contour

contour copied to clipboard

**What question do you have?:** I'm using the contour implementation of the Kubernetes Gateway API since when using the contour HTTPProxy CRD I always have to modify the root HTTPProxy...

joda01

Contour alloworigin field for CORS policy is not supporting pattern matching on domains (like *.vmware.com) . Envoy has ability to provide regex  support https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/string.proto#envoy-v3-api-msg-type-matcher-v3-stringmatcher  with safe_regex  option The ask is...

sri-rajar

internal/dag: Gateway Listeners with invalid references should have reason RefNotPermitted

2

See https://github.com/kubernetes-sigs/gateway-api/pull/1305 Fixes conformance test failures on main

sunjayBhatia

Added support for overload manager

5

This change adds minimal support for Envoy's [overload manager](https://www.envoyproxy.io/docs/envoy/latest/configuration/operations/overload_manager/overload_manager) to avoid cases where Envoy process is terminated by the out-of-memory killer, which results in traffic distrubances. This PR proposes that...

tsaarni

internal/status: Avoid meaningless Condition changes

6

No longer automatically perform a Status update on _any_ call to AddCondition. I recently noticed in my cluster that my HTTPRoute objects had updates to `status.parents.conditions[Valid].LastTransitionTime` once per second. In...

evankanderson

Contour supports using different ports for service health check

6

**Please describe the problem you have** [A clear, concise, description of the problem you are facing. What is the _problem_ that feature X would solve for you?] I use httpproxy...

yangyy93

internal/provisioner: Unify the ensure objects created

5

There are so many EnsureX in the sub-packages of objects, so unify them to EnsureObject to let maintain work easy Signed-off-by: Gang Liu

izturn

External Authorization and request headers

2

**What question do you have?:** We have been happily using contour with External Authorization. We are using our own authorization server. As the next step for our authorization server will...

hasiotis

Contour support for Envoy's stats per route

18

**Please describe the problem you have** At https://github.com/envoyproxy/envoy/issues/3351 @stevesloka advise envoy to expose metrics per vhost, now this feature has been released along with envoy v1.23 as [route-stat-prefix](https://www.envoyproxy.io/docs/envoy/v1.23.0/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-route-stat-prefix) (the pr...

izturn

Unable to use contour for typical wildcard TLS setup: `IngressSpec.tls.secretName` seems to be required, proxy protocol support is not working

13

**What steps did you take and what happened:** Not willing to use contour CRDs. Using the same `networking.k8s.io/v1` Ingress resources that worked with nginx-ingress. Expected them to work with contour....

artiommocrenco