[
https://issues.apache.org/jira/browse/KNOX-2974?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandeep More resolved KNOX-2974.
--------------------------------
Fix Version/s: 2.1.0
Resolution: Fixed
> Add a new endpoint like 'pre' that supports other verbs and ignores paths
> -------------------------------------------------------------------------
>
> Key: KNOX-2974
> URL: https://issues.apache.org/jira/browse/KNOX-2974
> Project: Apache Knox
> Issue Type: New Feature
> Components: docker, Server
> Reporter: Sandeep More
> Assignee: Sandeep More
> Priority: Major
> Fix For: 2.1.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Knox can be used as an [external authorizer for Istio
> |https://istio.io/v1.10/blog/2021/better-external-authz/]. In this model
> Istio forwards the request to the external authorizer and depending on the
> results the request then either errors out with 401 or 403 OR proceeds to
> it's intended destination after successful authentication and authorization
> by Knox.
> Here the request is getting forwarded and Knox acts as a "filter". This means
> the "pre" endpoint should support all the HTTP verbs and it should have the
> ability to ignore additional paths that may be appended by Istio.
> This JIRA is to address these issues by creating a new service "extauthz"
> that addresses these issues without changing existing "pre" service to
> prevent breakage.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
