Skip to content

feat(chart): add httpRoute.filters for arbitrary filter injection#2

Merged
tamcore merged 1 commit intomasterfrom
feat/httproute-filters
Feb 27, 2026
Merged

feat(chart): add httpRoute.filters for arbitrary filter injection#2
tamcore merged 1 commit intomasterfrom
feat/httproute-filters

Conversation

@tamcore
Copy link
Copy Markdown
Owner

@tamcore tamcore commented Feb 27, 2026

Summary

  • Adds httpRoute.filters list to values.yaml (default: [])
  • When non-empty, filters are injected into the HTTPRoute rule alongside the backendRef
  • Generic: works with any Gateway API implementation — not tied to NGF or any specific filter type

Use cases

NGF IP allowlist (whitelist-source-range equivalent):

httpRoute:
  enabled: true
  parentRefs:
    - name: nginx-gateway
      namespace: nginx-gateway
  hostnames:
    - stelloauth.example.com
  filters:
    - type: ExtensionRef
      extensionRef:
        group: gateway.nginx.org
        kind: SnippetsFilter
        name: stelloauth-ip-allowlist

External auth (ExtAuth):

filters:
  - type: ExtensionRef
    extensionRef:
      group: gateway.envoyproxy.io
      kind: HTTPRouteFilter
      name: stelloauth-extauth

Test plan

  • httpRoute.filters: [] (default) — renders HTTPRoute with only backendRefs, no filters key
  • httpRoute.filters with an ExtensionRef — renders with filters: block in the rule

Allows injecting implementation-specific HTTPRoute filters (e.g. an NGF
SnippetsFilter for IP allowlisting, or an ExtAuth filter for external
authentication) without forking the chart. When httpRoute.filters is
non-empty, the filters are added to the single HTTPRoute rule alongside
the existing backendRef.
@tamcore tamcore merged commit dc3c3a0 into master Feb 27, 2026
1 check passed
@tamcore tamcore deleted the feat/httproute-filters branch February 27, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant