Provide a way to use a Forward Proxy with an Egress
When a kubernetes cluster is behind a forward proxy, mesh egress pods within the cluster have no ability to further proxy the requests for ExternalServices through that forward proxy. Curl has the -x option which tunnels through a proxy. We would ...
Ash Crago
about 1 year ago
in Mesh
0
Under consideration
Ability to define helm chart hooks inside Kong Mesh Helm Charts
Looking for the functionality to define Helm Chart Hooks similar to how we do for "(`kuma.controlPlane.podAnnotations`)." on the control plane. https://github.com/Kong/kong-mesh/blob/master/deployments/charts/kong-mesh/values.yaml#L33 https://helm...
Luke Najdek
about 2 years ago
in Mesh
0
Under consideration
Feature to allow headers with an underscore in mesh gateway
Requesting an option to relax the configuration of mesh gateway. As shown here: https://github.com/kumahq/kuma/blob/1.8.0/pkg/plugins/runtime/gateway/filter_chain_generator.go#L284 all the mesh gateway is configured to reject all requests containi...
Gerard Forns
about 2 years ago
in Mesh
0
Future consideration
Allow configuring minimum TLS version and cipher suites in the MeshGateway policy
Requesting a feature to configure the minimum TLS version and cipher suites in the MeshGateway policy This configuration is supported in envoy (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto), b...
Allow configuring minimum TLS version and cipher suites in the ExternalService policy
Requesting a feature to configure the minimum TLS version and cipher suites in the ExternalService policy This configuration is supported in envoy (https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto...
The current HTTP API documentation does not indicate the schema of the request/response bodies for different requests. We can't be sure from the examples what are valid values for different fields, what's required and what's optional, etc. -> R...
Carl Draper
over 2 years ago
in Mesh
0
Future consideration
Is it would be possible to have a OpenID Connect policy in Kuma / Mesh as it is done in Kong Gateway.- As several exchanges between services won't go through the gateway each service will need to validate the token it will receive. If the mesh cou...
Gerard Forns
over 2 years ago
in Mesh
0
Future consideration
Is it possible to have a Proxy Caching policy in Kuma / Mesh as it is done in Kong Gateway (proxy-cache-advanced), especially for applying to external services?
Gerard Forns
over 2 years ago
in Mesh
0
Future consideration
We configured a TrafficTrace policy to trace to Jaeger (zipkin type) for observability. Can we populate the peer.service in the generated spans using the "kuma.io/service" Some info from peer.service: https://github.com/open-telemetry/opentelemetr...
Guest
over 1 year ago
in Mesh
0
Future consideration