--- Envoyproxy::Tls_terminator[443].orig
+++ Envoyproxy::Tls_terminator[443]
- circuit_breakers_config => defaults
- generate_request_id => True
- global_certs => [{'cert_path': '/etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server-key.pem'}]
- stek_files => []
+ global_key_path => /etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server-key.pem
+ rate_limit_enabled => True
+ global_cert_path => /etc/envoy/ssl/discovery2026__swift_discovery_wmnet_server.chained.pem
+ rate_limit_config => {'address': 'ratelimit-media.svc.codfw.wmnet', 'port': 8081, 'domain': 'upload'}
@@
- upstreams => [{'server_names': ['*'], 'certificates': None, 'upstream': {'port': 80, 'addr': '10.192.0.139'}}]
+ upstreams => [{'server_names': ['*'], 'cert_path': None, 'key_path': None, 'upstream_port': 80, 'upstream_addr': '10.192.0.139'}]
Class[Profile::Tlsproxy::Envoy]
- Parameters differences:
--- Class[Profile::Tlsproxy::Envoy].orig
+++ Class[Profile::Tlsproxy::Envoy]
+ rate_limit_enabled => True
+ rate_limit_config => {'address': 'ratelimit-media.svc.codfw.wmnet', 'port': 8081, 'domain': 'upload'}