pomerium / pomerium / 26135724560

52%

Build Type

push

github

Committed by web-flow

Commit Message

feat(envoy): configure dynamic extensions for envoy (#6352)

## Summary

- Adds dynamic extensions as a configuration target
- Parses and constructs ssh dynamic extension config
- Enables/disables the recording server depending on the presence of the
session recording extension
- Loads the extensions into envoy
- Smartly reconstructs the pipe transports for the recording protocol
when envoy hot-restarts


## Related issues


[ENG-3945](https://linear.app/pomerium/issue/ENG-3945/core-configure-envoy-dynamic-extensions)

Splits out the logic for configuring dynamic extensions in from
https://github.com/pomerium/pomerium/pull/6283

Requires:
- [x] https://github.com/pomerium/pomerium/pull/6335
- [x] https://github.com/pomerium/envoy-custom/pull/219

## User Explanation

End users can configure enterprise dynamic extensions by setting the
`envoy_dynamic_extensions` field in the config file.

Example:
```yaml
envoy_dynamic_extensions:
  - <path-to-extension>/<extension>.so
```


## AI disclosure

none

## Checklist

- [X] reference any related issues
- [X] updated unit tests
- [X] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [X] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [ ] ready for review

Coverage Stats

18 of 224 new or added lines in 11 files covered. (8.04%)

5 existing lines in 1 file now uncovered.

36624 of 79878 relevant lines covered (45.85%)

304.4 hits per line