envoyproxy / envoyproxy/gateway

Question: Any reason ClientTrafficPolicy cannot be applied to multiple http (non https) listeners on the same port?

Open
#6,943 3 comments 1 reaction 0 assignees View on GitHub
stale triage
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

**Description**:
>Describe the issue.

We use `mergeGateways` setup with multiple `Gateway` objects.

Each Gateway listens on port HTTP 80, and has a different hostname.

We apply `ClientTrafficPolicy` to all Gateways using label selector to add `earlyRequestHeaders` for all requests.

Obviously when we try to do so, our ClientTrafficPolicy fails validation with this message:

```
ClientTrafficPolicy is being applied to multiple http (non https) listeners
(envoy-gateway-system/eg2/http-2) on the same port, which is not allowed
```

Is there any particular reson to not allow this? If not, then perhaps we can fix this in an upcoming release?

I see there was a PR [ #6279 fix: Allow Policy to attach to multiple http listeners](https://github.com/envoyproxy/gateway/pull/2967) but it clearly didn't apply to this scenario.

There is also a somewhat related discussion here: [Allow ClientTrafficPolicy to affect all listeners of a merged Gateway #3972](https://github.com/envoyproxy/gateway/issues/3972)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.