repo: Add filter examples

Signed-off-by: Ryan Northey <ryan@synca.io>

.gitignore

@@ -72,3 +72,6 @@ lerna-debug.log*
 node_modules
 dist
 *.bak
+
+filters/envoy
+filters/bazel

filters/.bazelversion

@@ -0,0 +1 @@
+6.5.0

filters/BUILD

@@ -0,0 +1,60 @@
+package(default_visibility = ["//visibility:public"])
+
+load(
+    "@envoy//bazel:envoy_build_system.bzl",
+    "envoy_cc_binary",
+    "envoy_cc_library",
+    "envoy_cc_test",
+)
+
+envoy_cc_binary(
+    name = "envoy",
+    repository = "@envoy",
+    deps = [
+        ":echo2_config",
+        "@envoy//source/exe:envoy_main_entry_lib",
+    ],
+)
+
+envoy_cc_library(
+    name = "echo2_lib",
+    srcs = ["echo2.cc"],
+    hdrs = ["echo2.h"],
+    repository = "@envoy",
+    deps = [
+        "@envoy//envoy/buffer:buffer_interface",
+        "@envoy//envoy/network:connection_interface",
+        "@envoy//envoy/network:filter_interface",
+        "@envoy//source/common/common:assert_lib",
+        "@envoy//source/common/common:logger_lib",
+    ],
+)
+
+envoy_cc_library(
+    name = "echo2_config",
+    srcs = ["echo2_config.cc"],
+    repository = "@envoy",
+    deps = [
+        ":echo2_lib",
+        "@envoy//envoy/network:filter_interface",
+        "@envoy//envoy/registry:registry",
+        "@envoy//envoy/server:filter_config_interface",
+    ],
+)
+
+envoy_cc_test(
+    name = "echo2_integration_test",
+    srcs = ["echo2_integration_test.cc"],
+    data =  ["echo2_server.yaml"],
+    repository = "@envoy",
+    deps = [
+        ":echo2_config",
+        "@envoy//test/integration:integration_lib"
+    ],
+)
+
+sh_test(
+    name = "envoy_binary_test",
+    srcs = ["envoy_binary_test.sh"],
+    data = [":envoy"],
+)

filters/WORKSPACE

@@ -0,0 +1,30 @@
+workspace(name = "envoy_filter_example")
+
+local_repository(
+    name = "envoy",
+    path = "envoy",
+)
+
+load("@envoy//bazel:api_binding.bzl", "envoy_api_binding")
+
+envoy_api_binding()
+
+load("@envoy//bazel:api_repositories.bzl", "envoy_api_dependencies")
+
+envoy_api_dependencies()
+
+load("@envoy//bazel:repositories.bzl", "envoy_dependencies")
+
+envoy_dependencies()
+
+load("@envoy//bazel:repositories_extra.bzl", "envoy_dependencies_extra")
+
+envoy_dependencies_extra()
+
+load("@envoy//bazel:python_dependencies.bzl", "envoy_python_dependencies")
+
+envoy_python_dependencies()
+
+load("@envoy//bazel:dependency_imports.bzl", "envoy_dependency_imports")
+
+envoy_dependency_imports()

filters/bazel-bin

@@ -0,0 +1 @@
+/home/envoybuild/.cache/bazel/_bazel_envoybuild/b570b5ccd0454dc9af9f65ab1833764d/execroot/envoy_filter_example/bazel-out/k8-fastbuild/bin

filters/bazel-out

@@ -0,0 +1 @@
+/home/envoybuild/.cache/bazel/_bazel_envoybuild/b570b5ccd0454dc9af9f65ab1833764d/execroot/envoy_filter_example/bazel-out

filters/bazel-source

@@ -0,0 +1 @@
+/home/envoybuild/.cache/bazel/_bazel_envoybuild/b570b5ccd0454dc9af9f65ab1833764d/execroot/envoy_filter_example

filters/bazel-testlogs

@@ -0,0 +1 @@
+/home/envoybuild/.cache/bazel/_bazel_envoybuild/b570b5ccd0454dc9af9f65ab1833764d/execroot/envoy_filter_example/bazel-out/k8-fastbuild/testlogs

filters/bazel/get_workspace_status

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+
+# This file was imported from https://github.com/bazelbuild/bazel at d6fec93.
+
+# This script will be run bazel when building process starts to
+# generate key-value information that represents the status of the
+# workspace. The output should be like
+#
+# KEY1 VALUE1
+# KEY2 VALUE2
+#
+# If the script exits with non-zero code, it's considered as a failure
+# and the output will be discarded.
+
+# For Envoy in particular, we want to force binaries to relink when the Git
+# SHA changes (https://github.com/envoyproxy/envoy/issues/2551). This can be
+# done by prefixing keys with "STABLE_". To avoid breaking compatibility with
+# other status scripts, this one still echos the non-stable ("volatile") names.
+
+# If this SOURCE_VERSION file exists then it must have been placed here by a
+# distribution doing a non-git, source build.
+# Distributions would be expected to echo the commit/tag as BUILD_SCM_REVISION
+if [ -f SOURCE_VERSION ]
+then
+    echo "BUILD_SCM_REVISION $(cat SOURCE_VERSION)"
+    echo "ENVOY_BUILD_SCM_REVISION $(cat SOURCE_VERSION)"
+    echo "STABLE_BUILD_SCM_REVISION $(cat SOURCE_VERSION)"
+    echo "BUILD_SCM_STATUS Distribution"
+    exit 0
+fi
+
+if [[ -n "$BAZEL_FAKE_SCM_REVISION" ]]; then
+    echo "BUILD_SCM_REVISION $BAZEL_FAKE_SCM_REVISION"
+    echo "ENVOY_BUILD_SCM_REVISION $BAZEL_FAKE_SCM_REVISION"
+    echo "STABLE_BUILD_SCM_REVISION $BAZEL_FAKE_SCM_REVISION"
+else
+    # The code below presents an implementation that works for git repository
+    git_rev=$(git rev-parse HEAD) || exit 1
+    echo "BUILD_SCM_REVISION ${git_rev}"
+    echo "ENVOY_BUILD_SCM_REVISION ${git_rev}"
+    echo "STABLE_BUILD_SCM_REVISION ${git_rev}"
+fi
+
+# If BAZEL_VOLATILE_DIRTY is set then stamped builds will rebuild uncached when
+# either a tracked file changes or an untracked file is added or removed.
+# Otherwise this just tracks changes to tracked files.
+tracked_hash="$(git ls-files -s | sha256sum | head -c 40)"
+if [[ -n "$BAZEL_VOLATILE_DIRTY" ]]; then
+    porcelain_status="$(git status --porcelain | sha256sum)"
+    diff_status="$(git --no-pager diff | sha256sum)"
+    tree_hash="$(echo "${tracked_hash}:${porcelain_status}:${diff_status}" | sha256sum | head -c 40)"
+    echo "BUILD_SCM_HASH ${tree_hash}"
+else
+    echo "BUILD_SCM_HASH ${tracked_hash}"
+fi
+
+# Check whether there are any uncommitted changes
+tree_status="Clean"
+git diff-index --quiet HEAD -- || {
+    tree_status="Modified"
+}
+
+echo "BUILD_SCM_STATUS ${tree_status}"
+echo "STABLE_BUILD_SCM_STATUS ${tree_status}"
+
+git_branch=$(git rev-parse --abbrev-ref HEAD)
+echo "BUILD_SCM_BRANCH ${git_branch}"
+
+git_remote=$(git remote get-url origin)
+if [[ -n "$git_remote" ]]; then
+    echo "BUILD_SCM_REMOTE ${git_remote}"
+fi

filters/bazel/platform_mappings

@@ -0,0 +1,36 @@
+flags:
+  --cpu=arm64-v8a
+  --crosstool_top=//external:android/crosstool
+    @envoy//bazel:android_aarch64
+
+  --cpu=armeabi-v7a
+  --crosstool_top=//external:android/crosstool
+    @envoy//bazel:android_armeabi
+
+  --cpu=x86
+  --crosstool_top=//external:android/crosstool
+    @envoy//bazel:android_x86
+
+  --cpu=x86_64
+  --crosstool_top=//external:android/crosstool
+    @envoy//bazel:android_x86_64
+
+  --cpu=darwin_x86_64
+  --apple_platform_type=macos
+    @envoy//bazel:macos_x86_64
+
+  --cpu=darwin_arm64
+  --apple_platform_type=macos
+    @envoy//bazel:macos_arm64
+
+  --cpu=ios_x86_64
+  --apple_platform_type=ios
+    @envoy//bazel:ios_x86_64_platform
+
+  --cpu=ios_sim_arm64
+  --apple_platform_type=ios
+    @envoy//bazel:ios_sim_arm64_platform
+
+  --cpu=ios_arm64
+  --apple_platform_type=ios
+    @envoy//bazel:ios_arm64_platform

filters/bazel/protoc/BUILD

@@ -0,0 +1 @@
+licenses(["notice"])  # Apache 2

filters/bazel/protoc/BUILD.protoc

@@ -0,0 +1,18 @@
+load("@envoy//bazel/protoc:protoc.bzl", "protoc_binary")
+
+protoc_binary(
+    name = "protoc",
+    srcs = select({
+        ":windows": ["bin/protoc.exe"],
+        "//conditions:default": ["bin/protoc"],
+    }),
+    executable = "protoc.exe",
+    visibility = ["//visibility:public"],
+)
+
+config_setting(
+    name = "windows",
+    constraint_values = [
+        "@platforms//os:windows",
+    ],
+)

filters/bazel/protoc/protoc.bzl

@@ -0,0 +1,15 @@
+def protoc_binary(name, srcs, executable, **kwargs):
+    """protoc_binary makes a copy of the protoc binary to bazel-bin.
+
+This is a workaround to make sure protoc can be used with attributes
+which don't allow files."""
+
+    native.genrule(
+        name = name,
+        executable = True,
+        srcs = srcs,
+        outs = [executable],
+        cmd_bash = "cp $< $@ && chmod +x $@",
+        cmd_bat = "copy $< $@",
+        **kwargs
+    )

filters/docker-compose-filters.yaml

@@ -0,0 +1,14 @@
+services:
+  filter_example_compile:
+    build:
+      context: ../shared/build
+    command: >
+      bash -c "
+      bazel build //:envoy"
+    entrypoint: /usr/local/bin/build-entrypoint.sh
+    environment:
+    - BUILD_UID=${UID:-1000}
+    working_dir: /source
+    volumes:
+    - ${ENVOY_DOCKER_BUILD_DIR:-/tmp/envoy-docker-build}:/tmp
+    - .:/source

filters/filter_example_setup.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# Configure environment for Envoy Filter Example build and test.
+
+set -e
+
+# shellcheck disable=SC2034
+ENVOY_FILTER_EXAMPLE_TESTS=(
+    "//:echo2_integration_test"
+    "//http-filter-example:http_filter_integration_test"
+    "//:envoy_binary_test")
+
+mkdir -p "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/bazel
+ln -sf "${ENVOY_SRCDIR}"/bazel/get_workspace_status "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/bazel/
+ln -sf "${ENVOY_SRCDIR}"/bazel/platform_mappings "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/bazel/
+cp -a "${ENVOY_SRCDIR}"/bazel/protoc "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/bazel/
+cp -f "${ENVOY_SRCDIR}"/.bazelrc "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/
+rm -f "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/.bazelversion
+cp -f "${ENVOY_SRCDIR}"/.bazelversion "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/
+cp -f "${ENVOY_SRCDIR}"/*.bazelrc "${ENVOY_FILTER_EXAMPLE_SRCDIR}"/
+
+export FILTER_WORKSPACE_SET=1

filters/verify.sh

@@ -0,0 +1,16 @@
+
+
+if [[ ! -e envoy ]]; then
+    git clone https://github.com/envoyproxy/envoy
+fi
+
+echo FILTER_DEV > SOURCE_VERSION
+
+mkdir -p bazel
+cp -a envoy/bazel/get_workspace_status bazel/
+cp -a envoy/bazel/platform_mappings bazel/
+cp -a envoy/bazel/protoc bazel/
+cp -f envoy/.bazelrc .
+cp -f envoy/.bazelversion .
+
+docker compose -f docker-compose-filters.yaml up --build --quiet-pull --remove-orphans filter_example_compile

shared/build/Dockerfile

@@ -2,6 +2,8 @@ FROM envoyproxy/envoy-build-ubuntu:f94a38f62220a2b017878b790b6ea98a0f6c5f9c@sha2
 ENV DEBIAN_FRONTEND=noninteractive
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt/lists,sharing=locked \
-    apt-get -qq install --no-install-recommends -y gosu \
+    apt-get update \
+    && apt-get -qq install --no-install-recommends -y gosu \
     && groupadd -f envoygroup \
     && useradd -g envoygroup -m -d /home/envoybuild envoybuild
+COPY ./build-entrypoint.sh /usr/local/bin

shared/build/build-entrypoint.sh

@@ -7,6 +7,10 @@ if [[ $(id -u envoybuild) != "${BUILD_UID}" ]]; then
     chown envoybuild /home/envoybuild
 fi
 
+if [[ ! -e /output ]]; then
+    mkdir /output
+fi
+
 chown envoybuild /output
 chmod 1777 /tmp