Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable TLS listeners on Gateways #64

Open
1 task
mlavacca opened this issue Mar 26, 2024 · 1 comment · May be fixed by #112
Open
1 task

Enable TLS listeners on Gateways #64

mlavacca opened this issue Mar 26, 2024 · 1 comment · May be fixed by #112
Assignees
@mlavacca
Labels
area/gateway-api

Comments

@mlavacca
Copy link
Member

Problem Statement

KGO 1.2 allows HTTP and HTTPS listeners only. KIC already supports TLSRoutes, therefore we need to enable users to create Gateways with TLS listeners with Passthrough TLS mode enabled.

Proposed Solution

  • In case a Gateway with TLS listener is created, it is accepted (only in case the TLS mode is Passthrough)
  • Enable the GatewayAlpha FG in the ControlPlane
  • The DataPlane gets the STREAM_LISTEN env var set accordingly
  • The DataPlane Ingress service gets configured to expose the TLS port of the DataPlane

Acceptance Criteria

  • As a user, I can create a Gateway with a TLS listener and use TLSRoutes to configure the DataPlane
@mlavacca mlavacca added this to the KGO v1.3.x milestone Mar 26, 2024
@mlavacca mlavacca changed the title Allow TLS listeners on Gateways Enable TLS listeners on Gateways and TLSRoutes Mar 26, 2024
@mlavacca mlavacca changed the title Enable TLS listeners on Gateways and TLSRoutes Enable TLS listeners on Gateways Mar 26, 2024
@mlavacca mlavacca mentioned this issue Mar 26, 2024
Open
@mlavacca mlavacca self-assigned this Apr 22, 2024
@mlavacca mlavacca linked a pull request Apr 22, 2024 that will close this issue
Draft
1 task
@pmalek pmalek mentioned this issue May 8, 2024
Open
1 task
@mlavacca
Copy link
Member Author

Removing from milestone as we decided not to implement TLS listeners and TLSRoutes in 1.3

@mlavacca mlavacca removed this from the KGO v1.3.x milestone May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mlavacca mlavacca

Labels
area/gateway-api
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat: TLS listeners supported Kong/gateway-operator
1 participant
@mlavacca