envoyproxy / envoyproxy/gateway
question: Plan for supporting Gateway API Experimental ExternalAuth filter?
- Dominant language
- Go
- Stars
- 3k
- Forks
- 864
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 140
Description
*Description*:
Is there a plan to implement the HTTPRoute `ExternalAuth` filter (Gateway API experimental channel)?
```yaml
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: auth
spec:
parentRefs:
- name: eg
rules:
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Login
backendRefs:
- name: auth-svc
port: 8080
- matches:
- path:
type: Exact
value: /api.auth.v1.Authn/Logout
filters:
- type: ExternalAuth
externalAuth:
protocol: HTTP
backendRef:
name: auth-svc
port: 8080
http:
path: /api.auth.v1.Session/Validate
backendRefs:
- name: auth-svc
port: 8080
```
[optional *Relevant Links*:]
https://kubernetes.io/blog/2025/11/06/gateway-api-v1-4/#enabling-external-auth-for-httproute
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.