Add support for initial_metadata to AuthService

[rnburn]

Description

Support specifying initial_metadata in AuthService.

When specified, envoy will add the initial_metadata to its ext auth request.

From Envoy's docs:

initial_metadata
(repeated config.core.v3.HeaderValue) Additional metadata to include in streams initiated to the GrpcService. This can be used for scenarios in which additional ad hoc authorization headers (e.g. x-foo-bar: baz-key) are to be injected. For more information, including details on header value syntax, see the documentation on custom request headers.

Testing

Added a kat test case to verify the auth service receives the metadata.

Checklist

• [ x] I made sure to update CHANGELOG.md.

  Remember, the CHANGELOG needs to mention:

  • Any new features
  • Any changes to our included version of Envoy
  • Any non-backward-compatible changes
  • Any deprecations

• [ x] This is unlikely to impact how Ambassador performs at scale.

  Remember, things that might have an impact at scale include:

  • Any significant changes in memory use that might require adjusting the memory limits
  • Any significant changes in CPU use that might require adjusting the CPU limits
  • Anything that might change how many replicas users should use
  • Changes that impact data-plane latency/scalability

• My change is adequately tested.

  Remember when considering testing:

  • LEGACY MODE TESTS DO NOT RUN FOR EVERY PR. If your change is affected by legacy mode, you need
    to run legacy-mode tests manually (set AMBASSADOR_LEGACY_MODE=true and run the tests).
    (This will be fixed soon.)
  • Your change needs to be specifically covered by tests.
    • Tests need to cover all the states where your change is relevant: for example, if you add a behavior that can be enabled or disabled, you'll need tests that cover the enabled case and tests that cover the disabled case. It's not sufficient just to test with the behavior enabled.
  • You also need to make sure that the entire area being changed has adequate test coverage.
    • If existing tests don't actually cover the entire area being changed, add tests.
    • This applies even for aspects of the area that you're not changing – check the test coverage, and improve it if needed!
  • We should lean on the bulk of code being covered by unit tests, but...
  • ... an end-to-end test should cover the integration points

• I updated DEVELOPING.md with any any special dev tricks I had to use to work on this code efficiently.

[kflynn]

One quick change, if you could -- thanks very much!! 🙂

[kflynn]

Would it make sense to just make this a map[string]string? AddAuthHeaders uses the bool option in a very specific way, and we generally would rather not add more of those...

[rnburn]

done

[rnburn]

@kflynn - were there any other changes you wanted?

[cortopy]

I also need to add initial_metadata. Any chance of getting this merged?