auto update extensions_build_config.bzl

[zirain]

avoid issue like #4231

cc @kyessenov @lei-tang

[kyessenov]

@zirain What's the API for these extensions? I have no problem adding extensions that are used by Istio but I don't think EnvoyFilter is sustainable as an API. If users are de-facto relying on EnvoyFilter then we have to provide security fixes in the extensions you added. Are we comfortable providing support for all these extensions? I'd prefer if we opted-in the things we support rather than have the kitchen sink.

[istio-testing]

@zirain: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
test_proxy	6f8d83e	link	true	/test test
test-asan_proxy	6f8d83e	link	true	/test test-asan
test-tsan_proxy	6f8d83e	link	true	/test test-tsan

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[zirain]

the original thought is preventing manual sync this configuration with upstream, like istio/istio#42080
#4216 #4191 #4200

[kyessenov]

@zirain That doesn't happen that often. The cluster work was to reduce the binary size for envoy mobile, which is a one-time thing. I think that's a good question for TOC, whether we auto-import new extensions in Envoy into Istio. I'm mostly concerned about the support, some extensions are experimental and not very stable and may later be removed from Envoy.

[zirain]

@zirain That doesn't happen that often. The cluster work was to reduce the binary size for envoy mobile, which is a one-time thing. I think that's a good question for TOC, whether we auto-import new extensions in Envoy into Istio. I'm mostly concerned about the support, some extensions are experimental and not very stable and may later be removed from Envoy.

another question is why some extensions have a different name with upstream?

if we do not want to support some extensions, we should add them to ISTIO_DISABLED_EXTENSIONS ?