io.envoyproxy.envoy.extensions.filters.http.ext_authz.v4alpha

Class ExtAuthz

java.lang.Object

com.google.protobuf.AbstractMessageLite

com.google.protobuf.AbstractMessage

com.google.protobuf.GeneratedMessageV3

io.envoyproxy.envoy.extensions.filters.http.ext_authz.v4alpha.ExtAuthz

All Implemented Interfaces:

com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, ExtAuthzOrBuilder, Serializable

public final class ExtAuthz
extends com.google.protobuf.GeneratedMessageV3
implements ExtAuthzOrBuilder

 [#next-free-field: 15]
 

Protobuf type envoy.extensions.filters.http.ext_authz.v4alpha.ExtAuthz

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ExtAuthz.Builder [#next-free-field: 15] Protobuf type envoy.extensions.filters.http.ext_authz.v4alpha.ExtAuthz
static class	ExtAuthz.ServicesCase

Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3

com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter

Field Summary

Fields

Modifier and Type	Field and Description
static int	CLEAR_ROUTE_CACHE_FIELD_NUMBER
static int	DENY_AT_DISABLE_FIELD_NUMBER
static int	FAILURE_MODE_ALLOW_FIELD_NUMBER
static int	FILTER_ENABLED_FIELD_NUMBER
static int	FILTER_ENABLED_METADATA_FIELD_NUMBER
static int	GRPC_SERVICE_FIELD_NUMBER
static int	HTTP_SERVICE_FIELD_NUMBER
static int	INCLUDE_PEER_CERTIFICATE_FIELD_NUMBER
static int	METADATA_CONTEXT_NAMESPACES_FIELD_NUMBER
static int	STAT_PREFIX_FIELD_NUMBER
static int	STATUS_ON_ERROR_FIELD_NUMBER
static int	TRANSPORT_API_VERSION_FIELD_NUMBER
static int	WITH_REQUEST_BODY_FIELD_NUMBER

