MADR for Inbound policies

kumahq / kuma

🐻 The multi-zone service mesh for containers, Kubernetes and VMs. Built with Envoy. CNCF Sandbox Project.

https://kuma.io/install

Apache License 2.0

3.65k stars 333 forks source link

Open lobkovilya opened 1 hour ago

lobkovilya commented 1 hour ago

Today applying policies on the inbound is possible only with "from" section of the policies, but it has some limitations:

impossible to configure inbound ports differently on the same proxy
no support for MeshExternalService
impossible to create and configure routes on the inbounds
selecting a group of client for configuration is always based on a group of proxies (i.e. no support for MeshExternalClient or ServiceAccount)

lobkovilya commented 1 hour ago

xref: