Include Lua filter in cilium envoy for service-mesh
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 190
- Forks
- 99
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 30
Description
I am in the process of testing port to cilium service mesh and CNI from AWS CNI and Istio. One of the requirements is to enable security headers for all responses out of a cluster. It has been achieved in Istio using an approach similar to https://gist.github.com/kabute/ef8e7198031c8a99212a629a139ac83f .
I am trying to achieve the same on cilium cluster mesh using CiliumEnvoyConfig and noticed that the Lua filter is not activated. Would it be possible to please activate it? I think this will simplify the migration from Istio to Cilium .
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the CiliumEnvoyConfig usage described in the issue and compare the requested behavior with the linked Istio Lua-filter example. Done means the Lua filter is available for Cilium service-mesh configuration and can support adding security headers to cluster responses.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100