summaryrefslogtreecommitdiff
path: root/etc/envoy/envoy.yaml
AgeCommit message (Collapse)Author
2025-08-14Fix the broken build by running pg as a separate container.mo khan
Improve shell scripts and remove /sparkles/restore endpoint - Add error handling and debugging to shell scripts with `set -e` and `DEBUG` flag - Ensure scripts run from project root with `cd "$(dirname "$0")/.."` - Remove `/sparkles/restore` endpoint from public routes and Envoy config - Add Postgres test container support for integration tests - Update CI configuration with newer Runway version and improved test setup - Simplify Makefile by removing redundant commands ------- :robot: Commit message generated by GitLab Duo
2025-06-13chore: fix the oauth2 regex configmo khan
2025-05-28docs: update envoy documentationmo khan
2025-05-28chore: do not forward sensitive headers to Sparklemo khan
2025-05-28chore: rename headers from x-id-jwt to x-jwtmo khan
2025-05-28chore: inject jwt headers for all requestsmo khan
2025-05-28refactor: always provide a user in the request contextmo khan
2025-05-28chore: read from id_token and bearer_token cookiesmo khan
2025-05-28chore: specify the issuer of the jwt providermo khan
2025-05-28refactor: parse headers injected by envoymo khan
2025-05-27chore: add retry policy for oauth2 http filtermo khan
2025-05-24chore: remove duplicate log entry from envoymo khan
2025-05-24chore: stop using deprecated `exact_match` optionmo khan
2025-05-23feat: add external authorization service (authzd) with JWT authenticationmo khan
- Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication.
2025-05-15chore: allow envoy to handle health checksmo khan
2025-05-13chore: specify the max_active_downstream_connectionsmo khan
2025-05-12chore: fix typo in envoy configmo khan
2025-05-12chore: safe_regex_match is deprecated and replaced with string_matchmo khan
2025-05-12chore: mimic how services are run between docker and host machinemo khan