fix: set path prefix for http ext auth service (#3018)

zhaohuabing · web-flow · commit 2882b7c65dee · 2024-03-25T20:33:05.000-07:00
Signed-off-by: huabing zhao &lt;zhaohuabing@gmail.com&gt;
diff --git a/internal/xds/translator/extauth.go b/internal/xds/translator/extauth.go
@@ -147,9 +147,13 @@ func httpService(http *ir.HTTPExtAuthService) *extauthv3.HttpService {
 	var (
 		uri              string
 		headersToBackend []*matcherv3.StringMatcher
-		service          = new(extauthv3.HttpService)
+		service          *extauthv3.HttpService
 	)
 
+	service = &extauthv3.HttpService{
+		PathPrefix: http.Path,
+	}
+
 	u := url.URL{
 		// scheme should be decided by the TLS setting, but we don't have that info now.
 		// It's safe to set it to http because the ext auth filter doesn't use the
diff --git a/internal/xds/translator/testdata/out/xds-ir/ext-auth.listeners.yaml b/internal/xds/translator/testdata/out/xds-ir/ext-auth.listeners.yaml
@@ -39,6 +39,7 @@
                   patterns:
                   - exact: header1
                   - exact: header2
+              pathPrefix: /auth
               serverUri:
                 cluster: securitypolicy/default/policy-for-gateway-1/envoy-gateway/http-backend
                 timeout: 10s
