Sunjay Bhatia

yeah, that makes a lot of sense, since the dag list of routes won't always be added to in the same order since we store dag.Routes as a map ([and...

There are some guidelines on this page for converting an operator like `%DURATION%` to a different unit: https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators (see the section about customizing `%START_TIME%`) I'm not entirely sure you can...

Haven't been able to repro this one locally so added flake attempts

nooooooooo :(

submitted https://github.com/projectcontour/contour/pull/4743

SDS secret config is often a list so you could specify multiple sources of secrets, e.g. in the `extensions.transport_sockets.tls.v3.CommonTlsContext`: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/tls.proto#envoy-v3-api-field-extensions-transport-sockets-tls-v3-commontlscontext-tls-certificate-sds-secret-configs I'm curious how Spire would fit into how we configure...

You could possibly implement this with contour as-is using the response header policy configuration option on a HTTPProxy route

If that is not sufficient we could implement this but would be blocked on native Envoy support

looks like [this change](https://github.com/envoyproxy/envoy/commit/bf61b077e77197a28fefa5798902fd94008e4137) hasn't made it into a release yet, so still blocked on that for a bit

thanks for the update @t0rr3sp3dr0 !