Gateway on Envoy Gateway

Install with Helm

Install with Kubernetes YAML

Mon, 01 Jan 0001 00:00:00 +0000

In this guide, we’ll walk you through installing Envoy Gateway in your Kubernetes cluster.

The manual install process does not allow for as much control over configuration as the Helm install method, so if you need more control over your Envoy Gateway installation, it is recommended that you use helm.

Before you begin

Envoy Gateway is designed to run in Kubernetes for production. The most essential requirements are:

Install with Kubernetes YAML

Mon, 01 Jan 0001 00:00:00 +0000

In this guide, we’ll walk you through installing Envoy Gateway in your Kubernetes cluster.

Before you begin

Envoy Gateway is designed to run in Kubernetes for production. The most essential requirements are:

Install with Kubernetes YAML

Mon, 01 Jan 0001 00:00:00 +0000

In this guide, we’ll walk you through installing Envoy Gateway in your Kubernetes cluster.

Before you begin

Envoy Gateway is designed to run in Kubernetes for production. The most essential requirements are:

Install with Kubernetes YAML

Mon, 01 Jan 0001 00:00:00 +0000

This task walks you through installing Envoy Gateway in your Kubernetes cluster.

Before you begin

Envoy Gateway is designed to run in Kubernetes for production. The most essential requirements are:

Kubernetes 1.27 or later
The kubectl command-line tool

Compatibility Matrix

Refer to the Version Compatibility Matrix to learn more.

Install with YAML

Envoy Gateway is typically deployed to Kubernetes from the command line. If you don’t have Kubernetes, you should use kind to create one.

Install with Kubernetes YAML

Mon, 01 Jan 0001 00:00:00 +0000

This task walks you through installing Envoy Gateway in your Kubernetes cluster.

Before you begin

Envoy Gateway is designed to run in Kubernetes for production. The most essential requirements are:

Kubernetes 1.28 or later
The kubectl command-line tool

Compatibility Matrix

Refer to the Version Compatibility Matrix to learn more.

Install with YAML

Envoy Gateway is typically deployed to Kubernetes from the command line. If you don’t have Kubernetes, you should use kind to create one.

Install with Kubernetes YAML

Install egctl

Mon, 01 Jan 0001 00:00:00 +0000

What is egctl?

egctl is a command line tool to provide additional functionality for Envoy Gateway users.

This task shows how to install the egctl CLI. egctl can be installed either from source, or from pre-built binary releases.

From The Envoy Gateway Project

From The Envoy Gateway Project

Control Plane Authentication using custom certs

Mon, 01 Jan 0001 00:00:00 +0000

To add a feature to the roadmap, create an issue or join a community meeting to discuss your use case. If your feature is accepted, a maintainer will assign your issue to a release milestone and update this document accordingly.
To help with an existing roadmap item, comment on or assign yourself to the associated issue.
If a roadmap item doesn’t have an issue, create one, assign yourself to the issue, and reference this document. A maintainer will submit a pull request to add the feature to the roadmap. Note: The feature should be discussed in an issue or a community meeting before implementing it.

If you don’t know where to start contributing, help is needed to reduce technical, automation, and documentation debt. Look for issues with the help wanted label to get started.

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

ALSEnvoyProxyAccessLog defines the gRPC Access Log Service (ALS) sink. The service must implement the Envoy gRPC Access Log Service streaming API: https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/accesslog/v3/als.proto Access log format information is passed in the form of gRPC metadata when the stream is established.

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Goals

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This “quick start” will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Note: In case your Kubernetes cluster does not have a LoadBalancer implementation, we recommend installing one so the Gateway resource has an Address associated with it. We recommend using MetalLB.

Installation

Install the Gateway API CRDs and Envoy Gateway:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This “quick start” will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This guide will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v0.2.0/install.yaml

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v0.2.0/quickstart.yaml

Testing the Configuration

Get the name of the Envoy service created the by the example Gateway:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This guide will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v0.3.0/install.yaml

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v0.3.0/quickstart.yaml

Note: quickstart.yaml defines that Envoy Gateway will listen for traffic on port 80 on its globally-routable IP address, to make it easy to use browsers to test Envoy Gateway. When Envoy Gateway sees that its Listener is using a privileged port (<1024), it will map this internally to an unprivileged port, so that Envoy Gateway doesn’t need additional privileges. It’s important to be aware of this mapping, since you may need to take it into consideration when debugging.

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This guide will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.4.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Install the GatewayClass, Gateway, HTTPRoute and example app:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This guide will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.5.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Install the GatewayClass, Gateway, HTTPRoute and example app:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This guide will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Note: In case your Kubernetes cluster, does not have a LoadBalancer implementation, we recommend installing one so the Gateway resource has an Address associated with it. We recommend using MetalLB.

Installation

Install the Gateway API CRDs and Envoy Gateway:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This “quick start” will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

Quickstart

Mon, 01 Jan 0001 00:00:00 +0000

This “quick start” will help you get started with Envoy Gateway in a few simple steps.

Prerequisites

A Kubernetes cluster.

Note: Refer to the Compatibility Matrix for supported Kubernetes versions.

Installation

Install the Gateway API CRDs and Envoy Gateway:

The Gateway API

Mon, 01 Jan 0001 00:00:00 +0000

Before You Begin

You may want to be familiar with:

Overview

Overview

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.24
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway. Below are the other make directives

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.20
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway.

Building

Run make build to build all the binaries.
Run make build BINS="envoy-gateway" to build the Envoy Gateway binary.
Run make build BINS="egctl" to build the egctl binary.

Note: The binaries get generated in the bin/$OS/$ARCH directory, for example, bin/linux/amd64/.

