From 6060290dd58aeca3d0249b2b2df71efd4c37b047 Mon Sep 17 00:00:00 2001 From: "data-plane-api(Azure Pipelines)" Date: Mon, 1 Aug 2022 02:51:18 +0000 Subject: [PATCH] Cors: add PNA support (#21581) * cors: add PNA support Signed-off-by: Loong Dai * fix field Signed-off-by: Loong Dai * use runtime guard rather than api change Signed-off-by: Loong Dai * fix CI Signed-off-by: Loong Dai * update changelog Signed-off-by: Loong Dai * revert unrelated changes Signed-off-by: Loong Dai * update API Signed-off-by: Loong Dai * feedback and update tests Signed-off-by: Loong Dai * update tests Signed-off-by: Loong Dai * update tests Signed-off-by: Loong Dai * add tests Signed-off-by: Loong Dai * feedback Signed-off-by: Loong Dai * remove useless test Signed-off-by: Loong Dai * feedback Signed-off-by: Loong Dai * fix CI Signed-off-by: Loong Dai Mirrored from https://github.com/envoyproxy/envoy @ bf61b077e77197a28fefa5798902fd94008e4137 --- envoy/config/route/v3/route_components.proto | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/envoy/config/route/v3/route_components.proto b/envoy/config/route/v3/route_components.proto index 27853c04..891b4ae4 100644 --- a/envoy/config/route/v3/route_components.proto +++ b/envoy/config/route/v3/route_components.proto @@ -639,7 +639,7 @@ message RouteMatch { repeated type.matcher.v3.MetadataMatcher dynamic_metadata = 13; } -// [#next-free-field: 12] +// [#next-free-field: 13] message CorsPolicy { option (udpa.annotations.versioning).previous_message_type = "envoy.api.v2.route.CorsPolicy"; @@ -687,6 +687,12 @@ message CorsPolicy { // Envoy will lookup the runtime key to get the percentage of requests for which it will evaluate // and track the request's ``Origin`` to determine if it's valid but will not enforce any policies. core.v3.RuntimeFractionalPercent shadow_enabled = 10; + + // Specify whether allow requests whose target server's IP address is more private than that from + // which the request initiator was fetched. + // + // More details refer to https://developer.chrome.com/blog/private-network-access-preflight. + google.protobuf.BoolValue allow_private_network_access = 12; } // [#next-free-field: 42]