Skip to content

Conversation

@agrawroh
Copy link
Member

Description

This PR fixes the ExtAuthZ HTTP behavior where we keep using the hardcoded defaults and ignore the policy passed in by the user.


Commit Message: ext_authz: fixes a bug in the retry_policy to respective user's config
Additional Description: Fixes the ExtAuthZ HTTP behavior where we keep using the hardcoded defaults and ignore the policy passed in by the user.
Risk Level: Low
Testing: Added Integration Tests
Docs Changes: Added
Release Notes: Added

Comment on lines 116 to 117
Http::Utility::convertCoreToRouteRetryPolicy(core_retry_policy,
"5xx,gateway-error,connect-failure,reset");
Http::Utility::convertCoreToRouteRetryPolicy(core_retry_policy, "");
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What will happen is the retry_on of user's configuration is empty? Or is that possible?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the user's retry_on configuration is empty, then retries will be effectively disabled which seems to be the correct behavior. What do you think?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i added it behind a new runtime guard as we discussed offline :)

@repokitteh-read-only
Copy link

CC @envoyproxy/runtime-guard-changes: FYI only for changes made to (source/common/runtime/runtime_features.cc).

🐱

Caused by: #42232 was synchronize by agrawroh.

see: more, trace.

wbpcode
wbpcode previously approved these changes Nov 27, 2025
Copy link
Member

@wbpcode wbpcode left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks.

@agrawroh agrawroh enabled auto-merge (squash) November 27, 2025 08:56
Signed-off-by: Rohit Agrawal <[email protected]>
@agrawroh agrawroh merged commit c380f76 into envoyproxy:main Nov 27, 2025
23 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants