CEL Support

api/v1beta3/auth_config_types.go

@@ -164,13 +164,21 @@ type PatternExpression struct {
 	Value string `json:"value,omitempty"`
 }
 
+type CelExpression struct {
+	Expression string `json:"expression,omitempty"`
+}
+
+type CelPredicate struct {
+	Predicate string `json:"predicate,omitempty"`
+}
+
 // +kubebuilder:validation:Enum:=eq;neq;incl;excl;matches
 type PatternExpressionOperator string
 
 type PatternExpressionOrRef struct {
 	PatternExpression `json:",omitempty"`
 	PatternRef        `json:",omitempty"`
-
+	CelPredicate      `json:",omitempty"`
 	// A list of pattern expressions to be evaluated as a logical AND.
 	All []UnstructuredPatternExpressionOrRef `json:"all,omitempty"`
 	// A list of pattern expressions to be evaluated as a logical OR.
@@ -199,6 +207,8 @@ type ValueOrSelector struct {
 	// Any pattern supported by https://pkg.go.dev/github.com/tidwall/gjson can be used.
 	// The following Authorino custom modifiers are supported: @extract:{sep:" ",pos:0}, @replace{old:"",new:""}, @case:upper|lower, @base64:encode|decode and @strip.
 	Selector string `json:"selector,omitempty"`
+
+	Expression CelExpression `json:",omitempty"`
 }
 
 type CommonEvaluatorSpec struct {
@@ -402,6 +412,8 @@ type PlainIdentitySpec struct {
 	// Any pattern supported by https://pkg.go.dev/github.com/tidwall/gjson can be used.
 	// The following Authorino custom modifiers are supported: @extract:{sep:" ",pos:0}, @replace{old:"",new:""}, @case:upper|lower, @base64:encode|decode and @strip.
 	Selector string `json:"selector"`
+
+	Expression CelExpression `json:",omitempty"`
 }
 
 type AnonymousAccessSpec struct{}
@@ -439,6 +451,8 @@ type HttpEndpointSpec struct {
 	// E.g. https://ext-auth-server.io/metadata?p={request.path}
 	Url string `json:"url"`
 
+	UrlExpression CelExpression `json:",omitempty"`
+
 	// HTTP verb used in the request to the service. Accepted values: GET (default), POST.
 	// When the request method is POST, the authorization JSON is passed in the body of the request.
 	// +optional