pomerium / pomerium / 27292220428

52%

Build Type

push

github

Committed by web-flow

Commit Message

ssh: use TypedStruct for enabled channel filter configs (#6445)

## Summary

The config messages for enabled channel filters in the ssh codec
configuration need to use xds.type.v3.TypedStruct instead of directly
wrapping the actual type in an Any. TypedStruct is a special case in
Envoy that allows delaying proto validation for message types that may
not yet be known at the time a config update is received over XDS.
Normally it will recurse into Any fields and error if the type of the
Any is not known. In the case of session recording, the config types are
only known after the dynamic extension is loaded. If the extension
loader is enabled at the same time the ssh listener filter codec config
is updated and references these config types, envoy will fail to apply
the new configuration.

## Related issues

Related change in envoy-custom
https://github.com/pomerium/envoy-custom/pull/245
Fixes https://linear.app/pomerium/issue/ENG-4096

## User Explanation

not user-facing

## AI disclosure

none

## Checklist

- [x] reference any related issues
- [ ] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

Coverage Stats

0 of 13 new or added lines in 1 file covered. (0.0%)

21 existing lines in 6 files now uncovered.

36870 of 70520 relevant lines covered (52.28%)

464.57 hits per line