From 0ff1ee76ceaa2988049b7310a7049877199404a4 Mon Sep 17 00:00:00 2001 From: Philipp Born Date: Fri, 27 Feb 2026 17:50:54 +0100 Subject: [PATCH] feat(chart): add httpRoute.filters for arbitrary filter injection Allows injecting implementation-specific HTTPRoute filters (e.g. an NGF SnippetsFilter for IP allowlisting, or an ExtAuth filter for external authentication) without forking the chart. When httpRoute.filters is non-empty, the filters are added to the single HTTPRoute rule alongside the existing backendRef. --- charts/stelloauth/templates/httproute.yaml | 4 ++++ charts/stelloauth/values.yaml | 9 +++++++++ 2 files changed, 13 insertions(+) diff --git a/charts/stelloauth/templates/httproute.yaml b/charts/stelloauth/templates/httproute.yaml index f481998..931ccc2 100644 --- a/charts/stelloauth/templates/httproute.yaml +++ b/charts/stelloauth/templates/httproute.yaml @@ -16,4 +16,8 @@ spec: - backendRefs: - name: {{ include "stelloauth.fullname" . }} port: {{ .Values.service.port }} + {{- if .Values.httpRoute.filters }} + filters: + {{- toYaml .Values.httpRoute.filters | nindent 8 }} + {{- end }} {{- end }} diff --git a/charts/stelloauth/values.yaml b/charts/stelloauth/values.yaml index a60a0b0..11205e0 100644 --- a/charts/stelloauth/values.yaml +++ b/charts/stelloauth/values.yaml @@ -47,6 +47,15 @@ httpRoute: # namespace: nginx-gateway hostnames: [] # - stelloauth.example.com + # Optional list of additional filters to inject into the HTTPRoute rule. + # Useful for implementation-specific features, e.g. an NGF SnippetsFilter + # for IP allowlisting or an ExtAuth filter for external authentication. + filters: [] + # - type: ExtensionRef + # extensionRef: + # group: gateway.nginx.org + # kind: SnippetsFilter + # name: stelloauth-ip-allowlist resources: {}