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.20
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway.

Building

Run make build to build all the binaries.
Run make build BINS="envoy-gateway" to build the Envoy Gateway binary.
Run make build BINS="egctl" to build the egctl binary.

Note: The binaries get generated in the bin/$OS/$ARCH directory, for example, bin/linux/amd64/.

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.20
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway.

Building

Run make build to build all the binaries.
Run make build BINS="envoy-gateway" to build the Envoy Gateway binary.
Run make build BINS="egctl" to build the egctl binary.

Note: The binaries get generated in the bin/$OS/$ARCH directory, for example, bin/linux/amd64/.

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.20
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway.

Building

Run make build to build all the binaries.
Run make build BINS="envoy-gateway" to build the Envoy Gateway binary.
Run make build BINS="egctl" to build the egctl binary.

Note: The binaries get generated in the bin/$OS/$ARCH directory, for example, bin/linux/amd64/.

Developer Guide

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway is built using a make-based build system. Our CI is based on Github Actions using workflows.

Prerequisites

go

Version: 1.20
Installation Guide: https://go.dev/doc/install

make

Recommended Version: 4.0 or later
Installation Guide: https://www.gnu.org/software/make

docker

Optional when you want to build a Docker image or run make inside Docker.
Recommended Version: 20.10.16
Installation Guide: https://docs.docker.com/engine/install

python3

Need a python3 program
Must have a functioning venv module; this is part of the standard library, but some distributions (such as Debian and Ubuntu) replace it with a stub and require you to install a python3-venv package separately.

Quickstart

Run make help to see all the available targets to build, test and run Envoy Gateway.

Building

Run make build to build all the binaries.
Run make build BINS="envoy-gateway" to build the Envoy Gateway binary.
Run make build BINS="egctl" to build the egctl binary.

Note: The binaries get generated in the bin/$OS/$ARCH directory, for example, bin/linux/amd64/.

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

System Design

Mon, 01 Jan 0001 00:00:00 +0000

Goals

Define the system components needed to satisfy the requirements of Envoy Gateway.

Non-Goals

Create a detailed design and interface specification for each system component.

Terminology

Control Plane- A collection of inter-related software components for providing application gateway and routing functionality. The control plane is implemented by Envoy Gateway and provides services for managing the data plane. These services are detailed in the components section.
Data Plane- Provides intelligent application-level traffic routing and is implemented as one or more Envoy proxies.

Architecture

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

An API gateway is a centralized entry point for managing, securing, and routing requests to backend services. It handles cross-cutting concerns, like authentication, rate limiting, and protocol translation, so individual services don’t have to. Decoupling clients from internal systems simplifies scaling, enforces consistency, and reduces redundancy.

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

Under the hood, Envoy Proxy is a powerful, production-grade proxy that supports many of the capabilities you’d expect from an API Gateway, like traffic routing, retries, TLS termination, observability, and more. However, configuring Envoy directly can be complex and verbose.

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

API Gateways

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use an API Gateway to:

Avoid duplicating logic across microservices.
Create a central point of control for access, monitoring, and traffic rules.
Expose internal services to the public internet.
Provide protocol support for HTTP, gRPC, or TLS.
Enforce policies and see traffic metrics at the edge.

API Gateways in relation to Envoy Gateway

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Contributing

Mon, 01 Jan 0001 00:00:00 +0000

We welcome contributions from the community. Please carefully review the project goals and following guidelines to streamline your contributions.

Communication

Before starting work on a major feature, please contact us via GitHub or Slack. We will ensure no one else is working on it and ask you to open a GitHub issue.
A “major feature” is defined as any change that is > 100 LOC altered (not including tests), or changes any user-facing behavior. We will use the GitHub issue to discuss the feature and come to agreement. This is to prevent your time being wasted, as well as ours. The GitHub review process for major features is also important so that affiliations with commit access can come to agreement on the design. If it’s appropriate to write a design document, the document must be hosted either in the GitHub issue, or linked to from the issue and hosted in a world-readable location.
Small patches and bug fixes don’t need prior communication.

Inclusivity

The Envoy Gateway community has an explicit goal to be inclusive to all. As such, all PRs must adhere to the following guidelines for all code, APIs, and documentation:

Watching Components Design

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Gateway API Translator Design

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Gateway API Translator Design

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Gateway API Translator Design

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Gateway API Translator Design

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Gateway API Translator Design

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API translates external resources, e.g. GatewayClass, from the configured Provider to the Intermediate Representation (IR).

Assumptions

Initially target core conformance features only, to be followed by extended conformance features.

Inputs and Outputs

The main inputs to the Gateway API translator are:

GatewayClass, Gateway, HTTPRoute, TLSRoute, Service, ReferenceGrant, Namespace, and Secret resources.

Note: ReferenceGrant is not fully implemented as of v0.2.

The outputs of the Gateway API translator are:

Proxy

Mon, 01 Jan 0001 00:00:00 +0000

Proxy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

v1.5.8

Mon, 26 Jan 2026 00:00:00 +0000

Date: January 26, 2026

Breaking changes

Security updates

Bump golang to v1.24.12.

New features

Bug fixes

Fixed an issue where unrecoverable discovery errors on checking optional CRDs caused the EG pod to reconcile incomplete resources.
Fixed an issue where ExtProc is discarded when failOpen is enabled for Wasm.
Fixed an issue where sensitive data was exposed in control plane config dump.
Fixed a server run race condition that could cause goroutine leaks during config reloading.
Fixed an issue where wrong cluster type was used with mixed FQDN backend and service backend refs.
Fixed an issue where routes with match-all rules were incorrectly merged with specific match rules.

Performance improvements

Deprecations

Other changes

v1.6.3

Mon, 26 Jan 2026 00:00:00 +0000

Date: January 26, 2026

Breaking changes

Security updates

Bump golang to v1.25.6.
Bump Envoy proxy version to v1.36.4. Includes security patches for CVE-2025-0913. Ref: https://github.com/envoyproxy/envoy/releases/tag/v1.36.4.
Bump Envoy rate limit version to 3fb70258.

New features

Bug fixes

Fixed an issue where unrecoverable discovery errors on checking optional CRDs caused the EG pod to reconcile incomplete resources.
Fixed an issue where ExtProc is discarded when failOpen is enabled for Wasm.
Fixed an issue where sensitive data was exposed in control plane config dump.
Fixed an issue where auto-detect upstream protocol breaks with multiple backends(HTTP + HTTPS).
Fixed a server run race condition that could cause goroutine leaks during config reloading.
Fix to set default namespace for TLS secret object reference to owner namespace.
Fixed an issue where wrong cluster type was used with mixed FQDN backend and service backend refs.
Fixed an issue where routes with match-all rules were incorrectly merged with specific match rules.

Performance improvements

Deprecations

Other changes

v1.5.7

Mon, 12 Jan 2026 00:00:00 +0000

Date: January 12, 2026

Breaking changes

Security updates

Bump envoy to v1.35.8.
Fixed CVE-2026-22771: arbitrary code execution through EnvoyExtensionPolicy Lua scripts.

New features

Bug fixes

Fixed an issue where observedGeneration is missing from the EnvoyPatchPolicy status.
Fixed ExternalTrafficPolicy not being applied to Envoy Service when ServiceType is NodePort.
Fixed an issue where BackendTrafficPolicy does not validate maximum value of requestBuffer limit.
Fixed an issue where port forward not working on OpenTelemetry collector pods.
Fixed a potential goroutine leak when config reloads.

Performance improvements

Deprecations

Other changes

v1.6.2

Mon, 12 Jan 2026 00:00:00 +0000

Date: January 12, 2026

Breaking changes

Security updates

Fixed CVE-2026-22771: arbitrary code execution through EnvoyExtensionPolicy Lua scripts.

New features

Change benchmark report to JSON format.

Bug fixes

Fixed an issue where BackendTrafficPolicy does not validate maximum value of requestBuffer limit.
Fixed an issue where observedGeneration is missing from the EnvoyPatchPolicy status.
Fixed a nil pointer error when applying BackendTrafficPolicy to HTTPRoutes with no backendRefs.
Fixed ExternalTrafficPolicy not being applied to Envoy Service when ServiceType is NodePort.
Fixed CRL ref not processed by gateway controller.

Performance improvements

Deprecations

Other changes

v1.5.6

Fri, 05 Dec 2025 00:00:00 +0000

Date: December 05, 2025

Breaking changes

Security updates

Patches for EnvoyProxy CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.35.7

New features

Bug fixes

Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer’s well-known URL.
Fixed an issue with gateway ownership tracking when running multiple controllers.
Fixed default namespace handling when namespace is unset.
Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
Fixed gateway status to treat too many addresses as programmed.

Performance improvements

Deprecations

Other changes

Added disk space reclamation script for CI runners to prevent out-of-disk errors.
Bumped golang.org/x/crypto dependency.

v1.6.1

Fri, 05 Dec 2025 00:00:00 +0000

Date: December 05, 2025

Breaking changes

Security updates

Bumped Envoy to 1.36.3 to incorporate security patches, CVE-2025-64527, CVE-2025-66220, and CVE-2025-64763. Ref https://github.com/envoyproxy/envoy/releases/tag/v1.36.3

New features

Bug fixes

Fixed xDS snapshot cache to clear snapshots when streams close, preventing proxies from receiving stale configuration after reconnection.
Fixed configured OIDC authorization endpoint being overridden by discovered endpoints from issuer’s well-known URL.
Fixed an issue with gateway ownership tracking when running multiple controllers.
Fixed default namespace handling when namespace is unset.
Fixed a bug where HTTPRoutes referencing gateways with multiple different GatewayClasses would have incomplete status conditions.
Fixed gateway status to treat too many addresses as programmed.
Fix 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.

Performance improvements

Deprecations

Other changes

Bumped Gateway API to v1.4.1.
Bumped golang.org/x/crypto dependency.
Added disk space reclamation script for CI runners to prevent out-of-disk errors.

v1.4.6

Sat, 15 Nov 2025 00:00:00 +0000

Date: November 15, 2025

Bug fixes

Fixed 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.

Other changes

Fixed an memory leak issue where `watchable.Maps`` never closed when shutting down the provider.
Coalesced updates to reduce intermediate updates.

v1.5.5

Fri, 14 Nov 2025 00:00:00 +0000

Date: November 14, 2025

Breaking changes

Security updates

New features

Bug fixes

Fixed 500 errors caused by partially invalid BackendRefs; traffic is now correctly routed between valid backends and 500 responses according to their configured weights.
Fixed certificate SAN overlap detection in gateway listeners.
Fixed panic with request mirror with GRPCRoute.
Fixed listener port limit typo 65353 -> 65535.
Fixed validating EnvoyGateway configuration during a config update.
Fixed missing JWT provider configuration when JWT authentication is configured on multiple HTTP listeners sharing the same port.
Fixed IP family not set in UDPListener.
Fixed issue where didn’t watch change for the ca cert in the Backend.

Performance improvements

Fixed an memory leak issue where `watchable.Maps`` never closed when shutting down the provider.
Coalesced updates to reduce intermediate updates.

Deprecations

Other changes

Announcing Envoy Gateway v1.6

Mon, 10 Nov 2025 00:00:00 +0000

We are excited to announce the release of Envoy Gateway v1.6.0.

This release delivers new capabilities across traffic management, security, extensibility, observability, and infrastructure — along with key bug fixes and performance improvements. We extend our thanks to the entire Envoy Gateway community for your ongoing contributions, feedback, and collaboration. Your efforts make each release possible.

Release Notes	Docs	Compatibility Matrix	Install

What’s New

Envoy Gateway v1.6.0 introduces powerful enhancements, resolves critical issues, and continues to improve the platform’s reliability and performance.

v1.6.0

Mon, 10 Nov 2025 00:00:00 +0000

Date: November 10, 2025

Breaking changes

ALPNProtocols in EnvoyProxy Backend TLS settings now default to [h2, http/1.1] when not explicitly configured.
When a Backend resource specifies TLS settings and SNI is not specified or a BackendTLSPolicy is not attached to it, the upstream TLS SNI value is now automatically determined from the HTTP Host header.
When a Backend resource specifies TLS settings and SNI is not specified or a BackendTLSPolicy is not attached to it, upstream certificate validation now requires DNS SAN to match the SNI value that is sent.
When a MirrorPolicy is used, the shadow host suffix is no longer automatically appended to the mirrored cluster name.
When running egctl experimental collect, SDS (Secret Discovery Service) data is no longer included by default. To include SDS data, enable it by adding the --sds true flag.
When setting consecutiveGatewayFailure, enforcingConsecutiveGatewayFailure is automatically set to 100.
When the OIDC provider issues a refresh token, Envoy Gateway will now automatically use it to refresh access and ID tokens when they expire. To maintain the previous behavior (not using refresh tokens), set refreshToken to false in the OIDC authentication configuration. See SecurityPolicy spec for details.

Security updates

New features

Added support for mutual TLS (mTLS) configuration for ExtensionServer to enable secure communication between Envoy Gateway and extension servers.
Added support for configuring RetryPolicy in gRPC External Authentication callouts via SecurityPolicy backend settings fields, allowing fine-grained control over retry behavior for authentication requests.
Added support for configuring late response headers in ClientTrafficPolicy, enabling headers to be added to responses after the response body has started.
Added support for configuring maximum connection duration, stream duration, and maximum requests per connection in ClientTrafficPolicy to provide better control over connection lifecycle and resource usage.
Added PercentageEnabled configuration option to ZoneAware load balancing configuration, enabling gradual rollout of zone-aware routing.
Added cacheDuration configuration for remoteJWKS (Remote JSON Web Key Set) in SecurityPolicy, allowing customization of JWKS caching behavior for improved performance.
Added support for DisableTokenEncryption in OIDC authentication to disable encryption of ID and access tokens stored in cookies, providing flexibility for environments with alternative security mechanisms.
Added support for OCSP (Online Certificate Status Protocol) stapling in listener TLS certificates, improving TLS handshake performance and enabling real-time certificate revocation checking.
Added support for per-backend client TLS settings in Backend resources, enabling configuration of client certificates, ciphers, TLS versions, and ALPN protocols on a per-backend basis for granular TLS control.
Added support for returning HTTP 503 Service Unavailable responses when no valid backend endpoints exist, improving observability and user experience during service outages.
Added support for CSRFTokenTTL configuration in OIDC authentication to customize the lifetime of CSRF tokens used during the OAuth2 authorization code flow, enhancing security and session management.
Added support for HTTP/2 stream timeout configuration, providing control over stream-level timeouts in HTTP/2 connections.
Added support for Envoy PreconnectPolicy in BackendTrafficPolicy, enabling proactive connection establishment to backend services for reduced latency.
Added support for binaryData in ConfigMap referenced by HTTPRouteFilter for direct response, allowing binary content to be served directly from ConfigMaps.
Added support for PodDisruptionBudget (PDB) configuration for the rate limit service, improving availability during cluster maintenance operations.
Added automatic generation of TLS certificates in host mode when they do not exist, simplifying deployment and reducing manual certificate management overhead.
Added automatic implicit support for OPTIONS HTTP method when HTTPRoute CORS filter is used, simplifying CORS configuration for preflight requests.
Added support for rate limiting based on HTTP path and method in BackendTrafficPolicy, enabling more granular rate limiting policies.
Added support for Certificate Revocation Lists (CRLs) in ClientTrafficPolicy, enabling certificate revocation checking for enhanced security.
Added support for both Global and Local rate limiting in BackendTrafficPolicy simultaneously.
Added support for applying SecurityPolicy Authorization to TCPRoute (client IP / allow-deny list for TCP traffic).

Bug fixes

Fixed %ROUTE_KIND% operator to be properly lower-cased when used by clusterStatName in EnvoyProxy API, ensuring consistent metric naming conventions.
Fixed maxAcceptPerSocketEvent configuration being ignored in ClientTrafficPolicy, now correctly applying the configured value to limit connections accepted per socket event.
Fixed an issue where topologyInjectorDisabled was enabled but the local cluster was not defined, causing configuration inconsistencies.
Fixed log formatting of improper key-value pairs to prevent DPANIC errors in controller-runtime logger, improving stability and log readability.
Fixed handling of context-related transient errors to prevent incorrect state reconciliation and unintended behavior during API server communication interruptions.
Fixed an issue where the controller could not read EnvoyProxy resources that are attached only to GatewayClass, improving resource discovery and reconciliation.
Fixed adding metadata for proxyService and OIDC xDS clusters, ensuring proper metadata propagation for service discovery and authentication.
Fixed handling of millisecond-level retry durations and token TTLs in OIDC authentication, ensuring precise time-based configuration values are correctly processed.
Fixed indexer and controller crashing when BackendTrafficPolicy has a redirect response override, improving stability during policy configuration updates.
Fixed Lua validator log level to be suppressed by default, reducing log noise and improving performance during Lua script validation.
Fixed ProxyTopologyInjector cache sync race condition that caused injection failures, ensuring reliable topology injection during concurrent operations.
Fixed validation for gRPC routes with extension reference filters, ensuring proper validation and processing of gRPC routes with extension integrations.
Fixed service account token handling in GatewayNamespaceMode to use SDS (Secret Discovery Service) for properly refreshing expired tokens, ensuring continuous service availability.
Fixed handling of regex meta characters in prefix match replace for URL rewrite, ensuring special characters are correctly processed during URL transformations.
Disabled the default emission of x-envoy-ratelimited headers from the rate limit filter to reduce header bloat. Re-enable with the enableEnvoyHeaders setting in ClientTrafficPolicy if needed.
Fixed a nil pointer panic in the XDS translator when building API key authentication filter configurations with sanitize enabled and no forwardClientIDHeader set, improving stability and error handling.
Truncated Gateway API status condition messages to stay within Kubernetes limits and prevent update failures, ensuring reliable status updates for large message payloads.
Fixed an issue in EnvoyPatchPolicy where it didn’t match the target Gateway or GatewayClass due to an incorrect name reference, ensuring proper policy application.
Fixed certificate SAN (Subject Alternative Name) overlap detection in gateway listeners, improving TLS certificate validation and error reporting.
Fixed description and translation behavior for PreserveXRequestID configuration, ensuring consistent request ID preservation across HTTP requests.
Fixed race condition in proxy context map used in host mode, preventing concurrent access issues and ensuring reliable proxy context management.
Fixed Listener port limit typo 65353 -> 65535.
Fixed issue where reloading invalid envoy gateway configuration.
Fixed missing JWT provider configuration when JWT authentication is configured on multiple HTTP listeners sharing the same port.
Fixed issue where header modifier doesn’t permit multiple values with commas.

Performance improvements

Set LastTransitionTime in status conditions at subscriber instead of publisher of watcher to prevent applying unnecessary status updates.
Coalesce updates from watcher layer to skip applying intermediate states.

Deprecations

Other changes

v1.5.4

Mon, 20 Oct 2025 00:00:00 +0000

Date: October 20, 2025

Breaking changes

Security updates

Bumped Go version to 1.24.9.
Bumped Envoy to 1.35.6.

New features

Bug fixes

Performance improvements

Deprecations

Other changes

v1.4.5

Fri, 17 Oct 2025 00:00:00 +0000

Date: October 15, 2025

Security updates

Bumped golang to 1.24.9 to fix the crypto/x509 reggression.

Bug fixes

Added a check to ensure that per proxy xds snapshot cache references are cleaned up when the connection is closed.
Fixed an issue where use GRPCRoute with RequestMirror cause panic.
Fixed an issue where certificate SAN overlap detection in gateway listeners.
Disabled the default emission of x-envoy-ratelimited headers from the rate limit filter and re-enable with the enableEnvoyHeaders setting in ClientTrafficPolicy.

Other changes

Updated Envoy Proxy to v1.34.10.

From Evaluation to Integration: SAP's Journey with Envoy Gateway

Wed, 15 Oct 2025 00:00:00 +0000

Why Envoy Gateway

Our journey with Envoy Gateway (EG) began in late 2023, when multiple SAP product teams undertook an initiative to modernize and streamline their existing gateway infrastructure, which consists of various 3rd party, open source, and managed solutions running on diverse infrastructure. We decided on Envoy as the data plane and conducted a rigorous control-plane evaluation. Envoy Gateway, then pre-GA (General Availability), emerged as the strategic choice. Selecting Envoy Gateway was not a trivial decision given the number of mature control planes in the market.

v1.5.3

Thu, 09 Oct 2025 00:00:00 +0000

Date: October 9, 2025

Breaking changes

Security updates

Bumped Go version to 1.24.8.

New features

Bug fixes

Fixed a nil pointer panic in the XDS translator when building API key authentication filter configurations with sanitize enabled and no forwardClientIDHeader set.
Truncated Gateway API status condition messages to stay within Kubernetes limits and prevent update failures.
Fixed an issue in EnvoyPatchPolicy where it didn’t match the target Gateway/GatewayClass due to an incorrect name reference.

Performance improvements

Avoided memory build up in follower Envoy Gateway pods, by only subscribing to status and infra messages when they become a leader.

Deprecations

Other changes

v1.5.2

Thu, 02 Oct 2025 00:00:00 +0000

Date: October 2, 2025

Breaking changes

Security updates

Updated distroless image to resolve glibc CVEs.
Bumped Go version to 1.24.7.

New features

Bug fixes

Fixed service account token handling in GatewayNamespaceMode to use SDS for properly refreshing expired token.
Fixed preserve route parent status for multi-parent routes.
Fixed weighted cluster generation in RouteAction when URLRewrite filter is applied.
Fixed handling of regex meta characters in prefix match replace for URL rewrite.
Disabled the default emission of x-envoy-ratelimited headers from the rate limit filter; re-enable with the enableEnvoyHeaders setting in ClientTrafficPolicy.
Fixed race condition when accessing mergeGateways set.

Performance improvements

Optimized memory usage of control plane.

Deprecations

Other changes

v1.4.4

Wed, 17 Sep 2025 00:00:00 +0000

Date: September 17, 2025

Security updates

Updated the Go module package xz to fix CVE-2025-58058.
Updated the distroless image to resolve glibc CVEs.

Bug fixes

Fixed an issue in handling context-related transient errors to prevent incorrect state reconciliation and unintended behavior.
Fixed an issue where the exclusiveMaximum field in the CRD was set incorrectly.
Fixed validation for gRPC routes with extension ref filters.
Fixed an issue where route status had dangling conditions and was not cleaned up.
Added missing patch annotations to the Compression struct for proper Merge.

Other changes

Updated Envoy Proxy to v1.34.7.
Updated Ratelimit tag version to e74a664a.

v1.5.1

Tue, 16 Sep 2025 00:00:00 +0000

Date: September 16, 2025

Breaking changes

Security updates

Updated distroless image to resolve glibc CVEs.
Bumped Go version to 1.24.7.

New features

Bug fixes

Fixed cluster stat name generation to use lowercase names.
Resolved nil pointer dereference in configmap indexer.
Corrected log formatting to avoid DPANIC errors.
Improved context error handling throughout the codebase.
Fixed issues with topology injector and local cluster configuration.
Updated HTTP status code validation maximum from 600 to 599.
Enhanced proxy protocol filter placement as first listener filter.

Performance improvements

Optimized pod cache operations.
Reduced DeepCopy operations in gateway-api layer.
Removed reflection from RouteContext to reduce memory allocations.

Deprecations

Other changes

Updated Envoy Proxy to v1.35.3
Updated Envoy RateLimit to e74a664a
Updated BackendTrafficPolicy compression configuration validation.
Improved image validation regex for container images.
Enhanced targetRef selection for target selectors.

v1.4.3

Mon, 11 Aug 2025 00:00:00 +0000

Date: August 11, 2025

Bug fixes

Fixed issue where HTTPRoutes with sessionPersistence caused the Envoy listeners to drain.
Fixed issue where EnvoyPatchPolicy CEL Validations around FullDuplexStreamed and FailOpen.
Fixed issue where http filter was not being added for HTTP3 listeners.
Fixed issue where http filters unstable order caused the Envoy listeners to drain.
Fixed issue where missing secret in EnvoyProxy caused deployment not to be created.

Other changes

Updated Envoy Proxy to v1.34.4.

Announcing Envoy Gateway v1.5

Fri, 08 Aug 2025 00:00:00 +0000

We are excited to announce the release of Envoy Gateway v1.5.0.

Release Notes	Docs	Compatibility Matrix	Install

What’s New

Envoy Gateway v1.5.0 introduces powerful enhancements, resolves critical issues, and lays the groundwork for upcoming changes in v1.6.

v1.5.0

Fri, 08 Aug 2025 00:00:00 +0000

Date: August 8, 2025

Breaking changes

Use gateway name as proxy fleet name for gateway namespace mode.
Endpoints that are absent from service discovery are removed even if their active health checks succeed.
The xDS listener name are now renamed based on its listening port and protocol, instead of the Gateway name and section name. This breaks existing EnvoyPatchPolicies and ExtensionManagers as they depend on the old naming scheme. This change is guarded by the XDSNameSchemeV2 runtime flag. This flag is disabled by default in v1.5, and it will be enabled in v1.10. We recommend users to migrate their EnvoyPatchPolicies and ExtensionManagers to use the new listener names before v1.10. Visit migration guide to view the new naming scheme.
Removed xds-translator and xds-server values from the runner label in watchable_subscribe_total. Use xds instead.
Accessloggers of type ALS now have http2 enabled on the cluster by default.

Security updates

Disable automountServiceAccountToken for proxy and ratelimit deployments and serviceAccounts.

New features

Added support for setting initialJitter in the BackendTrafficPolicy active health check.
Add an option to OIDC authentication to bypass it and defer to JWT when the request contains an “Authorization: Bearer …” header.
Added support for configuring Subject Alternative Names (SANs) for upstream TLS validation via BackendTLSPolicy.validation.subjectAltNames.
Added support for local rate limit header.
Added XDS metadata for clusters and endpoints from xRoutes and referenced backend resources (Backend, Service, ServiceImport).
Added support for setting ownerreference to infra resources when enable gateway namespace mode.
Added support for configuring hostname in active HTTP healthchecks.
Added support for configuring maxConnectionsToAcceptPerSocketEvent in listener via ClientTrafficPolicy.
Added support for setting GatewayClass ownerreference to infra resources when all cases except gateway namespace mode.
Added support for setting previous priorities retry predicate.
Added support for using extension server policies to in PostTranslateModify hook.
Added support for configuring cluster stat name for HTTPRoute and GRPCRoute in EnvoyProxy CRD.
Added support for configuring SameSite attribute for Oauth cookies for OIDC authentication.
Added support for configuring the cache sync period for K8s provider.
Added support for fallback to first key when load ca certificate from Secret or ConfigMap.
Added support for configuring user provided name to generated HorizontalPodAutoscaler and PodDisruptionBudget resources.
Added support for client certificate validation (SPKI, hash, SAN) in ClientTrafficPolicy.
Added support for OIDC RP initialized logout. If the end session endpoint is explicitly specified or discovered from the issuer’s well-known url, the end session endpoint will be invoked when the user logs out.
Added support for specifying deployment annotations through the helm chart.
Added support for customizing the name of the ServiceAccount used by the Proxy.
Added support for custom backendRefs via extension server using PostClusterModify hook.
Added support for SecurityPolicy and EnvoyExtensionPolicy to target ServiceImport via BackendRefs.
Added metric watchable_publish_total counting store events in watchable message queues.
Added support for forwarding client ID header and sanitizing API keys for API Key authentication in SecurityPolicy.
Added support for using ClusterTrustBundle as CA.
Added support for using Secret as a source of the OIDC client ID.
Added support for listeners and routes in PostTranslateModifyHook extension hook.
Added admin console support with web UI for the Envoy Gateway admin server.
Added support for configuring Zone Aware Routing via BackendTrafficPolicy.
Added support for endpoint override policy based on Header.
Added rate limiting support for month and year periods.
Introduce validation strictness levels for Lua scripts in EnvoyExtensionPolicies.
Extends BackendTLSSettings support to all Backend types.
Enhanced route rule support in SecurityPolicy target.

Bug fixes

Fixed issue where WASM cache init failure caused routes with WASM-less EnvoyExtensionPolicies to have 500 direct responses.
Fixed issue which UDP listeners were not created in the Envoy proxy config when Gateway was created.
Keep ALPN configuration for listeners with overlapping certificates when ALPN is explicitly set in ClientTrafficPolicy.
Fixed issue that switch on wrong SubjectAltNameType enum value in BackendTLSPolicy.
Fixed issue that BackendTLSPolicy should not reference ConfigMap or Secret across namespace.
Fixed bug in certificate SANs overlap detection in listeners.
Fixed issue where EnvoyExtensionPolicy ExtProc body processing mode is set to FullDuplexStreamed, but trailers were not sent.
Fixed validation issue where EnvoyExtensionPolicy ExtProc failOpen is true, and body processing mode FullDuplexStreamed is not rejected.
Add ConfigMap indexers for EnvoyExtensionPolicies to reconcile Lua changes
Fixed issue that default accesslog format not working.
Fixed validation errors when the rateLimit url for Redis in the EnvoyGateway API includes multiple comma separated hosts.
Fixes addresses in status of DualStack NodePort Gateways.
Fixed issue that not able to override the prometheus annotation in EnvoyProxy CRD.
Skipped ExtProc, Wasm, and ExtAuth when they are configured FailOpen and the configuration is invalid, e.g. missing backendRefs or invalid port.
Fixed issue that failed to update policy status when there are more than 16 ancestors.
Fixed race condition in watchable.Map Snapshot subscription.
Fixed issue where HTTPRoutes with sessionPersistence caused the Envoy listeners to drain.
Fixed deployment creation blocking when EnvoyProxy secret is missing.
Increased earlyRequestHeaders limit from 16 to 64.

Performance improvements

Reduced xDS cluster DNS lookups for improved performance.
Combined xds-translator and xds-server runners into xds runner reducing memory by upto 25%
Removed custom Equal functions for watchable types by pre sorting Gateway API resources in the provider layer

Deprecations

Other changes

v1.4.2

Fri, 04 Jul 2025 00:00:00 +0000

Date: July 4, 2025

Security Updates

Disabled automountServiceAccountToken for proxy and ratelimit deployments and serviceAccounts.

Bug Fixes

Fixed issue where EnvoyExtensionPolicy ExtProc body processing mode was set to FullDuplexStreamed, but trailers were not sent.
Fixed validation issue where EnvoyExtensionPolicy ExtProc with failOpen set to true did not reject the FullDuplexStreamed body processing mode.
Fixed issue where EnvoyPatchPolicy could not replace the telemetry cluster.
Added validation for section names in Gateway listeners.
Added ConfigMap indexers for EnvoyExtensionPolicies to reconcile Lua changes.
Fixed issue where the default access log format was not working.
Fixed bug where backendRequestTimeout was incorrectly set when retries were enabled.
Fixed certificate SANs overlap detection in listeners.
Fixed issue where telemetry did not work when using host port.
Fixed bug where BackendTLSPolicy incorrectly referenced ConfigMaps or Secrets across namespaces.

v1.4.1

Wed, 04 Jun 2025 00:00:00 +0000

Date: June 4, 2025

New Features

Added support for configuring Subject Alternative Names (SANs) for upstream TLS validation via BackendTLSPolicy.validation.subjectAltNames.
Added support for setting ownerreference to infra resources when Gateway Namespace mode is enabled.

Bug Fixes

Fixed OverlappingTLSConfig condition for merged Gateways.
Fixed an issue with shared rules in the rate limit translator when clientSelector is not specified.
Fixed an issue with handling integer values in zone annotations.
Fixed an issue where routes without WASM in their EnvoyExtensionPolicies returned HTTP 500 responses when WASM cache initialization failed.
Fixed an issue where UDP listeners were not created in the Envoy proxy’s xDS configuration.
Fixed broken rate limit merging for BackendTrafficPolicy when the Gateway target defines rate limiting but the Route target does not.
Fixed an issue that preserves ALPN configuration for listeners with overlapping certificates when ALPN is explicitly set in ClientTrafficPolicy.
Replaced static UID with a dynamic UID for the global rate limit Grafana dashboard.

Other changes

Fixed backend TLS e2e test.
Bumped go version to 1.24.3.

Announcing Envoy Gateway v1.4

Tue, 13 May 2025 00:00:00 +0000

We are thrilled to announce the arrival of Envoy Gateway v1.4.0.

This release represents a significant achievement, and we extend our heartfelt gratitude to the entire Envoy Gateway community for their contributions, dedication, and support. Your collaborative efforts have been instrumental in reaching this pivotal release.

Thank you for being an integral part of this journey. We are excited to see how Envoy Gateway v1.4.0 will empower your operations and look forward to continuing our work together to drive the future of Cloud Native API Gateway.

v1.4.0

Tue, 13 May 2025 00:00:00 +0000

Breaking changes

Use a dedicated listener port(19003) for envoy proxy readiness
Uses the envoy JSON formatter for the default access log instead of text formatter.
Envoy Gateway will skip xDS snapshot updates in case of errors during xDS translation.
When Extension Manager is configured to Fail Open, translation errors are logged and suppressed.
When Extension Manager is configured to not Fail Open, Envoy Gateway will no longer replace affected resources. Instead, xDS snapshot update would be skipped.

