envoyproxy/gateway

question: Plan for supporting Gateway API Experimental ExternalAuth filter?

Open

#8,422 创建于 2026年3月6日

在 GitHub 查看
 (1 评论) (0 反应) (0 负责人)Go (802 fork)auto 404
help wanted

仓库指标

Star
 (2,871 star)
PR 合并指标
 (PR 指标待抓取)

描述

Description: Is there a plan to implement the HTTPRoute ExternalAuth filter (Gateway API experimental channel)?

apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: auth
spec:
  parentRefs:
  - name: eg
  rules:
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Login
    backendRefs:
      - name: auth-svc
        port: 8080
  - matches:
    - path:
        type: Exact
        value: /api.auth.v1.Authn/Logout
    filters:
      - type: ExternalAuth
        externalAuth:
          protocol: HTTP
          backendRef:
            name: auth-svc
            port: 8080
          http:
            path: /api.auth.v1.Session/Validate
    backendRefs:
      - name: auth-svc
        port: 8080

[optional Relevant Links:] https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute

贡献者指南