contour icon indicating copy to clipboard operation
contour copied to clipboard

Contour is a Kubernetes ingress controller using Envoy proxy.

Results 416 contour issues
Sort by recently updated
recently updated
newest added

What steps did you take and what happened: On my K8s cluster I am using Contour ingress, running on Gimbal Cluster. 2 Contour pods running separated with 10 Envoy pods...

kind/feature
priority/important-longterm
blocked/needs-design
lifecycle/stale

Currently any change to the TLS listener requires updating the `ingress_https` LDS entry. Updating this entry will cause the previous listener definition to move into draining mode for `--drain-time-s` (default,...

kind/feature
priority/important-longterm
blocked/needs-design
blocked/needs-envoy
lifecycle/stale

**Describe the solution you'd like** We've run into several users who run on `master` (which isn't a good supported idea), but also get versions of ContourEnvoy mixed up when upgrading....

kind/feature
priority/important-longterm
blocked/needs-design
lifecycle/stale
area/deployment

Particularly when using StatefulSets, it can be valuable to expose individual pods through an ingress. This feature request was well phrased in this StackOverflow question: https://stackoverflow.com/questions/46456239/how-to-expose-a-headless-service-for-a-statefulset-externally-in-kubernetes > The goal is...

kind/feature
blocked/needs-product
lifecycle/stale

Currently cert-manager integration with Contour requires either manually creating a Certificate object (a CRD describing a Let's Encrypt managed certificate) or using [annotations][1] on an Ingress resource which triggers cert-manager's...

kind/feature
blocked/needs-design
area/httpproxy
lifecycle/stale

cert-manager is changing how certificate challenges are implemented. These are called "solvers" and represent ways of altering Ingress or DNS resources to complete the HTTP-01 or DNS-01 Let's Encrypt Challenge....

kind/feature
priority/important-longterm
blocked/needs-design
lifecycle/stale

**Describe the solution you'd like** As a platform operator, I would like to use Contour at the border/edge of all my regions (e.g. it has a public IP address). Contour...

kind/feature
priority/important-longterm

Currently Contour configures Envoy to handle TLS directly on port 8443. If this is enabled then a second option to issue 301 redirects from port 8080 to port 8443 is...

kind/feature
priority/important-longterm
blocked/needs-design
area/tls

**Describe the solution you'd like** Have an easy way to know what Services are referenced in an IngressRoute. One way to implement might be to automatically label the IngressRoute with...

area/ingressroute

**Describe the solution you'd like** Inspired by [an issue in Gimbal](https://github.com/heptio/gimbal/issues/209), I'd like to (open the discussion on how we might improve the user experience when one or more IngressRoutes...

kind/feature
priority/important-longterm
area/ingressroute