Sunjay Bhatia

Document how HTTPProxy route/include match condition precedence works

2

Our request routing page has detail on what the various HTTPProxy route/include match conditions do, but not how they interact, in terms of precedence etc.: https://projectcontour.io/docs/1.26/config/request-routing/#conditions Since Envoy matches requests...

Make overload.premature_reset_total_stream_count runtime setting configurable

4

This is a parameter that can be tuned to help mitigate CVE-2023-44487 Envoy has a default value of 500 but users may want to tune this to prevent resource starvation...

Query parameter matching: case sensitivity

3

While working on https://github.com/projectcontour/contour/pull/5069 it occured to me that the logic recently added for query parameter match condition validation assumes case insensitivity is desired, similar to header match conditions. It...

test/e2e: NamespacedTest helper should be able to create/delete multiple namespaces

11

Some tests need to manage multiple namespaces to create resources in. Currently the `NamespacedTest` helper and associated `NamespacedTestBody` signatures are as follows: ``` type NamespacedTestBody func(string) func (f *Framework) NamespacedTest(namespace...

HTTPProxy: Validate literal host rewrites are valid hostnames

4

We should validate that when using https://github.com/projectcontour/contour/blob/bbccbffc5be5f9ccf9c42b2153ae4339a55b2b88/apis/projectcontour/v1/httpproxy.go#L1270-L1274 and rewriting the Host header with a literal hostname (not dynamic hostname that comes from another header) that is is a valid value...

Add conformance report for Contour v1.28.2

2

**What type of PR is this?** /area conformance **What this PR does / why we need it**: Adds conformance report and implementation page update for Contour v1.28.2 **Which issue(s) this...

GEP-1762 needs clarification on long Gateway names > 63 characters

15

**What happened**: Prior to GEP-1762, Contour's Gateway provisioner has been adding a label to resources to denote which Gateway "owns" it: `projectcontour.io/owning-gateway-name` set to the Gateway name. While reviewing https://github.com/kubernetes-sigs/gateway-api/pull/2582...

Update prometheus guide to a working example and add Envoy metrics port

4

Updates docs page guide instructions and sample manifests Also removes prometheus annotations from Contour/Envoy and adds the metrics port to Envoy DaemonSet/Deployment so that Prometheus PodMonitors can reach the metrics...

Failed test error: ``` [FAILED] Error Trace: /home/runner/work/contour/contour/test/e2e/httpproxy/global_external_auth_test.go:197 /home/runner/go/pkg/mod/github.com/onsi/ginkgo/[email protected]/internal/node.go:472 /home/runner/go/pkg/mod/github.com/onsi/ginkgo/[email protected]/internal/suite.go:889 /opt/hostedtoolcache/go/1.22.1/x64/src/runtime/asm_amd64.s:1695 Error: Should be true Test: HTTPProxy global external auth with namespace: httpproxy-global-ext-auth-tls with global external auth service global external...

Have Gateway Provisioner give Envoy Service Port protocol hints by setting AppProtocol field

1

**Please describe the problem you have** For integrations of Gateway API and Contour like knative's [`net-gateway-api`](https://github.com/knative-extensions/net-gateway-api), there is no great way right now to know which Envoy Service ports are...