Sync Gloo APIs. Destination Branch: gloo-main

api/gloo/enterprise.gloo/v1/auth_config.proto

@@ -1238,7 +1238,8 @@ message PassThroughHttp {
     message Response {
         // When this is set, authorization response headers that have a header in this list will be added to the original client request and sent to the upstream
         // when the auth request is successful. These will be appended to any request headers that already exist.
-        // If this is empty, by default, no authorization response headers will be added to the upstream request.
+        // If this and allowed_upstream_headers_to_override are empty, by default, no authorization response headers will be added to the upstream request.
+        // Header names may not be included in both allowed_upstream_headers and allowed_upstream_headers_to_override.
         repeated string allowed_upstream_headers = 1;
 
         // When this is set, authorization response headers in this list will be added to the client's response when the auth request is denied.
@@ -1255,6 +1256,12 @@ message PassThroughHttp {
         // If the marshalling fails, the authorization check will fail and the request will be unauthorized after the ext-auth-service pod
         // logs the marshal error.
         bool read_state_from_response = 3;
+
+        // When this is set, authorization response headers that have a header in this list will be added to the original client request and sent to the upstream
+        // when the auth request is successful. These will overwrite to any request headers that already exist.
+        // If this and allowed_upstream_headers are empty, by default, no authorization response headers will be added to the upstream request.
+        // Header names may not be included in both allowed_upstream_headers and allowed_upstream_headers_to_override.
+        repeated string allowed_upstream_headers_to_override = 4;
     }
     Response response = 4;
 

api/gloo/gloo/v1/enterprise/options/caching/caching.proto

@@ -25,7 +25,7 @@ message Settings {
    // Max payload size to cache. If unset defaults to a reasonable value.
    // If explicitly set to 0 will prevent anything with a body from
    // being cached.
-   google.protobuf.UInt64Value max_payload_size = 4;
+   google.protobuf.UInt32Value max_payload_size = 4;
 
 
 }

api/gloo/gloo/v1/options/connection_limit/connection_limit.proto

@@ -20,7 +20,7 @@ message ConnectionLimit {
     // The maximum number of active connections for this gateway. When this limit is reached, any incoming connection
     // will be closed after delay duration.
     // Must be greater than one.
-    google.protobuf.UInt64Value max_active_connections = 1;
+    google.protobuf.UInt32Value max_active_connections = 1;
 
     // The time to wait before a connection is dropped. Useful for DoS prevention.
     // Defaults to zero and the connection will be closed immediately.