kubeshop/kusk-ext-authz-http-service

kubeshop/kusk-ext-authz-http-service

HTTP-SERVICE

Taken from https://github.com/envoyproxy/envoy/tree/main/examples/ext_authz in particular https://github.com/envoyproxy/envoy/blob/main/examples/ext_authz/auth/http-service/server.js.

Usage

yaml
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ext-authz-http-service
  name: ext-authz-http-service
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ext-authz-http-service
  template:
    metadata:
      labels:
        app: ext-authz-http-service
    spec:
      containers:
        - image: docker.io/kubeshop/kusk-ext-authz-http-service
          name: ext-authz-http-service
          resources:
            limits:
              memory: "128Mi"
              cpu: "500m"
          ports:
            - containerPort: 9002
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ext-authz-http-service
  name: ext-authz-http-service
spec:
  ports:
    - port: 9002
      targetPort: 9002
  selector:
    app: ext-authz-http-service
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: httpbin
  name: httpbin
spec:
  replicas: 1
  selector:
    matchLabels:
      app: httpbin
  template:
    metadata:
      labels:
        app: httpbin
    spec:
      containers:
        - image: kennethreitz/httpbin
          name: httpbin
          resources:
            limits:
              memory: "128Mi"
              cpu: "500m"
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: httpbin
  name: httpbin
spec:
  ports:
    - port: 8080
      targetPort: 80
  selector:
    app: httpbin

and

yaml
apiVersion: gateway.kusk.io/v1alpha1
kind: StaticRoute
metadata:
  name: ext-authz-http-service
spec:
  # should work with localhost, example.org
  hosts: ["localhost", "*"]
  paths:
    # /static -> /
    /static:
      get:
        redirect:
          path_redirect: "/"
          response_code: 308
    # /get2 routed to k8s service httpbin in default namespace with rewrite to /get
    /get2:
      get:
        route:
          upstream:
            service:
              name: httpbin
              namespace: default
              port: 8080
            rewrite:
              pattern: "^/get2$"
              substitution: "/get"