Skip to content

docs: add admin endpoint gating guidance with allow_paths examples#43468

Open
garimauttam wants to merge 6 commits intoenvoyproxy:mainfrom
garimauttam:fix-43446-admin-gating-docs-main
Open

docs: add admin endpoint gating guidance with allow_paths examples#43468
garimauttam wants to merge 6 commits intoenvoyproxy:mainfrom
garimauttam:fix-43446-admin-gating-docs-main

Conversation

@garimauttam
Copy link
Contributor

Fixes #43446.

Documents admin.allow_paths in quick-start and operations admin docs.
Adds practical gating examples for readiness checks (/ready) and query-based endpoints (/stats, /config_dump) using prefix matchers.
Updates Admin.allow_paths proto comments to reflect recommended matcher usage.
Docs-only change; no behavior change.

@repokitteh-read-only
Copy link

Docs for this Pull Request will be rendered here:

https://storage.googleapis.com/envoy-cncf-pr/43468/docs/index.html

The docs are (re-)rendered each time the CI Envoy/Prechecks (docs) job completes.

🐱

Caused by: #43468 was opened by garimauttam.

see: more, trace.

@repokitteh-read-only
Copy link

Hi @garimauttam, welcome and thank you for your contribution.

We will try to review your Pull Request as quickly as possible.

In the meantime, please take a look at the contribution guidelines if you have not done so already.

🐱

Caused by: #43468 was opened by garimauttam.

see: more, trace.

@repokitteh-read-only
Copy link

CC @envoyproxy/api-shepherds: Your approval is needed for changes made to (api/envoy/|docs/root/api-docs/).
envoyproxy/api-shepherds assignee is @adisuissa
CC @envoyproxy/api-watchers: FYI only for changes made to (api/envoy/|docs/root/api-docs/).

🐱

Caused by: #43468 was opened by garimauttam.

see: more, trace.

@garimauttam garimauttam force-pushed the fix-43446-admin-gating-docs-main branch from 8b05a30 to 518df9a Compare February 13, 2026 03:29
@garimauttam garimauttam temporarily deployed to external-contributors February 13, 2026 03:29 — with GitHub Actions Inactive
Copy link
Member

@phlax phlax left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for working on this - really appreciated!

for the literalincludes - you can grep git grep literalinclude docs/ to see existing examples

in this case they can use the same bootstrap config

@garimauttam garimauttam force-pushed the fix-43446-admin-gating-docs-main branch from fecb6ed to c4a082e Compare February 13, 2026 11:05
@garimauttam garimauttam deployed to external-contributors February 13, 2026 11:05 — with GitHub Actions Active
Copy link
Member

@phlax phlax left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

really nice work - thanks for iterating ...

protocol: TCP
address: 127.0.0.1
port_value: 9901
# docs_admin_address_snippet_end
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

in this case it renders - but im not sure its helpful

Image

probably the better thing would be to highlight the allow_paths

.. literalinclude:: /_configs/repo/admin-interface.yaml
:language: yaml
:start-after: docs_admin_interface_snippet_start
:end-before: docs_admin_interface_snippet_end
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hmm - i see - this is actually a lot better way than what we do now - nice touch

can we anchor off the actual content?

socket_address:
address: 0.0.0.0
port_value: 9901
.. literalinclude:: /_configs/repo/admin-interface.yaml
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

its helpful for readers to be able to download the full file - if you check other literalincludes some/most have a caption/download

Use ``prefix`` matchers for endpoints that are commonly queried with parameters (for example
``/stats?filter=...``).

.. literalinclude:: /_configs/repo/admin-interface.yaml
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

similar comments to above

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for suggesting.
I removed the snippet marker comments, switched literalinclude anchors to real YAML content, added caption/download links for the included config, and highlighted allow_paths in the full include blocks.
Please review these changes.

Signed-off-by: garima-uttam <garimauttam@ibm.com>
Signed-off-by: garima-uttam <garimauttam@ibm.com>
Signed-off-by: garima-uttam <garimauttam@ibm.com>
Signed-off-by: garima-uttam <garimauttam@ibm.com>
Signed-off-by: garima-uttam <garimauttam@ibm.com>
@garimauttam garimauttam force-pushed the fix-43446-admin-gating-docs-main branch from 71ae747 to e34c654 Compare February 14, 2026 10:42
Copy link
Contributor

@adisuissa adisuissa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for improving the docs.
/lgtm api

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add docs/examples for gating admin access

3 participants