envoyproxy/gateway

question: Plan for supporting Gateway API Experimental ExternalAuth filter?

Ouverte

#8 422 ouverte le 6 mars 2026

 (1 commentaire) (0 réaction) (0 personne assignée)Go (802 forks)auto 404
help wanted

Métriques du dépôt

Stars
 (2 871 étoiles)
Métriques de merge PR
 (Merge moyen 14j 16h) (153 PRs mergées en 30 j)

Description

Description: Is there a plan to implement the HTTPRoute ExternalAuth filter (Gateway API experimental channel)?

apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: auth
spec:
  parentRefs:
  - name: eg
  rules:
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Login
    backendRefs:
      - name: auth-svc
        port: 8080
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Logout
    filters:
      - type: ExternalAuth
        externalAuth:
          protocol: HTTP
          backendRef:
            name: auth-svc
            port: 8080
          http:
            path: /api.auth.v1.Session/Validate
    backendRefs:
      - name: auth-svc
        port: 8080

[optional Relevant Links:] https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute

Guide contributeur