Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gloo edge improvements #68

Open
12 of 14 tasks
antonioberben opened this issue Jul 19, 2021 · 0 comments
Open
12 of 14 tasks

Gloo edge improvements #68

antonioberben opened this issue Jul 19, 2021 · 0 comments

Comments

@antonioberben
Copy link
Member

antonioberben commented Jul 19, 2021

  • Remove troubleshooting Tip

  • Lab2: Create unauthenticated RateLimit for unauthenticated users

  • Lab2: Add another Ratelimit for authenticated users based on a new claim like subcription (values: gold, platinium, etc).

  • Lab6: For the AuthN scenario, it needs to be moved to Lab2.

  • Lab6: Remove the extractor for the id token since it is already taken before.

  • Improve WAF sample. Block a huge payload with POST to bookinfo for the case of unauthenticated users

  • Improve WAF sample. Add client-agent check

  • Add to response transformations. Take a header from the request and add it into the response.
    TODO: The docs are wrong. It's missing identation. Besides it does not work. Spike on it.

  • Improve response transformations. Take the 401 and transform the body in the response.

  • Add something with regex

transformationTemplate:
                           passthrough: {}
                           extractors:
                               originalClientIpAddress:
                                   header: 'x-forwarded-for'
                                   regex: '([^,\n]*).*$'
  • Move delegation after LAB1. Delegate to different routeTables to different teams /secure with reoutetable1 to be managed by team1. Keep the route / at the VS level to show that we can also keep things in the VS

  • Move RT to a specific namespace like team1 so they can see it can be in a different namespace.

  • Use label selectors for the RT so we can show that the name is note totally required

  • Lab6. Remove the extractor for the id token since it already taken before. → use the extauth > authconfig > oidc > headers > idTokenHeader to forward it upstream

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant