diff --git a/kubernetes/customresourcedefinitions.gen.yaml b/kubernetes/customresourcedefinitions.gen.yaml
index 7318e07ffd..803a36b6d4 100644
--- a/kubernetes/customresourcedefinitions.gen.yaml
+++ b/kubernetes/customresourcedefinitions.gen.yaml
@@ -11556,6 +11556,10 @@ spec:
maximum: 4294967295
minimum: 0
type: integer
+ prefixRewrite:
+ description: On a redirect, replace the matched prefix with
+ this value.
+ type: string
redirectCode:
description: On a redirect, Specifies the HTTP status code
to use in the redirect response.
@@ -12608,6 +12612,10 @@ spec:
maximum: 4294967295
minimum: 0
type: integer
+ prefixRewrite:
+ description: On a redirect, replace the matched prefix with
+ this value.
+ type: string
redirectCode:
description: On a redirect, Specifies the HTTP status code
to use in the redirect response.
@@ -13660,6 +13668,10 @@ spec:
maximum: 4294967295
minimum: 0
type: integer
+ prefixRewrite:
+ description: On a redirect, replace the matched prefix with
+ this value.
+ type: string
redirectCode:
description: On a redirect, Specifies the HTTP status code
to use in the redirect response.
diff --git a/networking/v1/virtual_service_alias.gen.go b/networking/v1/virtual_service_alias.gen.go
index 2ce6d25923..b3af08a683 100644
--- a/networking/v1/virtual_service_alias.gen.go
+++ b/networking/v1/virtual_service_alias.gen.go
@@ -520,6 +520,33 @@ type TLSMatchAttributes = v1alpha3.TLSMatchAttributes
// ...
//
// ```
+//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+//
+// name: foo-redirect
+//
+// spec:
+//
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+//
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
type HTTPRedirect = v1alpha3.HTTPRedirect
type HTTPRedirect_RedirectPortSelection = v1alpha3.HTTPRedirect_RedirectPortSelection
diff --git a/networking/v1alpha3/virtual_service.pb.go b/networking/v1alpha3/virtual_service.pb.go
index d4db2ab0c6..b04dd4e812 100644
--- a/networking/v1alpha3/virtual_service.pb.go
+++ b/networking/v1alpha3/virtual_service.pb.go
@@ -2021,11 +2021,40 @@ func (x *TLSMatchAttributes) GetSourceNamespace() string {
// ...
//
// ```
+//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+//
+// name: foo-redirect
+//
+// spec:
+//
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+//
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
type HTTPRedirect struct {
state protoimpl.MessageState `protogen:"open.v1"`
// On a redirect, overwrite the Path portion of the URL with this
// value. Note that the entire path will be replaced, irrespective of the
// request URI being matched as an exact path or prefix.
+ //
+ // Mutually exclusive with prefix_rewrite.
Uri string `protobuf:"bytes,1,opt,name=uri,proto3" json:"uri,omitempty"`
// On a redirect, overwrite the Authority/Host portion of the URL with
// this value.
@@ -2042,7 +2071,17 @@ type HTTPRedirect struct {
Scheme string `protobuf:"bytes,6,opt,name=scheme,proto3" json:"scheme,omitempty"`
// On a redirect, Specifies the HTTP status code to use in the redirect
// response. The default response code is MOVED_PERMANENTLY (301).
- RedirectCode uint32 `protobuf:"varint,3,opt,name=redirect_code,json=redirectCode,proto3" json:"redirect_code,omitempty"`
+ RedirectCode uint32 `protobuf:"varint,3,opt,name=redirect_code,json=redirectCode,proto3" json:"redirect_code,omitempty"`
+ // On a redirect, replace the matched prefix with this value. The route match
+ // must use a prefix match type. The matched prefix is stripped from the path
+ // and this value is prepended.
+ //
+ // Examples (route prefix match: /foo):
+ // - prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+ // - prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+ //
+ // Mutually exclusive with uri.
+ PrefixRewrite string `protobuf:"bytes,7,opt,name=prefix_rewrite,json=prefixRewrite,proto3" json:"prefix_rewrite,omitempty"`
unknownFields protoimpl.UnknownFields
sizeCache protoimpl.SizeCache
}
@@ -2130,6 +2169,13 @@ func (x *HTTPRedirect) GetRedirectCode() uint32 {
return 0
}
+func (x *HTTPRedirect) GetPrefixRewrite() string {
+ if x != nil {
+ return x.PrefixRewrite
+ }
+ return ""
+}
+
type isHTTPRedirect_RedirectPort interface {
isHTTPRedirect_RedirectPort()
}
@@ -3622,7 +3668,7 @@ const file_networking_v1alpha3_virtual_service_proto_rawDesc = "" +
"\x10source_namespace\x18\a \x01(\tR\x0fsourceNamespace\x1a?\n" +
"\x11SourceLabelsEntry\x12\x10\n" +
"\x03key\x18\x01 \x01(\tR\x03key\x12\x14\n" +
- "\x05value\x18\x02 \x01(\tR\x05value:\x028\x01J\x04\b\x04\x10\x05R\rsource_subnet\"\xcf\x02\n" +
+ "\x05value\x18\x02 \x01(\tR\x05value:\x028\x01J\x04\b\x04\x10\x05R\rsource_subnet\"\xf6\x02\n" +
"\fHTTPRedirect\x12\x10\n" +
"\x03uri\x18\x01 \x01(\tR\x03uri\x12\x1c\n" +
"\tauthority\x18\x02 \x01(\tR\tauthority\x12\x14\n" +
@@ -3630,7 +3676,8 @@ const file_networking_v1alpha3_virtual_service_proto_rawDesc = "" +
"\vderive_port\x18\x05 \x01(\x0e2=.istio.networking.v1alpha3.HTTPRedirect.RedirectPortSelectionH\x00R\n" +
"derivePort\x12\x16\n" +
"\x06scheme\x18\x06 \x01(\tR\x06scheme\x12#\n" +
- "\rredirect_code\x18\x03 \x01(\rR\fredirectCode\"I\n" +
+ "\rredirect_code\x18\x03 \x01(\rR\fredirectCode\x12%\n" +
+ "\x0eprefix_rewrite\x18\a \x01(\tR\rprefixRewrite\"I\n" +
"\x15RedirectPortSelection\x12\x19\n" +
"\x15FROM_PROTOCOL_DEFAULT\x10\x00\x12\x15\n" +
"\x11FROM_REQUEST_PORT\x10\x01B\x0f\n" +
diff --git a/networking/v1alpha3/virtual_service.pb.html b/networking/v1alpha3/virtual_service.pb.html
index 637a497cc1..822483a32c 100644
--- a/networking/v1alpha3/virtual_service.pb.html
+++ b/networking/v1alpha3/virtual_service.pb.html
@@ -1508,6 +1508,25 @@ HTTPRedirect
authority: newratings.default.svc.cluster.local
...
