fix: set path prefix for http ext auth service (envoyproxy#3018)

Signed-off-by: huabing zhao <[email protected]>
zhaohuabing · Mar 27, 2024 · ccf91b9 · ccf91b9
1 parent a2d40c2
commit ccf91b9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/internal/xds/translator/extauth.go b/internal/xds/translator/extauth.go
@@ -147,9 +147,13 @@ func httpService(http *ir.HTTPExtAuthService) *extauthv3.HttpService {
 	var (
 		uri              string
 		headersToBackend []*matcherv3.StringMatcher
-		service          = new(extauthv3.HttpService)
+		service          *extauthv3.HttpService
 	)
 
+	service = &extauthv3.HttpService{
+		PathPrefix: http.Path,
+	}
+
 	u := url.URL{
 		// scheme should be decided by the TLS setting, but we don't have that info now.
 		// It's safe to set it to http because the ext auth filter doesn't use the

diff --git a/internal/xds/translator/testdata/out/xds-ir/ext-auth.listeners.yaml b/internal/xds/translator/testdata/out/xds-ir/ext-auth.listeners.yaml
@@ -39,6 +39,7 @@
                   patterns:
                   - exact: header1
                   - exact: header2
+              pathPrefix: /auth
               serverUri:
                 cluster: securitypolicy/default/policy-for-gateway-1/envoy-gateway/http-backend
                 timeout: 10s