feat: recomputeRoute for claim based routing (#2688)

Relates to #2452 Signed-off-by: Arko Dasgupta <arko@tetrate.io>
envoyproxy · Feb 24, 2024 · f4277b1 · f4277b1
1 parent c5cd964
commit f4277b1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/internal/xds/translator/jwt.go b/internal/xds/translator/jwt.go
@@ -145,6 +145,10 @@ func buildJWTAuthn(irListener *ir.HTTPListener) (*jwtauthnv3.JwtAuthentication,
 				Forward:             true,
 			}
 
+			if irProvider.RecomputeRoute != nil {
+				jwtProvider.ClearRouteCache = *irProvider.RecomputeRoute
+			}
+
 			if irProvider.ExtractFrom != nil {
 				jwtProvider.FromHeaders = buildJwtFromHeaders(irProvider.ExtractFrom.Headers)
 				jwtProvider.FromCookies = irProvider.ExtractFrom.Cookies

diff --git a/internal/xds/translator/testdata/in/xds-ir/jwt-multi-route-multi-provider.yaml b/internal/xds/translator/testdata/in/xds-ir/jwt-multi-route-multi-provider.yaml
@@ -30,6 +30,7 @@ http:
         - two.foo.com
         remoteJWKS:
           uri: https://192.168.1.250:8080/jwt/public-key/jwks.json
+        recomputeRoute: true
         claimToHeaders:
         - header: one-route-example2-key1
           claim: claim.neteased.key

diff --git a/internal/xds/translator/testdata/out/xds-ir/jwt-multi-route-multi-provider.listeners.yaml b/internal/xds/translator/testdata/out/xds-ir/jwt-multi-route-multi-provider.listeners.yaml
@@ -44,6 +44,7 @@
                   headerName: one-route-example2-key1
                 - claimName: name
                   headerName: one-route-example2-key2
+                clearRouteCache: true
                 forward: true
                 issuer: https://www.two.example.com
                 payloadInMetadata: https://www.two.example.com