Comments (3)
Hey @iamyeka! Thanks for opening your first issue. We appreciate your contribution and welcome you to our community! We are glad to have you here and to have your input on Contour. You can also join us on our mailing list and in our channel in the Kubernetes Slack Workspace
from contour.
The desire was to not use privileged ports within the Envoy container so it didn't have to run as root/with any elevated privileges. Host networking is not currently supported via the Gateway provisioner, you would need to use custom YAML for that.
from contour.
If i need to use privileged ports like 80&443 within the Envoy container and gateway api at the same time, how could i be able to do that?
From the codes below, it looks like the port will be added 8000 as long as the gateway instance exists. I've done the some tests and can confirm that.
func (p *ListenerProcessor) Run(dag *DAG, cache *KubernetesCache) {
if cache.gateway != nil {
dag.HasDynamicListeners = true
for _, port := range gatewayapi.ValidateListeners(cache.gateway.Spec.Listeners).Ports {
address := p.HTTPAddress
if port.Protocol == "https" {
address = p.HTTPSAddress
}
dag.Listeners[port.Name] = &Listener{
Name: port.Name,
Protocol: port.Protocol,
Address: address,
Port: int(port.ContainerPort),
EnableWebsockets: true,
vhostsByName: map[string]*VirtualHost{},
svhostsByName: map[string]*SecureVirtualHost{},
}
}
} else {
dag.Listeners[HTTP_LISTENER_NAME] = &Listener{
Name: HTTP_LISTENER_NAME,
Protocol: "http",
Address: p.HTTPAddress,
Port: intOrDefault(p.HTTPPort, 8080),
RouteConfigName: "ingress_http",
vhostsByName: map[string]*VirtualHost{},
}
dag.Listeners[HTTPS_LISTENER_NAME] = &Listener{
Name: HTTPS_LISTENER_NAME,
Protocol: "https",
Address: p.HTTPSAddress,
Port: intOrDefault(p.HTTPSPort, 8443),
RouteConfigName: "https",
FallbackCertRouteConfigName: "ingress_fallbackcert",
svhostsByName: map[string]*SecureVirtualHost{},
}
}
}
from contour.
Related Issues (20)
- Cant rewrite ingress address
- TCPRoute delete not propagated HOT 1
- Global ext auth e2e test flake
- allow arbitrary Envoy runtime settings to be configurable
- Request to path returning 404 for trailing dot domain HOT 4
- ipAllowPolicy with source: Remote and x-forwarded-for IP address does not work
- update to Envoy 1.30
- Gateway updates is causing downtime? HOT 11
- What hashing strategy does Contour use in load balancing? HOT 1
- Using TLS termination with JWTs HOT 2
- Migrate HTTPProxy to HTTPRoute HOT 3
- Allow NodeIp targets for ExtensionServices HOT 3
- additional docs on HTTP/2 connection reuse issue + workarounds
- Gateway API: 0s timeout should disable the timeout HOT 2
- Add option to configure leader election HOT 3
- Cipher configuration issue
- A potential risk in contour that could lead to takeover of the cluster HOT 2
- Bug Alert in Logs HOT 6
- Bump Gateway API support to v1.1.0
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from contour.