Merge pull request #9170 from zalando-incubator/opa-styra-timeout

MustafaSaber · web-flow · commit d0d980b03e0f · 2025-04-08T10:19:13.000+02:00
Configure response header timeouts for styra calls
diff --git a/cluster/config-defaults.yaml b/cluster/config-defaults.yaml
@@ -375,6 +375,9 @@ skipper_ingress_routegroup_crd_require_hosts: "true"
 skipper_open_policy_agent_enabled: "false"
 skipper_open_policy_agent_styra_token: ""
 
+# Default timeout value in seconds for outgoing http calls from Open Policy Agent in a skipper filter
+skipper_open_policy_agent_styra_response_header_timeout: "2"
+
 #
 # FabricGateway controller config
 #
diff --git a/cluster/manifests/skipper/configmap-open-policy-agent.yaml b/cluster/manifests/skipper/configmap-open-policy-agent.yaml
@@ -23,6 +23,7 @@ data:
           token: "{{ `{{ .Env.STYRA_TOKEN }}` }}"
       name: styra
       url: "{{ .Cluster.ConfigItems.skipper_open_policy_agent_observability_url }}"
+      response_header_timeout_seconds: {{ .Cluster.ConfigItems.skipper_open_policy_agent_styra_response_header_timeout }}
     - credentials:
         s3_signing:
           web_identity_credentials:

Original file line number	Diff line number	Diff line change
`@@ -375,6 +375,9 @@ skipper_ingress_routegroup_crd_require_hosts: "true"`
`375`	`375`	`skipper_open_policy_agent_enabled: "false"`
`376`	`376`	`skipper_open_policy_agent_styra_token: ""`
`377`	`377`
	`378`	`+# Default timeout value in seconds for outgoing http calls from Open Policy Agent in a skipper filter`
	`379`	`+skipper_open_policy_agent_styra_response_header_timeout: "2"`
	`380`	`+`
`378`	`381`	`#`
`379`	`382`	`# FabricGateway controller config`
`380`	`383`	`#`