Gateway API: implement client cert verification [experimental]

projectcontour / contour

Contour is a Kubernetes ingress controller using Envoy proxy.

https://projectcontour.io

Apache License 2.0

3.71k stars 672 forks source link

Gateway API: implement client cert verification [experimental] #6428

Open skriss opened 4 months ago

skriss commented 4 months ago

https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.1.0

https://gateway-api.sigs.k8s.io/reference/spec/#gateway.networking.k8s.io/v1.FrontendTLSValidation

jdoylei commented 3 months ago

This feature would be great. We have apps that are stuck moving to Gateway API because they need frontend client certificates and rely on Contour's HTTPProxy.spec.virtualhost.tls.clientValidation field. We'd be able to make these apps consistent with others if they could switch to Gateway and Gateway.spec.tls.frontendValidation.