feat: add org avatar rule

devservices/proxy.yaml

@@ -28,6 +28,13 @@ proxy:
         cell_to_upstream:
           "--monolith--": sentry-dev-monolith
         default: sentry-dev-monolith
+    - match:
+        path: /organization-avatar/{organization}/{avatar_id}
+      action:
+        resolver: cell_from_organization
+        cell_to_upstream:
+          "--monolith--": sentry-dev-monolith
+        default: sentry-dev-monolith
 
 metrics:
   statsd_host: "127.0.0.1"

example_config_proxy.yaml

@@ -44,6 +44,15 @@ proxy:
           us1: us1-getsentry
           us2: us2-getsentry
         default: us1-getsentry
+    - match:
+        host: us.sentry.io
+        path: /organization-avatar/{organization}/{avatar_id}
+      action:
+        resolver: cell_from_organization
+        cell_to_upstream:
+          us1: us1-getsentry
+          us2: us2-getsentry
+        default: us1-getsentry
     - match:
         host: us.sentry.io
         path: /api/0/cell/{cell_id}/*

proxy/src/route_actions.rs

@@ -371,4 +371,45 @@ mod tests {
             })
         );
     }
+
+    #[test]
+    fn test_organization_avatar_slug_locator() {
+        // route on first segment after static prefix; org avatars are
+        // served from /organization-avatar/{slug}/{id}
+        // (the avatar id is captured but ignored)
+        let config = RouteConfig {
+            r#match: crate::config::Match {
+                host: None,
+                path: Some("/organization-avatar/{organization}/{avatar_id}".to_string()),
+            },
+            action: crate::config::Action::Dynamic {
+                resolver: crate::config::Resolver::CellFromOrganization,
+                cell_to_upstream: HashMap::new(),
+                default: None,
+            },
+        };
+
+        let route = Route::try_from(config.clone()).unwrap();
+
+        assert_eq!(
+            route.matches(None, "/organization-avatar/my-org/abc123/"),
+            Some(RouteMatch {
+                params: HashMap::from([
+                    ("organization".to_string(), "my-org".to_string()),
+                    ("avatar_id".to_string(), "abc123".to_string()),
+                ]),
+                action: config.action.clone(),
+            }),
+            "captures the slug as `organization`, not the avatar id"
+        );
+
+        // the explicit two-segment org segment must not match
+        // deprecated, slug-less form (/organization-avatar/{id})
+        assert!(
+            route
+                .matches(None, "/organization-avatar/abc123/")
+                .is_none(),
+            "deprecated slug-less form must not match the slug locator"
+        );
+    }
 }