contour

contour copied to clipboard

Global ExtAuthz authPolicy.context not setting grpc initial_metadata

2

**What steps did you take and what happened:** Follow this guide: https://projectcontour.io/docs/1.25/guides/external-authorization/ This was my globalExtAuth config: ``` contour.yaml: | disablePermitInsecure: false globalExtAuth: extensionService: service/my-ext-authz failOpen: true authPolicy: disabled: false...

prodion23

Documentation on `ingress.kubernetes.io/force-ssl-redirect` is outdated

5

**What steps did you take and what happened:** Since https://github.com/projectcontour/contour/pull/252, Contour leverages `HttpsRedirect` instead of `RequireTls` to enforce `force-ssl-redirect`. All documentation versions are affected. **What did you expect to happen:**...

jwnx

Memory usage for Contour doubled in latest version

1

**What steps did you take and what happened:** [A clear and concise description of what the bug is.] We upgraded from 1.23.2 to 1.31.0 on one of our environments, and...

Neekoy

Route status conditions about detached parentRef

2

**Situation** - Create two valid gateways: `gateway1` and `gateway2`. - Create a valid `HttpRoute` called `httproute1` with a `parentRef` to `gateway1`. - A condition `RefsResolved: True` will appear in the...

vaniog

Use HealthCheck filter for readiness probe

1

At this point, this PR is just for crude way to test `HealthCheck` filter for a replacement of admin interface `/ready` readiness probe. Tests are bound to fail. Fixes #4540

tsaarni

Use go 1.24 tool directive in go.mod

4

Gets rid of tools.go and tools build tag

sunjayBhatia

gateway-api support: Implement request percentage mirroring

1

See: `percentage` and `fraction` fields of Mirror filter: https://gateway-api.sigs.k8s.io/reference/spec/#httprequestmirrorfilter

sunjayBhatia

IngressClass not working even when matching --ingress-class-name

4

**What steps did you take and what happened:** I have 2 contour deployments of contour in 2 namespace, both deployed using the bitnami helm chart. One is using the default...

Simon-Boyer

Support ClientSideWeightedRoundRobin LB policy

3

In v1.32.0 Envoy added support for `ClientSideWeightedRoundRobin` load balancing policy ([link](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.proto#envoy-v3-api-msg-extensions-load-balancing-policies-client-side-weighted-round-robin-v3-clientsideweightedroundrobin)). It would be great to support it in contour.

anton-kuklin

Support setting MaxStreamDuration of both specific routes and globally

4

Envoy has support for setting the MaxStreamDuration both globally and on a route, I suspect configuring this instead of an envoy route timeout would resolve some SSL issues we are...

nickburgin