Fields inherited from class com.google.protobuf.GeneratedMessageV3

alwaysUseFieldBuilders, unknownFields

Fields inherited from class com.google.protobuf.AbstractMessage

memoizedSize

Fields inherited from class com.google.protobuf.AbstractMessageLite

memoizedHashCode

Method Summary

Modifier and Type	Method and Description
boolean	equals(Object obj)
boolean	getClearRouteCache() Clears route cache in order to allow the external authorization service to correctly affect routing decisions.
static ExtAuthz	getDefaultInstance()
ExtAuthz	getDefaultInstanceForType()
RuntimeFeatureFlag	getDenyAtDisable() Specifies whether to deny the requests, when the filter is disabled.
RuntimeFeatureFlagOrBuilder	getDenyAtDisableOrBuilder() Specifies whether to deny the requests, when the filter is disabled.
static com.google.protobuf.Descriptors.Descriptor	getDescriptor()
boolean	getFailureModeAllow() Changes filter's behaviour on errors: 1.
RuntimeFractionalPercent	getFilterEnabled() Specifies if the filter is enabled.
MetadataMatcher	getFilterEnabledMetadata() Specifies if the filter is enabled with metadata matcher.
MetadataMatcherOrBuilder	getFilterEnabledMetadataOrBuilder() Specifies if the filter is enabled with metadata matcher.
RuntimeFractionalPercentOrBuilder	getFilterEnabledOrBuilder() Specifies if the filter is enabled.
GrpcService	getGrpcService() gRPC service configuration (default timeout: 200ms).
GrpcServiceOrBuilder	getGrpcServiceOrBuilder() gRPC service configuration (default timeout: 200ms).
HttpService	getHttpService() HTTP service configuration (default timeout: 200ms).
HttpServiceOrBuilder	getHttpServiceOrBuilder() HTTP service configuration (default timeout: 200ms).
boolean	getIncludePeerCertificate() Specifies if the peer certificate is sent to the external service.
String	getMetadataContextNamespaces(int index) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service as an opaque *protobuf::Struct*.
com.google.protobuf.ByteString	getMetadataContextNamespacesBytes(int index) Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service as an opaque *protobuf::Struct*.
int	getMetadataContextNamespacesCount() Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service as an opaque *protobuf::Struct*.
com.google.protobuf.ProtocolStringList	getMetadataContextNamespacesList() Specifies a list of metadata namespaces whose values, if present, will be passed to the ext_authz service as an opaque *protobuf::Struct*.
com.google.protobuf.Parser<ExtAuthz>	getParserForType()
int	getSerializedSize()
ExtAuthz.ServicesCase	getServicesCase()
String	getStatPrefix() Optional additional prefix to use when emitting statistics.
com.google.protobuf.ByteString	getStatPrefixBytes() Optional additional prefix to use when emitting statistics.
HttpStatus	getStatusOnError() Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server.
HttpStatusOrBuilder	getStatusOnErrorOrBuilder() Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server.
ApiVersion	getTransportApiVersion() API version for ext_authz transport protocol.
int	getTransportApiVersionValue() API version for ext_authz transport protocol.
com.google.protobuf.UnknownFieldSet	getUnknownFields()
BufferSettings	getWithRequestBody() Enables filter to buffer the client request body and send it within the authorization request.
BufferSettingsOrBuilder	getWithRequestBodyOrBuilder() Enables filter to buffer the client request body and send it within the authorization request.
boolean	hasDenyAtDisable() Specifies whether to deny the requests, when the filter is disabled.
boolean	hasFilterEnabled() Specifies if the filter is enabled.
boolean	hasFilterEnabledMetadata() Specifies if the filter is enabled with metadata matcher.
boolean	hasGrpcService() gRPC service configuration (default timeout: 200ms).
int	hashCode()
boolean	hasHttpService() HTTP service configuration (default timeout: 200ms).
boolean	hasStatusOnError() Sets the HTTP status that is returned to the client when there is a network error between the filter and the authorization server.
boolean	hasWithRequestBody() Enables filter to buffer the client request body and send it within the authorization request.
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable	internalGetFieldAccessorTable()
boolean	isInitialized()
static ExtAuthz.Builder	newBuilder()
static ExtAuthz.Builder	newBuilder(ExtAuthz prototype)
ExtAuthz.Builder	newBuilderForType()
protected ExtAuthz.Builder	newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
protected Object	newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
static ExtAuthz	parseDelimitedFrom(InputStream input)
static ExtAuthz	parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static ExtAuthz	parseFrom(byte[] data)
static ExtAuthz	parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static ExtAuthz	parseFrom(ByteBuffer data)
static ExtAuthz	parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static ExtAuthz	parseFrom(com.google.protobuf.ByteString data)
static ExtAuthz	parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static ExtAuthz	parseFrom(com.google.protobuf.CodedInputStream input)
static ExtAuthz	parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static ExtAuthz	parseFrom(InputStream input)
static ExtAuthz	parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static com.google.protobuf.Parser<ExtAuthz>	parser()
ExtAuthz.Builder	toBuilder()
void	writeTo(com.google.protobuf.CodedOutputStream output)

Methods inherited from class com.google.protobuf.GeneratedMessageV3

canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag

Methods inherited from class com.google.protobuf.AbstractMessage

findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toString

Methods inherited from class com.google.protobuf.AbstractMessageLite

addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLite

toByteArray, toByteString, writeDelimitedTo, writeTo

Field Detail

GRPC_SERVICE_FIELD_NUMBER

public static final int GRPC_SERVICE_FIELD_NUMBER

See Also:

Constant Field Values

HTTP_SERVICE_FIELD_NUMBER

public static final int HTTP_SERVICE_FIELD_NUMBER

See Also:

Constant Field Values

TRANSPORT_API_VERSION_FIELD_NUMBER

public static final int TRANSPORT_API_VERSION_FIELD_NUMBER

See Also:

Constant Field Values

FAILURE_MODE_ALLOW_FIELD_NUMBER

public static final int FAILURE_MODE_ALLOW_FIELD_NUMBER

See Also:

Constant Field Values

WITH_REQUEST_BODY_FIELD_NUMBER

public static final int WITH_REQUEST_BODY_FIELD_NUMBER

See Also:

Constant Field Values

CLEAR_ROUTE_CACHE_FIELD_NUMBER

public static final int CLEAR_ROUTE_CACHE_FIELD_NUMBER

See Also:

Constant Field Values

STATUS_ON_ERROR_FIELD_NUMBER

public static final int STATUS_ON_ERROR_FIELD_NUMBER

See Also:

Constant Field Values

METADATA_CONTEXT_NAMESPACES_FIELD_NUMBER

public static final int METADATA_CONTEXT_NAMESPACES_FIELD_NUMBER

See Also:

Constant Field Values

FILTER_ENABLED_FIELD_NUMBER

public static final int FILTER_ENABLED_FIELD_NUMBER

See Also:

