package envoy.type.matcher

Get desktop application:
View/edit binary Protocol Buffers messages

Specifies the way to match a double value.

Used in: ValueMatcher

• oneof match_pattern

  • DoubleRange range = 1

    If specified, the input double value must be in the range specified here. Note: The range is using half-open interval semantics [start, end).

  • double exact = 2

    If specified, the input double value must be equal to the value specified here.

Specifies the way to match a list value.

Used in: ValueMatcher

• oneof match_pattern

  • ValueMatcher one_of = 1

    If specified, at least one of the values in the list must match the value specified.

Specifies a list of ways to match a string.

Used in: config.filter.http.ext_authz.v2.AuthorizationRequest, config.filter.http.ext_authz.v2.AuthorizationResponse, config.metrics.v2.StatsMatcher

• repeated StringMatcher patterns = 1

[#next-major-version: MetadataMatcher should use StructMatcher]

Used in: config.rbac.v2.Permission, config.rbac.v2.Principal

• string filter = 1

  The filter name to retrieve the Struct from the Metadata.

• repeated MetadataMatcher.PathSegment path = 2

  The path to retrieve the Value from the Struct.

• optional ValueMatcher value = 3

  The MetadataMatcher is matched if the value retrieved by path is matched to this value.

Specifies the segment in a path to retrieve value from Metadata. Note: Currently it's not supported to retrieve a value from a list in Metadata. This means that if the segment key refers to a list, it has to be the last segment in a path.

Used in: MetadataMatcher

• oneof segment

  • string key = 1

    If specified, use the key to retrieve the value in a Struct.

Specifies the way to match a Node. The match follows AND semantics.

Used in: service.status.v2.ClientStatusRequest

• optional StringMatcher node_id = 1

  Specifies match criteria on the node id.

• repeated StructMatcher node_metadatas = 2

  Specifies match criteria on the node metadata.

Specifies the way to match a path on HTTP request.

Used in: config.rbac.v2.Permission, config.rbac.v2.Principal

• oneof rule

  • StringMatcher path = 1

    The `path` must match the URL path portion of the :path header. The query and fragment string (if present) are removed in the URL path portion. For example, the path */data* will match the *:path* header */data#fragment?param=value*.

Describes how to match a string and then produce a new string using a regular expression and a substitution string.

Used in: api.v2.route.RouteAction

• optional RegexMatcher pattern = 1

  The regular expression used to find portions of a string (hereafter called the "subject string") that should be replaced. When a new string is produced during the substitution operation, the new string is initially the same as the subject string, but then all matches in the subject string are replaced by the substitution string. If replacing all matches isn't desired, regular expression anchors can be used to ensure a single match, so as to replace just one occurrence of a pattern. Capture groups can be used in the pattern to extract portions of the subject string, and then referenced in the substitution string.

• string substitution = 2

  The string that should be substituted into matching portions of the subject string during a substitution operation to produce a new string. Capture groups in the pattern can be referenced in the substitution string. Note, however, that the syntax for referring to capture groups is defined by the chosen regular expression engine. Google's `RE2 <https://github.com/google/re2>`_ regular expression engine uses a backslash followed by the capture group number to denote a numbered capture group. E.g., ``\1`` refers to capture group 1, and ``\2`` refers to capture group 2.

A regex matcher designed for safety when used with untrusted input.

Used in: api.v2.route.HeaderMatcher, api.v2.route.RouteMatch, RegexMatchAndSubstitute, StringMatcher

• oneof engine_type

  • RegexMatcher.GoogleRE2 google_re2 = 1

    Google's RE2 regex engine.

• string regex = 2

  The regex match string. The string must be supported by the configured engine.

Google's `RE2 <https://github.com/google/re2>`_ regex engine. The regex string must adhere to the documented `syntax <https://github.com/google/re2/wiki/Syntax>`_. The engine is designed to complete execution in linear time as well as limit the amount of memory used. Envoy supports program size checking via runtime. The runtime keys ``re2.max_program_size.error_level`` and ``re2.max_program_size.warn_level`` can be set to integers as the maximum program size or complexity that a compiled regex can have before an exception is thrown or a warning is logged, respectively. ``re2.max_program_size.error_level`` defaults to 100, and ``re2.max_program_size.warn_level`` has no default if unset (will not check/log a warning). Envoy emits two stats for tracking the program size of regexes: the histogram `re2.program_size`, which records the program size, and the counter `re2.exceeded_warn_level`, which is incremented each time the program size exceeds the warn level threshold.

