Sync APIs. @tag-name=gloo-v1.18.0-beta2 (#1234)

Co-authored-by: soloio-bot <[email protected]>

api/gloo/gloo/v1/options.proto

@@ -18,6 +18,7 @@ import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/proxy_protocol/pro
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/grpc_web/grpc_web.proto";
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/grpc_json/grpc_json.proto";
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/hcm/hcm.proto";
+import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/header_validation/header_validation.proto";
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/lbhash/lbhash.proto";
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/shadowing/shadowing.proto";
 import "github.com/solo-io/solo-apis/api/gloo/gloo/v1/options/tcp/tcp.proto";
@@ -231,6 +232,11 @@ message HttpListenerOptions {
 
     // Enterprise only: Listener-level stateful session settings
     stateful_session.options.gloo.solo.io.StatefulSession stateful_session = 35;
+
+    // Header validation settings - fields in this message can be used to
+    // determine whether requests should be rejected based on the contents of
+    // the header.
+    header_validation.options.gloo.solo.io.HeaderValidationSettings header_validation_settings = 36;
 }
 
 // Optional, feature-specific configuration that lives on tcp listeners
@@ -578,6 +584,7 @@ message RouteOptions {
     // override certain HttpListenerOptions or VirtualHostOptions settings.
     extproc.options.gloo.solo.io.RouteSettings ext_proc = 30;
 }
+
 // Configuration for Destinations that are tied to the UpstreamSpec or ServiceSpec on that destination
 message DestinationSpec {
     // Note to developers: new DestinationSpecs must be added to this oneof field

api/gloo/gloo/v1/options/header_validation/header_validation.proto

@@ -0,0 +1,24 @@
+syntax = "proto3";
+package header_validation.options.gloo.solo.io;
+
+import "google/protobuf/empty.proto";
+
+option go_package = "github.com/solo-io/solo-apis/pkg/api/gloo.solo.io/v1/options/header_validation";
+
+message HeaderValidationSettings {
+  // How header methods will be validated. By default, Envoy will
+  // validate HTTP methods for HTTP/1 connections against the default set of allowed methods.
+  // The default allowed methods can be found here:
+  // https://github.com/envoyproxy/envoy/blob/2970ddbd4ade787dd51dfbe605ae2e8c5d8ffcf7/source/common/http/http1/balsa_parser.cc#L54
+  // or here, if Universal Header Validation is enabled:
+  // https://github.com/envoyproxy/envoy/blob/0b9f67e7f71bcba3ff49575dc61676478cb68614/source/extensions/http/header_validators/envoy_default/header_validator.cc#L53
+  // Invalid methods on HTTP/1 requests will be rejected with a HTTP 400
+  // response.
+  // For HTTP/2, Envoy does not validate header methods by default.
+	oneof header_method_validation {
+		// Disable method validation. Envoy will not perform any validation on
+		// the method provided in the HTTP header.
+		google.protobuf.Empty disable_http1_method_validation = 1;
+	}
+}
+