envoyproxy/gateway

question: Plan for supporting Gateway API Experimental ExternalAuth filter?

Open

#8,422 opened on 2026年3月6日

GitHub で見る
 (1 comment) (0 reactions) (0 assignees)Go (802 forks)auto 404
help wanted

Repository metrics

Stars
 (2,871 stars)
PR merge metrics
 (PR metrics pending)

説明

Description: Is there a plan to implement the HTTPRoute ExternalAuth filter (Gateway API experimental channel)?

apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: auth
spec:
  parentRefs:
  - name: eg
  rules:
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Login
    backendRefs:
      - name: auth-svc
        port: 8080
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Logout
    filters:
      - type: ExternalAuth
        externalAuth:
          protocol: HTTP
          backendRef:
            name: auth-svc
            port: 8080
          http:
            path: /api.auth.v1.Session/Validate
    backendRefs:
      - name: auth-svc
        port: 8080

[optional Relevant Links:] https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute

コントリビューターガイド