projectcontour / projectcontour/contour
Supporting BackendTLS for TLSRoute
- Dominant language
- HTML
- Stars
- 3.9k
- Forks
- 728
- Avg merge
- 17h 41m
- Merged PRs (30d)
- 36
Description
**Please describe the problem you have**
From #6119, BackendTLSPolicy only supported HTTPRoute. We would like to expand this to support TLSRoute, when TLS is terminated at the gateway and is not using passthrough.
Notably, TLSRoute is not addressed in [GEP-1897](https://gateway-api.sigs.k8s.io/geps/gep-1897/#longer-term-goals), because the two route types have not graduated to beta at the time of writing.
Contributor guide
Research direction
Start by tracing the existing BackendTLSPolicy support for HTTPRoute and the TLSRoute handling in Contour; use GEP-1897 to understand the stated scope. Done means BackendTLSPolicy also works for TLSRoute when TLS terminates at the gateway rather than using passthrough, with the relevant behavior covered by tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100