CFP: Support basic-auth/oauth2/mTLS for north-south traffic (GatewayAPI/Ingress)
## Cilium Feature Proposal **Describe the feature you'd like** I'd like to be able to expose my applications with various forms of authentication. For example, I want to expose hubble-relay outside of my cluster. Various authentication mechanisms work better for various situations. Generally all 3 mentioned should be relatively standard APIs for configuration. One thing that would be really nice, is to be able to configure different authentication mechanisms based on different rules. For example, mTLS/client-certs if the request is coming from a certain IP range, and basic-auth/oauth2 if a specific user-agent is set. **(Optional) Describe your proposed solution** I would like these to be expose in GatewayAPI, but Ingress is fine too.
Posted by chancez on Feb 16, 2023, 12:13 AM
Tags
Related issues
- some bike vendor told me that the biggest problem with regular to ebike conversion was that regular bike frames were not strong enough to...
- I think of this as the kiosk economy.
- What a goofy comment.
- There's lots of evidence for positive influences of Caffeine on the body (some negative as well), especially the brain.
- Compose support in WSLc
- [RFC] Roadmap to v2.0
Raise real-world problems, find people facing the same issue, and discuss solutions.2,500 issues0 comments
support (Other)
some bike vendor told me that the biggest problem with regular to ebike conversion was that regular bike frames were not strong enough to...
I think of this as the kiosk economy.
What a goofy comment.
There's lots of evidence for positive influences of Caffeine on the body (some negative as well), especially the brain.
Compose support in WSLc
[RFC] Roadmap to v2.0
[Feature]: Add TurboQuant Support for KV Cache Quantization
Support for AGENTS.md and .agents/skills/, the community has been asking since August 2025
CFP: Support basic-auth/oauth2/mTLS for north-south traffic (GatewayAPI/Ingress)
## Cilium Feature Proposal **Describe the feature you'd like** I'd like to be able to expose my applications with various forms of authentication. For example, I want to expose hubble-relay outside of my cluster. Various authentication mechanisms work better for various situations. Generally all 3 mentioned should be relatively standard APIs for configuration. One thing that would be really nice, is to be able to configure different authentication mechanisms based on different rules. For example, mTLS/client-certs if the request is coming from a certain IP range, and basic-auth/oauth2 if a specific user-agent is set. **(Optional) Describe your proposed solution** I would like these to be expose in GatewayAPI, but Ingress is fine too.
Comments (0)
No comments yet. Start the discussion.