contour

contour copied to clipboard

ipAllowPolicy with source: Remote and x-forwarded-for IP address does not work

1

**What steps did you take and what happened:** We have httpproxy config with ipAllowPolicy: ``` apiVersion: projectcontour.io/v1 kind: HTTPProxy metadata: name: grafana spec: ingressClassName: management-contour virtualhost: fqdn: grafana.example.com ipAllowPolicy: -...

bartwitkowski

Request to path returning 404 for trailing dot domain

5

**What steps did you take and what happened:** Configured an HttpProxy resource for a domain with a path. This was registered correctly and DNS working as expected for both `my-example-domain.com`...

saley89

allow arbitrary Envoy runtime settings to be configurable

1

ref. https://github.com/projectcontour/contour/pull/6328#discussion_r1557841886 cc @rajatvig

skriss

Envoy Route Testing tool compatibility for Contour

2

Envoy provides a route testing tool through which you can test routing logic. Reference: https://www.envoyproxy.io/docs/envoy/latest/configuration/operations/tools/router_check#config-tools-router-check-tool This tool is run against raw envoy route configs. it would be helpful for the...

clayton-gonsalves

Failed test error: ``` [FAILED] Error Trace: /home/runner/work/contour/contour/test/e2e/httpproxy/global_external_auth_test.go:197 /home/runner/go/pkg/mod/github.com/onsi/ginkgo/[email protected]/internal/node.go:472 /home/runner/go/pkg/mod/github.com/onsi/ginkgo/[email protected]/internal/suite.go:889 /opt/hostedtoolcache/go/1.22.1/x64/src/runtime/asm_amd64.s:1695 Error: Should be true Test: HTTPProxy global external auth with namespace: httpproxy-global-ext-auth-tls with global external auth service global external...

sunjayBhatia

Makefile: Misspell check missing docs directory

4

The check for spelling errors is missing the site/docs directories and aren't being checked for errors.

stevesloka

Define how HTTPProxy validity interacts with delegation

1

HTTPProxy delegation can interact with validity in unexpected ways. 1. If proxy A delegates to proxy B, and proxy B is not present, then proxy A is marked invalid. 2....

jpeach

TCPRoute delete not propagated

4

**What steps did you take and what happened:** I create a Gateway with a TCP listener and confirm it's admitted. I create a TCPRoute and confirm it's accepted. An external...

bhamon

Contour should document how to use alternatives to certgen for securing traffic between contour and envoy

6

Notwithstanding @tsaarni 's efforts to make certificate rotation easier to accomplish, we should acknowledge that certgen is not going to grow beyond its current role of supporting the example deployments...

davecheney

Envoy can serve 503 when transitioning between services.

20

**What steps did you take and what happened:** In Knative we have an automated test that: 1. Creates a Pod and Service (waits for Endpoints to have ready addresses) 1....

mattmoor