--- Envoyproxy::Tls_terminator[443].orig
+++ Envoyproxy::Tls_terminator[443]
- circuit_breakers_config => defaults
- generate_request_id => True
- global_certs => [{'cert_path': '/etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server-key.pem'}]
- stek_files => []
+ global_key_path => /etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server-key.pem
+ rate_limit_enabled => True
+ global_cert_path => /etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server.chained.pem
+ rate_limit_config => {'address': 'ratelimit-media.svc.codfw.wmnet', 'port': 8081, 'domain': 'upload'}
@@
- upstreams => [{'server_names': ['*'], 'certificates': None, 'upstream': {'port': 80, 'addr': '10.192.0.139'}}]
+ upstreams => [{'server_names': ['*'], 'cert_path': None, 'key_path': None, 'upstream_port': 80, 'upstream_addr': '10.192.0.139'}]
Envoyproxy::Conf[cluster_ratelimit]
- Parameters differences:
--- Envoyproxy::Conf[cluster_ratelimit].orig
+++ Envoyproxy::Conf[cluster_ratelimit]
+ conf_type => cluster
+ priority => 1
- File[/etc/envoy/clusters.d/01-cluster_ratelimit.yaml]
- Parameters differences:
--- File[/etc/envoy/clusters.d/01-cluster_ratelimit.yaml].orig
+++ File[/etc/envoy/clusters.d/01-cluster_ratelimit.yaml]
+ ensure => present
+ notify => Exec[verify-envoy-config]
+ owner => root
+ mode => 0444
+ group => root
- Content differences:
--- /etc/envoy/clusters.d/01-cluster_ratelimit.yaml.orig
+++ /etc/envoy/clusters.d/01-cluster_ratelimit.yaml
@@ -0,0 +1,18 @@
+name: ratelimit
+type: static
+connect_timeout: 0.25s
+lb_policy: ROUND_ROBIN
+typed_extension_protocol_options:
+ envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
+ "@type": type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
+ explicit_http_config:
+ http2_protocol_options: {}
+load_assignment:
+ cluster_name: ratelimit
+ endpoints:
+ - lb_endpoints:
+ - endpoint:
+ address:
+ socket_address:
+ address: ratelimit-media.svc.codfw.wmnet
+ port_value: 8081
- Class[Profile::Tlsproxy::Envoy]
- Parameters differences:
--- Class[Profile::Tlsproxy::Envoy].orig
+++ Class[Profile::Tlsproxy::Envoy]
+ rate_limit_enabled => True
+ rate_limit_config => {'address': 'ratelimit-media.svc.codfw.wmnet', 'port': 8081, 'domain': 'upload'}