+The following rule redirects requests with a path prefix of /foo to the
+authority foo.example.com, stripping the /foo prefix from the path:
+apiVersion: networking.istio.io/v1
+kind: VirtualService
+metadata:
+ name: foo-redirect
+spec:
+ hosts:
+ - example.com
+ http:
+ - match:
+ - uri:
+ prefix: /foo/
+ redirect:
+ authority: foo.example.com
+ prefix_rewrite: /
+
+With this rule, a request to example.com/foo/bar is redirected to
+foo.example.com/bar.
@@ -1525,6 +1544,7 @@ HTTPRedirect
On a redirect, overwrite the Path portion of the URL with this
value. Note that the entire path will be replaced, irrespective of the
request URI being matched as an exact path or prefix.
+Mutually exclusive with prefix_rewrite.
@@ -1580,6 +1600,23 @@ HTTPRedirect
On a redirect, Specifies the HTTP status code to use in the redirect
response. The default response code is MOVED_PERMANENTLY (301).
+
+
+
+ |
+
+ On a redirect, replace the matched prefix with this value. The route match
+must use a prefix match type. The matched prefix is stripped from the path
+and this value is prepended.
+Examples (route prefix match: /foo):
+
+- prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+- prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+
+Mutually exclusive with uri.
+
|
diff --git a/networking/v1alpha3/virtual_service.proto b/networking/v1alpha3/virtual_service.proto
index d81ad2d72c..6a90199725 100644
--- a/networking/v1alpha3/virtual_service.proto
+++ b/networking/v1alpha3/virtual_service.proto
@@ -1074,10 +1074,35 @@ message TLSMatchAttributes {
// ...
// ```
//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+// name: foo-redirect
+// spec:
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
+//
message HTTPRedirect {
// On a redirect, overwrite the Path portion of the URL with this
// value. Note that the entire path will be replaced, irrespective of the
// request URI being matched as an exact path or prefix.
+ //
+ // Mutually exclusive with prefix_rewrite.
string uri = 1;
// On a redirect, overwrite the Authority/Host portion of the URL with
@@ -1106,6 +1131,17 @@ message HTTPRedirect {
// On a redirect, Specifies the HTTP status code to use in the redirect
// response. The default response code is MOVED_PERMANENTLY (301).
uint32 redirect_code = 3;
+
+ // On a redirect, replace the matched prefix with this value. The route match
+ // must use a prefix match type. The matched prefix is stripped from the path
+ // and this value is prepended.
+ //
+ // Examples (route prefix match: /foo):
+ // - prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+ // - prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+ //
+ // Mutually exclusive with uri.
+ string prefix_rewrite = 7;
}
// HTTPDirectResponse can be used to send a fixed response to clients.
diff --git a/networking/v1beta1/virtual_service_alias.gen.go b/networking/v1beta1/virtual_service_alias.gen.go
index 530098b3e5..64157190c4 100644
--- a/networking/v1beta1/virtual_service_alias.gen.go
+++ b/networking/v1beta1/virtual_service_alias.gen.go
@@ -520,6 +520,33 @@ type TLSMatchAttributes = v1alpha3.TLSMatchAttributes
// ...
//
// ```
+//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+//
+// name: foo-redirect
+//
+// spec:
+//
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+//
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
type HTTPRedirect = v1alpha3.HTTPRedirect
type HTTPRedirect_RedirectPortSelection = v1alpha3.HTTPRedirect_RedirectPortSelection
diff --git a/releasenotes/notes/redirect-prefix-rewrite.yaml b/releasenotes/notes/redirect-prefix-rewrite.yaml
new file mode 100644
index 0000000000..19c79e642b
--- /dev/null
+++ b/releasenotes/notes/redirect-prefix-rewrite.yaml
@@ -0,0 +1,13 @@
+apiVersion: release-notes/v2
+kind: feature
+area: traffic-management
+issue:
+ - 47500
+ - 47777
+ - 52521
+
+releaseNotes:
+ - |
+ **Added** `prefix_rewrite` field to `HTTPRedirect`, allowing redirects that preserve the path
+ suffix. The matched route prefix is stripped and replaced with the specified value (e.g.
+ `example.com/foo/bar` → `foo.example.com/bar`). Mutually exclusive with the existing `uri` field.