Sunjay Bhatia

Update defaults for guidelines on Configuring Envoy as an Edge Proxy

7

Envoy provides documentation guidelines on [Configuring Envoy as an edge proxy](https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge#configuring-envoy-as-an-edge-proxy) Contour has implemented some of these guidelines, but we should do another pass to make sure we have covered...

Gateway API: Fix for Listener/Route hostname isolation

10

Requests should be "isolated" to the most specific Listener and it's attached routes. This means our existing logic on finding intersecting route and Listener hostnames needs an update to factor...

Extract tools/helper programs into hack module

5

Should hopefully reduce some of the top level module required packages for things that arent actually used by contour, just in tools Means local dev environments should include a go.work...

Utilize CEL validation in Contour CRDs

3

Our CRD field validation is a bit inconsistent and could use a refresh. We don't have consistent validation for similar fields and should probably introduce dedicated common types for some....

Update github actions on release branches to versions using node 20

1

We should do this to ensure actions run properly on release branches so we can consistently release patch releases for all supported versions See warnings on https://github.com/projectcontour/contour/actions/runs/7864618305?pr=6177

Regenerate Fine-grained personal access token for Secret PAT_FOR_AUTO_REQUEST_REVIEW (TODO: Dec 2025)

1

This secret is used in the auto review request github workflow to request reviews on PRs from the https://github.com/orgs/projectcontour/teams/contour-reviewers github team (non-maintainers). This secret is a fine-grained personal access token...

HTTPProxy: Configuring/disabling sending Envoy client cert to upstream services

2

**Please describe the problem you have** Contour currently allows configuration of a global client certificate Envoy will present to upstream services: https://projectcontour.io/docs/v1.24.1/configuration/#envoy-client-certificate This is a global configuration that cannot be...

add metric(s) for status update load

7

**Please describe the problem you have** When debugging issues like #5001 it isn't clear at the moment via metrics how the status update components of Contour are working. This includes...

Endpoint(Slice)Translator may not be fully synced before xDS server starts

2

Order of events: - Contour starts up - informers are initialized, endpoint translator is set up as event handler for endpoints - Event handler, etc. are started - OnAdd called...

Support debug server dynamically configurable log level

3

Some logs that are useful for debugging low level issues are logged at a level that is not visible by default (e.g. the default log level is info but some...