Used in: RegexMatcher

• optional google.protobuf.UInt32Value max_program_size = 1

  This field controls the RE2 "program size" which is a rough estimate of how complex a compiled regex is to evaluate. A regex that has a program size greater than the configured value will fail to compile. In this case, the configured max program size can be increased or the regex can be simplified. If not specified, the default is 100. This field is deprecated; regexp validation should be performed on the management server instead of being done by each individual client.

Specifies the way to match a string. [#next-free-field: 7]

Used in: api.v2.auth.CertificateValidationContext, api.v2.core.HealthCheck.HttpHealthCheck, api.v2.route.CorsPolicy, api.v2.route.QueryParameterMatcher, config.filter.http.cache.v2alpha.CacheConfig, config.filter.http.csrf.v2.CsrfPolicy, config.filter.network.dubbo_proxy.v2alpha1.MethodMatch, config.rbac.v2.Permission, config.rbac.v2.Principal.Authenticated, data.dns.v2alpha.DnsTable, ListStringMatcher, NodeMatcher, PathMatcher, ValueMatcher

• oneof match_pattern

  • string exact = 1

    The input string must match exactly the string specified here. Examples: * *abc* only matches the value *abc*.

  • string prefix = 2

    The input string must have the prefix specified here. Note: empty prefix is not allowed, please use regex instead. Examples: * *abc* matches the value *abc.xyz*

  • string suffix = 3

    The input string must have the suffix specified here. Note: empty prefix is not allowed, please use regex instead. Examples: * *abc* matches the value *xyz.abc*

  • string regex = 4

    The input string must match the regular expression specified here. The regex grammar is defined `here <https://en.cppreference.com/w/cpp/regex/ecmascript>`_. Examples: * The regex ``\d{3}`` matches the value *123* * The regex ``\d{3}`` does not match the value *1234* * The regex ``\d{3}`` does not match the value *123.456* .. attention:: This field has been deprecated in favor of `safe_regex` as it is not safe for use with untrusted input in all cases.

  • RegexMatcher safe_regex = 5

    The input string must match the regular expression specified here.

• bool ignore_case = 6

  If true, indicates the exact/prefix/suffix matching should be case insensitive. This has no effect for the safe_regex match. For example, the matcher *data* will match both input string *Data* and *data* if set to true.

StructMatcher provides a general interface to check if a given value is matched in google.protobuf.Struct. It uses `path` to retrieve the value from the struct and then check if it's matched to the specified value. For example, for the following Struct: .. code-block:: yaml fields: a: struct_value: fields: b: struct_value: fields: c: string_value: pro t: list_value: values: - string_value: m - string_value: n The following MetadataMatcher is matched as the path [a, b, c] will retrieve a string value "pro" from the Metadata which is matched to the specified prefix match. .. code-block:: yaml path: - key: a - key: b - key: c value: string_match: prefix: pr The following StructMatcher is matched as the code will match one of the string values in the list at the path [a, t]. .. code-block:: yaml path: - key: a - key: t value: list_match: one_of: string_match: exact: m An example use of StructMatcher is to match metadata in envoy.v*.core.Node.

Used in: NodeMatcher

• repeated StructMatcher.PathSegment path = 2

  The path to retrieve the Value from the Struct.

• optional ValueMatcher value = 3

  The StructMatcher is matched if the value retrieved by path is matched to this value.

Specifies the segment in a path to retrieve value from Struct.

Used in: StructMatcher

• oneof segment

  • string key = 1

    If specified, use the key to retrieve the value in a Struct.

Specifies the way to match a ProtobufWkt::Value. Primitive values and ListValue are supported. StructValue is not supported and is always not matched. [#next-free-field: 7]

Used in: ListMatcher, MetadataMatcher, StructMatcher

• oneof match_pattern

  Specifies how to match a value.

  • ValueMatcher.NullMatch null_match = 1

    If specified, a match occurs if and only if the target value is a NullValue.

  • DoubleMatcher double_match = 2

    If specified, a match occurs if and only if the target value is a double value and is matched to this field.

  • StringMatcher string_match = 3

    If specified, a match occurs if and only if the target value is a string value and is matched to this field.

  • bool bool_match = 4

    If specified, a match occurs if and only if the target value is a bool value and is equal to this field.

  • bool present_match = 5

    If specified, value match will be performed based on whether the path is referring to a valid primitive value in the metadata. If the path is referring to a non-primitive value, the result is always not matched.

  • ListMatcher list_match = 6

    If specified, a match occurs if and only if the target value is a list value and is matched to this field.

NullMatch is an empty message to specify a null value.

Used in: ValueMatcher

(message has no fields)