled()
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;public RuntimeFractionalPercent.Builder getFilterEnabledBuilder()
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;public RuntimeFractionalPercentOrBuilder getFilterEnabledOrBuilder()
Specifies if the filter is enabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified, Envoy will lookup the runtime key to get the percentage of requests to filter. If this field is not specified, the filter will be enabled for all requests.
.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;getFilterEnabledOrBuilder in interface ExtAuthzOrBuilderpublic boolean hasFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;hasFilterEnabledMetadata in interface ExtAuthzOrBuilderpublic MetadataMatcher getFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;getFilterEnabledMetadata in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setFilterEnabledMetadata(MetadataMatcher value)
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;public ExtAuthz.Builder setFilterEnabledMetadata(MetadataMatcher.Builder builderForValue)
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;public ExtAuthz.Builder mergeFilterEnabledMetadata(MetadataMatcher value)
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;public ExtAuthz.Builder clearFilterEnabledMetadata()
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;public MetadataMatcher.Builder getFilterEnabledMetadataBuilder()
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;public MetadataMatcherOrBuilder getFilterEnabledMetadataOrBuilder()
Specifies if the filter is enabled with metadata matcher. If this field is not specified, the filter will be enabled for all requests.
.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;getFilterEnabledMetadataOrBuilder in interface ExtAuthzOrBuilderpublic boolean hasDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;hasDenyAtDisable in interface ExtAuthzOrBuilderpublic RuntimeFeatureFlag getDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;getDenyAtDisable in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setDenyAtDisable(RuntimeFeatureFlag value)
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;public ExtAuthz.Builder setDenyAtDisable(RuntimeFeatureFlag.Builder builderForValue)
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;public ExtAuthz.Builder mergeDenyAtDisable(RuntimeFeatureFlag value)
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;public ExtAuthz.Builder clearDenyAtDisable()
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;public RuntimeFeatureFlag.Builder getDenyAtDisableBuilder()
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;public RuntimeFeatureFlagOrBuilder getDenyAtDisableOrBuilder()
Specifies whether to deny the requests, when the filter is disabled. If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified, Envoy will lookup the runtime key to determine whether to deny request for filter protected path at filter disabling. If filter is disabled in typed_per_filter_config for the path, requests will not be denied. If this field is not specified, all requests will be allowed when disabled.
.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;getDenyAtDisableOrBuilder in interface ExtAuthzOrBuilderpublic boolean getIncludePeerCertificate()
Specifies if the peer certificate is sent to the external service. When this field is true, Envoy will include the peer X.509 certificate, if available, in the :ref:`certificate<envoy_api_field_service.auth.v4alpha.AttributeContext.Peer.certificate>`.
bool include_peer_certificate = 10;getIncludePeerCertificate in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setIncludePeerCertificate(boolean value)
Specifies if the peer certificate is sent to the external service. When this field is true, Envoy will include the peer X.509 certificate, if available, in the :ref:`certificate<envoy_api_field_service.auth.v4alpha.AttributeContext.Peer.certificate>`.
bool include_peer_certificate = 10;public ExtAuthz.Builder clearIncludePeerCertificate()
Specifies if the peer certificate is sent to the external service. When this field is true, Envoy will include the peer X.509 certificate, if available, in the :ref:`certificate<envoy_api_field_service.auth.v4alpha.AttributeContext.Peer.certificate>`.
bool include_peer_certificate = 10;public String getStatPrefix()
Optional additional prefix to use when emitting statistics. This allows to distinguish
emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
.. code-block:: yaml
http_filters:
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
string stat_prefix = 13;getStatPrefix in interface ExtAuthzOrBuilderpublic com.google.protobuf.ByteString getStatPrefixBytes()
Optional additional prefix to use when emitting statistics. This allows to distinguish
emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
.. code-block:: yaml
http_filters:
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
string stat_prefix = 13;getStatPrefixBytes in interface ExtAuthzOrBuilderpublic ExtAuthz.Builder setStatPrefix(String value)
Optional additional prefix to use when emitting statistics. This allows to distinguish
emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
.. code-block:: yaml
http_filters:
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
string stat_prefix = 13;public ExtAuthz.Builder clearStatPrefix()
Optional additional prefix to use when emitting statistics. This allows to distinguish
emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
.. code-block:: yaml
http_filters:
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
string stat_prefix = 13;public ExtAuthz.Builder setStatPrefixBytes(com.google.protobuf.ByteString value)
Optional additional prefix to use when emitting statistics. This allows to distinguish
emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
.. code-block:: yaml
http_filters:
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
- name: envoy.filters.http.ext_authz
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
string stat_prefix = 13;public final ExtAuthz.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>public final ExtAuthz.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<ExtAuthz.Builder>Copyright © 2018–2021 The Envoy Project. All rights reserved.