Constant Field Values

FILTER_ENABLED_METADATA_FIELD_NUMBER

public static final int FILTER_ENABLED_METADATA_FIELD_NUMBER

See Also:

Constant Field Values

DENY_AT_DISABLE_FIELD_NUMBER

public static final int DENY_AT_DISABLE_FIELD_NUMBER

See Also:

Constant Field Values

INCLUDE_PEER_CERTIFICATE_FIELD_NUMBER

public static final int INCLUDE_PEER_CERTIFICATE_FIELD_NUMBER

See Also:

Constant Field Values

STAT_PREFIX_FIELD_NUMBER

public static final int STAT_PREFIX_FIELD_NUMBER

See Also:

Constant Field Values

Method Detail

newInstance

protected Object newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)

Overrides:

newInstance in class com.google.protobuf.GeneratedMessageV3

getUnknownFields

public final com.google.protobuf.UnknownFieldSet getUnknownFields()

Specified by:

getUnknownFields in interface com.google.protobuf.MessageOrBuilder

Overrides:

getUnknownFields in class com.google.protobuf.GeneratedMessageV3

getDescriptor

public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

internalGetFieldAccessorTable

protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Specified by:

internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3

getServicesCase

public ExtAuthz.ServicesCase getServicesCase()

Specified by:

getServicesCase in interface ExtAuthzOrBuilder

hasGrpcService

public boolean hasGrpcService()

 gRPC service configuration (default timeout: 200ms).
 

.envoy.config.core.v4alpha.GrpcService grpc_service = 1;

Specified by:

hasGrpcService in interface ExtAuthzOrBuilder

getGrpcService

public GrpcService getGrpcService()

 gRPC service configuration (default timeout: 200ms).
 

.envoy.config.core.v4alpha.GrpcService grpc_service = 1;

Specified by:

getGrpcService in interface ExtAuthzOrBuilder

getGrpcServiceOrBuilder

public GrpcServiceOrBuilder getGrpcServiceOrBuilder()

 gRPC service configuration (default timeout: 200ms).
 

.envoy.config.core.v4alpha.GrpcService grpc_service = 1;

Specified by:

getGrpcServiceOrBuilder in interface ExtAuthzOrBuilder

hasHttpService

public boolean hasHttpService()

 HTTP service configuration (default timeout: 200ms).
 

.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;

Specified by:

hasHttpService in interface ExtAuthzOrBuilder

getHttpService

public HttpService getHttpService()

 HTTP service configuration (default timeout: 200ms).
 

.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;

Specified by:

getHttpService in interface ExtAuthzOrBuilder

getHttpServiceOrBuilder

public HttpServiceOrBuilder getHttpServiceOrBuilder()

 HTTP service configuration (default timeout: 200ms).
 

.envoy.extensions.filters.http.ext_authz.v4alpha.HttpService http_service = 3;

Specified by:

getHttpServiceOrBuilder in interface ExtAuthzOrBuilder

getTransportApiVersionValue

public int getTransportApiVersionValue()

 API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and
 version of messages used on the wire.
 

.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }

Specified by:

getTransportApiVersionValue in interface ExtAuthzOrBuilder

getTransportApiVersion

public ApiVersion getTransportApiVersion()

 API version for ext_authz transport protocol. This describes the ext_authz gRPC endpoint and
 version of messages used on the wire.
 

.envoy.config.core.v4alpha.ApiVersion transport_api_version = 12 [(.validate.rules) = { ... }

Specified by:

getTransportApiVersion in interface ExtAuthzOrBuilder

getFailureModeAllow

public boolean getFailureModeAllow()

  Changes filter's behaviour on errors:
  1. When set to true, the filter will *accept* client request even if the communication with
  the authorization service has failed, or if the authorization service has returned a HTTP 5xx
  error.
  2. When set to false, ext-authz will *reject* client requests and return a *Forbidden*
  response if the communication with the authorization service has failed, or if the
  authorization service has returned a HTTP 5xx error.
 Note that errors can be *always* tracked in the :ref:`stats
 <config_http_filters_ext_authz_stats>`.
 

bool failure_mode_allow = 2;

Specified by:

getFailureModeAllow in interface ExtAuthzOrBuilder

hasWithRequestBody

public boolean hasWithRequestBody()

 Enables filter to buffer the client request body and send it within the authorization request.
 A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization
 request message indicating if the body data is partial.
 

.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;

Specified by:

hasWithRequestBody in interface ExtAuthzOrBuilder

getWithRequestBody

public BufferSettings getWithRequestBody()

 Enables filter to buffer the client request body and send it within the authorization request.
 A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization
 request message indicating if the body data is partial.
 

.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;

Specified by:

getWithRequestBody in interface ExtAuthzOrBuilder

getWithRequestBodyOrBuilder

public BufferSettingsOrBuilder getWithRequestBodyOrBuilder()

 Enables filter to buffer the client request body and send it within the authorization request.
 A ``x-envoy-auth-partial-body: false|true`` metadata header will be added to the authorization
 request message indicating if the body data is partial.
 

.envoy.extensions.filters.http.ext_authz.v4alpha.BufferSettings with_request_body = 5;

Specified by:

getWithRequestBodyOrBuilder in interface ExtAuthzOrBuilder

getClearRouteCache

public boolean getClearRouteCache()

 Clears route cache in order to allow the external authorization service to correctly affect
 routing decisions. Filter clears all cached routes when:
 1. The field is set to *true*.
 2. The status returned from the authorization service is a HTTP 200 or gRPC 0.
 3. At least one *authorization response header* is added to the client request, or is used for
 altering another client request header.
 

bool clear_route_cache = 6;

Specified by:

getClearRouteCache in interface ExtAuthzOrBuilder

hasStatusOnError

public boolean hasStatusOnError()

 Sets the HTTP status that is returned to the client when there is a network error between the
 filter and the authorization server. The default status is HTTP 403 Forbidden.
 

.envoy.type.v3.HttpStatus status_on_error = 7;

Specified by:

hasStatusOnError in interface ExtAuthzOrBuilder

getStatusOnError

public HttpStatus getStatusOnError()

 Sets the HTTP status that is returned to the client when there is a network error between the
 filter and the authorization server. The default status is HTTP 403 Forbidden.
 

.envoy.type.v3.HttpStatus status_on_error = 7;

Specified by:

getStatusOnError in interface ExtAuthzOrBuilder

getStatusOnErrorOrBuilder

public HttpStatusOrBuilder getStatusOnErrorOrBuilder()

 Sets the HTTP status that is returned to the client when there is a network error between the
 filter and the authorization server. The default status is HTTP 403 Forbidden.
 

.envoy.type.v3.HttpStatus status_on_error = 7;

Specified by:

getStatusOnErrorOrBuilder in interface ExtAuthzOrBuilder

getMetadataContextNamespacesList

public com.google.protobuf.ProtocolStringList getMetadataContextNamespacesList()

 Specifies a list of metadata namespaces whose values, if present, will be passed to the
 ext_authz service as an opaque *protobuf::Struct*.
 For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
 <envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
 then the following will pass the jwt payload to the authorization server.
 .. code-block:: yaml
    metadata_context_namespaces:
    - envoy.filters.http.jwt_authn
 

repeated string metadata_context_namespaces = 8;

Specified by:

getMetadataContextNamespacesList in interface ExtAuthzOrBuilder

getMetadataContextNamespacesCount

public int getMetadataContextNamespacesCount()

 Specifies a list of metadata namespaces whose values, if present, will be passed to the
 ext_authz service as an opaque *protobuf::Struct*.
 For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
 <envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
 then the following will pass the jwt payload to the authorization server.
 .. code-block:: yaml
    metadata_context_namespaces:
    - envoy.filters.http.jwt_authn
 

repeated string metadata_context_namespaces = 8;

Specified by:

getMetadataContextNamespacesCount in interface ExtAuthzOrBuilder

getMetadataContextNamespaces

public String getMetadataContextNamespaces(int index)

 Specifies a list of metadata namespaces whose values, if present, will be passed to the
 ext_authz service as an opaque *protobuf::Struct*.
 For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
 <envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
 then the following will pass the jwt payload to the authorization server.
 .. code-block:: yaml
    metadata_context_namespaces:
    - envoy.filters.http.jwt_authn
 

repeated string metadata_context_namespaces = 8;

Specified by:

getMetadataContextNamespaces in interface ExtAuthzOrBuilder

getMetadataContextNamespacesBytes

public com.google.protobuf.ByteString getMetadataContextNamespacesBytes(int index)

 Specifies a list of metadata namespaces whose values, if present, will be passed to the
 ext_authz service as an opaque *protobuf::Struct*.
 For example, if the *jwt_authn* filter is used and :ref:`payload_in_metadata
 <envoy_api_field_extensions.filters.http.jwt_authn.v4alpha.JwtProvider.payload_in_metadata>` is set,
 then the following will pass the jwt payload to the authorization server.
 .. code-block:: yaml
    metadata_context_namespaces:
    - envoy.filters.http.jwt_authn
 

repeated string metadata_context_namespaces = 8;

