Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[xDS] Protect RBAC audit logging options field with environment variable. #33004

Merged
merged 3 commits into from May 4, 2023

Conversation

rockspore
Copy link
Contributor

The protection is added at xds_http_rbac_filter.cc where we read the new field. With this disabling the feature, nothing from things like xds_audit_logger_registry.cc shall be invoked.

@rockspore rockspore requested a review from markdroth as a code owner May 3, 2023 21:05
@rockspore rockspore added the release notes: no Indicates if PR should not be in release notes label May 3, 2023
@rockspore rockspore requested a review from markdroth May 3, 2023 21:38
Copy link
Member

@markdroth markdroth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great! Thanks for doing that so quickly!

@rockspore rockspore changed the title [xDS] Protect RBAC audit logging options field with environment variable [xDS] Protect RBAC audit logging options field with environment variable. May 3, 2023
@rockspore rockspore merged commit 4c7da48 into grpc:master May 4, 2023
64 of 65 checks passed
@rockspore rockspore deleted the audit-logging-env-var branch May 4, 2023 13:57
@copybara-service copybara-service bot added the imported Specifies if the PR has been imported to the internal repository label May 4, 2023
nanahpang pushed a commit to nanahpang/grpc that referenced this pull request May 8, 2023
…ble. (grpc#33004)

The protection is added at `xds_http_rbac_filter.cc` where we read the
new field. With this disabling the feature, nothing from things like
`xds_audit_logger_registry.cc` shall be invoked.
wanlin31 pushed a commit that referenced this pull request May 18, 2023
…ble. (#33004)

The protection is added at `xds_http_rbac_filter.cc` where we read the
new field. With this disabling the feature, nothing from things like
`xds_audit_logger_registry.cc` shall be invoked.
@yijiem yijiem added release notes: yes Indicates if PR needs to be in release notes and removed release notes: no Indicates if PR should not be in release notes labels May 31, 2023
@erm-g erm-g removed the release notes: yes Indicates if PR needs to be in release notes label Jun 12, 2023
@yijiem yijiem added the release notes: no Indicates if PR should not be in release notes label Jun 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bloat/none imported Specifies if the PR has been imported to the internal repository lang/core per-call-memory/neutral per-channel-memory/neutral release notes: no Indicates if PR should not be in release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants