EnvoyFilter ext_authz googlegrpc disable routing for specific paths #48511
Replies: 4 comments
-
|
Beta Was this translation helpful? Give feedback.
-
thanks @j2gg0s i have tried Per Route Configuration but i was geting 404 error for all request other then healthcheck requests. |
Beta Was this translation helpful? Give feedback.
-
When istiod inject sidecar, it will rewrite your pod's probe. Source code: patchRewriteProbe Example:
If you just want to deal with k8s's probe, can you check why these does not take effect? |
Beta Was this translation helpful? Give feedback.
-
If you follow https://istio.io/latest/docs/tasks/security/authorization/authz-custom/, you can do this. |
Beta Was this translation helpful? Give feedback.
-
Is this the right place to submit this?
Bug Description
Describe the feature request
I want to avoid routing requests to OPA authz sidecar for kubernetes healthcheck requests.
example if path is "/health/check" then bypass
How can we implement it in Istio?
Here is our EnvoyFilter:
Version
Additional Information
No response
Beta Was this translation helpful? Give feedback.
All reactions