Specified by:

getMetadataContextNamespacesBytes in interface ExtAuthzOrBuilder

hasFilterEnabled

public boolean hasFilterEnabled()

 Specifies if the filter is enabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified,
 Envoy will lookup the runtime key to get the percentage of requests to filter.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;

Specified by:

hasFilterEnabled in interface ExtAuthzOrBuilder

getFilterEnabled

public RuntimeFractionalPercent getFilterEnabled()

 Specifies if the filter is enabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified,
 Envoy will lookup the runtime key to get the percentage of requests to filter.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;

Specified by:

getFilterEnabled in interface ExtAuthzOrBuilder

getFilterEnabledOrBuilder

public RuntimeFractionalPercentOrBuilder getFilterEnabledOrBuilder()

 Specifies if the filter is enabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFractionalPercent.runtime_key>` is specified,
 Envoy will lookup the runtime key to get the percentage of requests to filter.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.config.core.v4alpha.RuntimeFractionalPercent filter_enabled = 9;

Specified by:

getFilterEnabledOrBuilder in interface ExtAuthzOrBuilder

hasFilterEnabledMetadata

public boolean hasFilterEnabledMetadata()

 Specifies if the filter is enabled with metadata matcher.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;

Specified by:

hasFilterEnabledMetadata in interface ExtAuthzOrBuilder

getFilterEnabledMetadata

public MetadataMatcher getFilterEnabledMetadata()

 Specifies if the filter is enabled with metadata matcher.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;

Specified by:

getFilterEnabledMetadata in interface ExtAuthzOrBuilder

getFilterEnabledMetadataOrBuilder

public MetadataMatcherOrBuilder getFilterEnabledMetadataOrBuilder()

 Specifies if the filter is enabled with metadata matcher.
 If this field is not specified, the filter will be enabled for all requests.
 

.envoy.type.matcher.v4alpha.MetadataMatcher filter_enabled_metadata = 14;

Specified by:

getFilterEnabledMetadataOrBuilder in interface ExtAuthzOrBuilder

hasDenyAtDisable

public boolean hasDenyAtDisable()

 Specifies whether to deny the requests, when the filter is disabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified,
 Envoy will lookup the runtime key to determine whether to deny request for
 filter protected path at filter disabling. If filter is disabled in
 typed_per_filter_config for the path, requests will not be denied.
 If this field is not specified, all requests will be allowed when disabled.
 

.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;

Specified by:

hasDenyAtDisable in interface ExtAuthzOrBuilder

getDenyAtDisable

public RuntimeFeatureFlag getDenyAtDisable()

 Specifies whether to deny the requests, when the filter is disabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified,
 Envoy will lookup the runtime key to determine whether to deny request for
 filter protected path at filter disabling. If filter is disabled in
 typed_per_filter_config for the path, requests will not be denied.
 If this field is not specified, all requests will be allowed when disabled.
 

.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;

Specified by:

getDenyAtDisable in interface ExtAuthzOrBuilder

getDenyAtDisableOrBuilder

public RuntimeFeatureFlagOrBuilder getDenyAtDisableOrBuilder()

 Specifies whether to deny the requests, when the filter is disabled.
 If :ref:`runtime_key <envoy_api_field_config.core.v4alpha.RuntimeFeatureFlag.runtime_key>` is specified,
 Envoy will lookup the runtime key to determine whether to deny request for
 filter protected path at filter disabling. If filter is disabled in
 typed_per_filter_config for the path, requests will not be denied.
 If this field is not specified, all requests will be allowed when disabled.
 

.envoy.config.core.v4alpha.RuntimeFeatureFlag deny_at_disable = 11;

Specified by:

getDenyAtDisableOrBuilder in interface ExtAuthzOrBuilder

getIncludePeerCertificate

public boolean getIncludePeerCertificate()

 Specifies if the peer certificate is sent to the external service.
 When this field is true, Envoy will include the peer X.509 certificate, if available, in the
 :ref:`certificate<envoy_api_field_service.auth.v4alpha.AttributeContext.Peer.certificate>`.
 

bool include_peer_certificate = 10;

Specified by:

getIncludePeerCertificate in interface ExtAuthzOrBuilder

getStatPrefix

public String getStatPrefix()

 Optional additional prefix to use when emitting statistics. This allows to distinguish
 emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
 .. code-block:: yaml
   http_filters:
     - name: envoy.filters.http.ext_authz
       typed_config:
         "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
         stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
     - name: envoy.filters.http.ext_authz
       typed_config:
         "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
         stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
 

string stat_prefix = 13;

Specified by:

getStatPrefix in interface ExtAuthzOrBuilder

getStatPrefixBytes

public com.google.protobuf.ByteString getStatPrefixBytes()

 Optional additional prefix to use when emitting statistics. This allows to distinguish
 emitted statistics between configured *ext_authz* filters in an HTTP filter chain. For example:
 .. code-block:: yaml
   http_filters:
     - name: envoy.filters.http.ext_authz
       typed_config:
         "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
         stat_prefix: waf # This emits ext_authz.waf.ok, ext_authz.waf.denied, etc.
     - name: envoy.filters.http.ext_authz
       typed_config:
         "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
         stat_prefix: blocker # This emits ext_authz.blocker.ok, ext_authz.blocker.denied, etc.
 

string stat_prefix = 13;

Specified by:

getStatPrefixBytes in interface ExtAuthzOrBuilder

isInitialized

public final boolean isInitialized()

Specified by:

isInitialized in interface com.google.protobuf.MessageLiteOrBuilder

Overrides:

isInitialized in class com.google.protobuf.GeneratedMessageV3

writeTo

public void writeTo(com.google.protobuf.CodedOutputStream output)
             throws IOException

Specified by:

writeTo in interface com.google.protobuf.MessageLite

Overrides:

writeTo in class com.google.protobuf.GeneratedMessageV3

Throws:

IOException

getSerializedSize

public int getSerializedSize()

Specified by:

getSerializedSize in interface com.google.protobuf.MessageLite

Overrides:

getSerializedSize in class com.google.protobuf.GeneratedMessageV3

equals

public boolean equals(Object obj)

Specified by:

equals in interface com.google.protobuf.Message

Overrides:

equals in class com.google.protobuf.AbstractMessage

hashCode

public int hashCode()

Specified by:

hashCode in interface com.google.protobuf.Message

Overrides:

hashCode in class com.google.protobuf.AbstractMessage

parseFrom

public static ExtAuthz parseFrom(ByteBuffer data)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(ByteBuffer data,
                                 com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(com.google.protobuf.ByteString data)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(com.google.protobuf.ByteString data,
                                 com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(byte[] data)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(byte[] data,
                                 com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                          throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static ExtAuthz parseFrom(InputStream input)
                          throws IOException

Throws:

IOException

parseFrom

public static ExtAuthz parseFrom(InputStream input,
                                 com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                          throws IOException

Throws:

IOException

parseDelimitedFrom

public static ExtAuthz parseDelimitedFrom(InputStream input)
                                   throws IOException

Throws:

IOException

parseDelimitedFrom

public static ExtAuthz parseDelimitedFrom(InputStream input,
                                          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                   throws IOException

Throws:

IOException

parseFrom

public static ExtAuthz parseFrom(com.google.protobuf.CodedInputStream input)
                          throws IOException

Throws:

IOException

parseFrom

public static ExtAuthz parseFrom(com.google.protobuf.CodedInputStream input,
                                 com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                          throws IOException

Throws:

IOException

newBuilderForType

public ExtAuthz.Builder newBuilderForType()

Specified by:

newBuilderForType in interface com.google.protobuf.Message

Specified by:

newBuilderForType in interface com.google.protobuf.MessageLite

newBuilder

public static ExtAuthz.Builder newBuilder()

newBuilder

public static ExtAuthz.Builder newBuilder(ExtAuthz prototype)

toBuilder

public ExtAuthz.Builder toBuilder()

Specified by:

toBuilder in interface com.google.protobuf.Message

Specified by:

toBuilder in interface com.google.protobuf.MessageLite

newBuilderForType

protected ExtAuthz.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)

Specified by:

newBuilderForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstance

public static ExtAuthz getDefaultInstance()

parser

public static com.google.protobuf.Parser<ExtAuthz> parser()

getParserForType

public com.google.protobuf.Parser<ExtAuthz> getParserForType()

Specified by:

getParserForType in interface com.google.protobuf.Message

Specified by:

getParserForType in interface com.google.protobuf.MessageLite

Overrides:

getParserForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstanceForType

public ExtAuthz getDefaultInstanceForType()

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder