contour

contour copied to clipboard

Document metrics and healthcheck listener configuration.

1

**What steps did you take and what happened:** In #2407 , extra CLI flags were added to allow the metrics and healthcheck services to listen on different address and ports....

jpeach

internal/metrics: Contour should track Ingress metrics

3

Contour currently makes metrics available for each of HTTPProxy and IngressRoute (although it's deprecated). It should do the same for Ingress. The current counters are for the CRDs are: -...

youngnick

internal/contour: HoldoffMaxDelay timer should increase if there are pending updates

2

Currently, in `handler.go`, the holdoff timer has a maximum delay, after which it will fire a forced update. As part of an investigation into large amount of memory being used...

youngnick

Certgen needs documentation as a command line tool. Probably belongs in the 'Reference' section of the website.

youngnick

internal/contour: ingressroute/httpproxies outside --root-namespaces create empty route sets

1

#2106 suggested that in some cases an ingressroute/httpproxy outside the root namespace set could cause empty records to be created in RDS. This behaviour is unexpected. I would expect that...

davecheney

internal/builder: One bad route should not break other routes

19

I have an HTTPProxy which I'll share below. One route in the proxy is invalid since the port in the HTTPProxy route does not match the service it's configured to....

stevesloka

TLS certificate fixtures are duplicated many times

1

There are at least three sets of TLS certificate fixtures in the codebase. Ideally there should be one.

davecheney

Providing security notifications for previous releases

10

This issue comes from yesterdays community discussion regarding challenges in providing security updates separate from feature updates. The summary of the issue is that there are challenges providing security only...

SDBrett

Add ModSecurity CRS support

9

In order to implement a production grade ingress controller in many organizations, security mandates that a WAF be placed in front of applications to prevent poorly written web applications from...

z0r0

Use gRPC readiness/liveness probes

4

The current probes used in the example deployments are rather crude: ``` livenessProbe: httpGet: path: /healthz port: 8000 readinessProbe: tcpSocket: port: 8001 initialDelaySeconds: 15 periodSeconds: 10 ``` The readiness probe...

bgagnon