Open milan-holub opened 2 weeks ago
cc @zhaohuabing @wbpcode for triage
Thanks for the reporting.
As the comments of DataSource, only part of positions provide the watching support. This is not a bug. So if dynamic watching is necessary, you may need to create a feature request issue and ping the code owner of basic auth filter. :)
Title: watched_directory not working for basic_auth users file
Description: Hello and thank you of this awesome piece of software! Recently I was trying to get basic auth working with simple users file in k8s environment. Basic setup with dynamic configuration is working for me fine. What I was hoping for was that envoy will auto-detect the file change using the DataSource’s
watched_directory
configuration directive - but I’m out of luck. I just wanted to double-check here whether this is expected behaviour (as per docs not every Datasource supports the watching directories) or there is something wrong on my site. If thewatched_directory
is not supported in this scenario what would you suggest as workarounds? Thank you!Repro steps: Configure based on the snippets from the Config section and then
Current behaviour:
Expected behaviour:
Admin and Stats Output: N/A
Config:
envoy v1.31
basic_auth.yaml:
above is referenced from dynamic lds.yaml in listener’s
http_connection_manager
as:users file is properly mounted as k8s secret in the pod
Logs: no specific logs available when the users file gets replaced
Call Stack: N/A