envoyproxy/gateway
View on GitHubquestion: Plan for supporting Gateway API Experimental ExternalAuth filter?
Open
#8,422 opened on Mar 6, 2026
help wanted
Repository metrics
- Stars
- (2,871 stars)
- PR merge metrics
- (PR metrics pending)
Description
Description:
Is there a plan to implement the HTTPRoute ExternalAuth filter (Gateway API experimental channel)?
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: auth
spec:
parentRefs:
- name: eg
rules:
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Login
backendRefs:
- name: auth-svc
port: 8080
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Logout
filters:
- type: ExternalAuth
externalAuth:
protocol: HTTP
backendRef:
name: auth-svc
port: 8080
http:
path: /api.auth.v1.Session/Validate
backendRefs:
- name: auth-svc
port: 8080
[optional Relevant Links:] https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute