Skip to content

Custom TrafficExtension for Multi-Tenancy #457

Closed

Description

@MattiaSarti

Context

The charm has to support multi-tenancy according to the design outlined in the official spec.

What needs to get done

Add the logic to operate the required TrafficExtension for user-ID header enforcement from source namespace.

Definition of Done

The logic to operate the required TrafficExtension for user-ID header enforcement from source namespace is added.

Activity

  1. added
    enhancementNew feature or request
    and removed
    enhancementNew feature or request
    on Aug 17, 2026
  2. MattiaSarti commented on Aug 17, 2026

    @MattiaSarti
    ContributorAuthor

    Internal ticket manually created, because of a bug with Jira's automation (reason why the label for Jira was removed): https://warthogs.atlassian.net/browse/KF-8906

  3. changed the title [-]Custom EnvoyFilter for Multi-Tenancy[/-] [+]Custom TrafficExtension for Multi-Tenancy[/+] on Aug 31, 2026
  4. NohaIhab commented on Sep 22, 2026

    @NohaIhab
    Contributor

    Testing

    • green path: from kubeflow profile with an alias -> can create experiment + http call to get user identity returns expected kubeflow profile identity
    • red path: from kubeflow profile with incorrect user id header (spoofing): http call to get user identity while setting the header with an incorrect identity -> output: actual correct identity not the spoofed one
  5. NohaIhab commented on Sep 29, 2026

    @NohaIhab
    Contributor

    Closed by #502

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions