envoyproxy / envoyproxy/gateway

question: Plan for supporting Gateway API Experimental ExternalAuth filter?

Open
#8,422 1 comment 0 reactions 0 assignees View on GitHub
help wanted
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:
Is there a plan to implement the HTTPRoute `ExternalAuth` filter (Gateway API experimental channel)?

```yaml
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: auth
spec:
parentRefs:
- name: eg
rules:
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Login
backendRefs:
- name: auth-svc
port: 8080
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Logout
filters:
- type: ExternalAuth
externalAuth:
protocol: HTTP
backendRef:
name: auth-svc
port: 8080
http:
path: /api.auth.v1.Session/Validate
backendRefs:
- name: auth-svc
port: 8080
```

[optional *Relevant Links*:]
https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.