diff --git a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/SnapshotProperties.kt b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/SnapshotProperties.kt index 5839041c9..0a2c76202 100644 --- a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/SnapshotProperties.kt +++ b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/SnapshotProperties.kt @@ -214,7 +214,6 @@ class AdminRouteProperties { class StatusRouteProperties { var enabled = false var endpoints: MutableList = mutableListOf() - var blockedStatusEndpoints: MutableList = mutableListOf() var createVirtualCluster = false } diff --git a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/HttpConnectionManagerFactory.kt b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/HttpConnectionManagerFactory.kt index 260114ff4..eaa70638f 100644 --- a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/HttpConnectionManagerFactory.kt +++ b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/HttpConnectionManagerFactory.kt @@ -66,7 +66,6 @@ class HttpConnectionManagerFactory( .setUseRemoteAddress(BoolValue.newBuilder().setValue(listenersConfig.useRemoteAddress).build()) .setDelayedCloseTimeout(Duration.newBuilder().setSeconds(0).build()) .setCommonHttpProtocolOptions(httpProtocolOptions) - .setNormalizePath(BoolValue.newBuilder().setValue(true).build()) .setMergeSlashes(true) .setCodecType(HttpConnectionManager.CodecType.AUTO) .setHttpProtocolOptions(ingressHttp1ProtocolOptions(group.serviceName)) diff --git a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/RBACFilterFactory.kt b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/RBACFilterFactory.kt index df93f9140..572d7ad0c 100644 --- a/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/RBACFilterFactory.kt +++ b/envoy-control-core/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/RBACFilterFactory.kt @@ -275,22 +275,13 @@ class RBACFilterFactory( private fun createStatusRoutePolicy(statusRouteProperties: StatusRouteProperties): Map { return if (statusRouteProperties.enabled) { - val notRules = statusRouteProperties.blockedStatusEndpoints.map { - rBACFilterPermissions.createPathPermission( - path = it.path, - matchingType = it.matchingType - ).build() - } val permissions = statusRouteProperties.endpoints .map { - val permission = rBACFilterPermissions.createPathPermission( + rBACFilterPermissions.createPathPermission( path = it.path, matchingType = it.matchingType - ) - notRules.forEach { permission.setNotRule(it) } - permission.build() + ).build() } - val policy = Policy.newBuilder() .addPrincipals(anyPrincipal) .addPermissions(anyOf(permissions)) @@ -377,18 +368,15 @@ class RBACFilterFactory( principal ) ) - OAuth.Policy.STRICT -> mergePrincipals( listOf( strictPolicyPrincipal, principal ) ) - OAuth.Policy.ALLOW_MISSING_OR_FAILED -> { principal } - null -> { principal }