contour
contour copied to clipboard
Contour is a Kubernetes ingress controller using Envoy proxy.
We use JWT validation in our `HTTPProxy` via remote JWKS that points to OIDC provider endpoint located in a different region. Requests to JWKS endpoint take about 1 second. This...
**What question do you have?:** The field PodAnnotations is now defined in the Spec of ContourDeployment, through which Annotations can be added to contour or envoy pods separately, but for...
Structured logging for the Envoy access logs (ie. JSON access logs) was requested in #624 and implemented in #1511. Envoy supports a more advanced and flexible access logging option: an...
Currently, you cannot configure both a Fallback Certificate and Authorization which means you lose Authorization if you do not have SNI available. In our specific use case, we cannot guarantee...
**What question do you have?:** i have a use case where httpproxy should validate the cookie contents and route to particular service accordinly. cookie name is "cookie" inside cookie we...
**Details:** Currently, Contour attaches a compression filter to envoy httpConnectionManager by default, as a result compression is enabled everywhere. While this feature is beneficial in certain scenarios, we have observed...
Currently Contour supports only the gRPC mechanism for external auth. However a lot of open source IAM solutions support HTTP based external auth for envoy which is useful to integrate...
Hi community! I just found that the Deployment `contour` in the charts has both `list` and `get` verbs for the `secrets` resource ([contour.yaml](https://raw.githubusercontent.com/projectcontour/contour/release-1.29/examples/render/contour.yaml)). However, after reading the source code of...
**Describe the solution you'd like** Configure the per-route value for [max_grpc_timeout](https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/route/route.proto#envoy-api-field-route-routeaction-max-grpc-timeout) **Anything else you would like to add:** With the release of [envoyproxy 1.9.0](https://www.envoyproxy.io/docs/envoy/latest/intro/version_history#dec-20-2018), the meaning of `max_grpc_timeout` has been...
### Discussed in https://github.com/projectcontour/contour/discussions/6645 Originally posted by **dimashenkov** August 27, 2024 Is this enough to expose tcp service ? I have difficulties , traffic on 443 and 80 works but...