envoyproxy/gateway

question: Plan for supporting Gateway API Experimental ExternalAuth filter?

Open

#8.422 aberto em 6 de mar. de 2026

Ver no GitHub
 (1 comment) (0 reactions) (0 assignees)Go (802 forks)auto 404
help wanted

Métricas do repositório

Stars
 (2.871 stars)
Métricas de merge de PR
 (Métricas PR pendentes)

Description

Description: Is there a plan to implement the HTTPRoute ExternalAuth filter (Gateway API experimental channel)?

apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: auth
spec:
  parentRefs:
  - name: eg
  rules:
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Login
    backendRefs:
      - name: auth-svc
        port: 8080
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Logout
    filters:
      - type: ExternalAuth
        externalAuth:
          protocol: HTTP
          backendRef:
            name: auth-svc
            port: 8080
          http:
            path: /api.auth.v1.Session/Validate
    backendRefs:
      - name: auth-svc
        port: 8080

[optional Relevant Links:] https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute

Guia do colaborador