Skip to content

dynamic_modules: add dynamic modules support for cert validator#43420

Merged
agrawroh merged 4 commits intoenvoyproxy:mainfrom
agrawroh:feat-dm-certpckr
Feb 12, 2026
Merged

dynamic_modules: add dynamic modules support for cert validator#43420
agrawroh merged 4 commits intoenvoyproxy:mainfrom
agrawroh:feat-dm-certpckr

Conversation

@agrawroh
Copy link
Member

Description

This PR adds support for writing new extensions to validate the certificates using Dynamic Modules.


Commit Message: dynamic_modules: add dynamic modules support for cert validator
Additional Description: Adds support for writing new extensions to validate the certificates using Dynamic Modules.
Risk Level: Low
Testing: Added Unit + Integration Tests
Docs Changes: Added
Release Notes: Added

@repokitteh-read-only
Copy link

CC @envoyproxy/api-shepherds: Your approval is needed for changes made to (api/envoy/|docs/root/api-docs/).
envoyproxy/api-shepherds assignee is @markdroth
CC @envoyproxy/api-watchers: FYI only for changes made to (api/envoy/|docs/root/api-docs/).

🐱

Caused by: #43420 was opened by agrawroh.

see: more, trace.

@agrawroh agrawroh assigned wbpcode and unassigned markdroth Feb 11, 2026
@agrawroh agrawroh force-pushed the feat-dm-certpckr branch 5 times, most recently from 8762f09 to 2bd3d0c Compare February 11, 2026 16:18
Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>
Copy link
Member

@mathetake mathetake left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do you think it's possible to allow the access to the dynamic metadata from the verify callback? we are using it internally so i wonder if it's feasible

@agrawroh
Copy link
Member Author

do you think it's possible to allow the access to the dynamic metadata from the verify callback? we are using it internally so i wonder if it's feasible

Should be feasible. I can add that as a follow-up.

@mathetake
Copy link
Member

yeah sorry i meant filter_state but yeah should be doable

Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>
mathetake
mathetake previously approved these changes Feb 12, 2026
Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>
@agrawroh agrawroh enabled auto-merge (squash) February 12, 2026 18:01
@agrawroh agrawroh merged commit 7165c7a into envoyproxy:main Feb 12, 2026
26 of 28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants