contour

contour copied to clipboard

Add filtering capabilities to the DAG debug endpoint

2

**Describe the solution you'd like** As a cluster operator using Contour, I would like to be able to filter the DAG debugging output that can be obtained via the debug...

alexbrand

Upstream CA Cert filtering fires for unrelated Secrets

10

The logic added in beta.1 to filter out anything except `kubernetes.io/tls` and items with `data["ca.crt"]` is failing because `kubernetes.io/service-account-token`'s also have a key called `ca.crt`. ``` % k get -n...

davecheney

Lowering Envoy's cluster per-connection buffer to 32kb

4

Envoy allocates 1mb per connection to a backend pod. https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/cds.proto#cluster It is not clear if it allocates it all in one go, or it is an upper limit. In either...

davecheney

Lower the per connection buffer to 64k at the listener level

2

Envoy assigns a 1Mb buffer to to each incoming connection. It is not clear if it consumes the whole 1Mb in one go, or that is a upper limit. Either...

davecheney

Migrate serving of upstream CA certificate to SDS

1

Currently TLS certificates are referenced by CDS and served by SDS. For CA certs used by upstream verification we still serve the CA material inline in CDS. To fix this...

davecheney

Redirect: default HTTP->HTTPS redirect does not work if envoy is deployed on non-default host ports

9

http redirect url is not composed correctly when envoy is deployed on non standard hostport (!80, !443). Deployment steps: 1. Reference deployment: https://github.com/heptio/contour/blob/master/examples/ds-hostnet-split/03-envoy.yaml 2. Change hostports to different value; example:...

sudeeptoroy

Contour should switch to using ADS for all configuration streams

2

This is a long term issue to track potentially moving from RDS/EDS/CDS/etc to a unified ADS implementation. **Note**: This is not currently in scope for Contour 1.0.

davecheney

Wait to discover all K8s resources before sending xDS responses

6

As far as I can tell Contour will send whatever resources it has whenever xDS DiscoveryRequests come in. This can cause xDS resources to be torn down in Envoy on...

phylake

cmd/contour: Metrics/Stats args are confusing

1

**Describe the solution you'd like** Currently, to set the Envoy Prometheus stats address/port you set the `stats-address` / `stats-port` arg to Contour. Also, Contour exposes its own Prometheus metrics which...

stevesloka

Option to output Contour logs as JSON

5

_This is only about Contour's logs, not Envoy logs._ The request is to add a CLI flag that turns on JSON formatting for the logs. The default output is structured...

bgagnon