New Features

Added support for the extension server in standalone mode.
Added support for the DynamicResolver backend type, which can route traffic to any backend service based on the request’s hostname.
Added support for installing CRDs through the gateway-crds-helm chart.
Added support for the offline Kubernetes controller and enabled its use with the file provider.
Added support for configuring maxUnavailable in KubernetesPodDisruptionBudgetSpec.
Added support for percentage-based request mirroring.
Allowed matchExpressions in TargetSelector.
Added a defaulter for Gateway API resources loaded from file to set default values.
Added support for defining Lua EnvoyExtensionPolicies.
Added RequestID field in ClientTrafficPolicy.HeaderSettings to configure Envoy X-Request-ID behavior.
Added support for HorizontalPodAutoscaler for Envoy Gateway in the Helm chart.
Added support for distinct header and distinct source CIDR-based local rate limiting.
Added support for forwarding the authenticated username to the backend via a configurable header in BasicAuth.
Added support for HTTP method and header-based authorization in SecurityPolicy.
Added support for Zone Aware Routing.
Added support for BackendTLSPolicy targeting ServiceImport.
Added support for the kubernetes.io/h2c application protocol in ServiceImport.
Added support for per-host circuit breaker thresholds.
Added support for injecting a credential from a Kubernetes Secret into a request header using the HTTPRouteFilter filter.
Added support for egctl WebSocket in addition to SPDY.
Added a configuration option in the Helm chart to set the TrafficDistribution field in the Envoy Gateway Service.
Added support for setting the log level to trace for the Envoy proxy.
Added support for global imageRegistry and imagePullSecrets in the Helm chart.
Added support for using a local JWKS in an inline string or in a ConfigMap to validate JWT tokens in SecurityPolicy.
Added support for logging the status of resources in standalone mode.
Added support for per-route tracing in BackendTrafficPolicy.
Added support for configuring retry settings for Extension Service hooks in the Envoy Gateway config.
Added support for request buffering using the Envoy Buffer filter.
Added support for merge type in BackendTrafficPolicy.
Added support for the OverlappingTLSConfig condition in Gateway status. This condition is set if there are overlapping hostnames or certificates between listeners. The ALPN protocol is set to HTTP/1.1 for overlapping listeners to avoid HTTP/2 connection coalescing.
Added support for running Envoy infrastructure proxies in the Gateway namespace. Please note that this is currently an experimental feature and not recommended for production use.
Added support for Shared Global RateLimiting buckets.
Added support for fuzz testing the codebase.
Added Backend API Support for Telemetry backends in Envoy Proxy
Added support for FullDuplexedStreamed mode in Ext Proc

Bug Fixes

Fixed traffic splitting when filters are attached to the backendRef.
Added support for Secret and ConfigMap parsing in standalone mode.
Bypassed overload manager for stats and ready listeners.
Fixed translation of backendSettings for external authorization.
Fixed an issue where the stats compressor was not working.
Added support for BackendTLSPolicy and EnvoyExtensionPolicy parsing in standalone mode.
Re-triggered reconciliation when a backendRef of type ServiceImport is updated or when EndpointSlice resources for a ServiceImport are updated.
Fixed missing error logs and returns in the Kubernetes Reconcile method when a GatewayClass is not accepted.
Allowed empty text field for OpenTelemetry sink when using JSON format.
Fixed the SamplingFraction implementation within the Tracing API.
Fixed Kubernetes resources not being deleted when a custom name was used.
Prevented essential resources like Namespace from being treated as missing when loading from file.
Avoided setting retriable status codes to 503 when RetryOn is configured in BackendTrafficPolicy.
Fixed reconciliation logic to continue processing all GatewayClasses even after an error with one.
Fixed an issue where a ReferenceGrant from a SecurityPolicy to a referenced remoteJWKS backend was not respected.
Added additional newline validation for header values.
Added validation to prevent duplicated API keys in API Key Auth.
Fixed HTTPRoute precedence by correctly considering header and query match types.
Ensured the TLS inspector filter is only added to TCP listeners (not UDP/QUIC) when HTTP/3 is enabled via ClientTrafficPolicy.
Fix reconciling mirror backendRef endpoints once they’ve changed.

Performance Improvements

Added a cache for the Wasm OCI image permission checks and check the pullSecrets against the OCI image registry in a background goroutine.

Deprecations

Deprecated the PreserveXRequestID field in ClientTrafficPolicy.Spec.Headers. Use RequestID instead.

Other Changes

Updated gateway-api to v1.3.0.

v1.3.3

Thu, 08 May 2025 00:00:00 +0000

Date: May 8, 2025

Bug fixes

Fix issue where ReferenceGrant from SecurityPolicy to the referenced RemoteJWKS backend was not respected.
Fix HTTPRoute precedence by correctly considering header and query match types.
Fix to return an error if direct response size exceeds the limit.
Fix to avoid adding the TLS inspector filter to QUIC listeners.
Fix to continue processing remaining GatewayClasses after encountering an error.
Add validation for header values.

Other changes

Bumped envoy to v1.33.3.
Bumped ratelimit to 3e085e5b.

v1.2.8

Tue, 25 Mar 2025 00:00:00 +0000

Date: March 25, 2025

Security updates

Fixed vulnerability CVE-2025-30157, where local replies were incorrectly sent to the ext_proc server.
Included ratelimit security fixes related to the golang net/http package.

Bug fixes

Added support for BackendTLSPolicy and EnvoyExtensionPolicy parsing in Standalone mode.
Fixed endpoint updates when mirrored backend Pod IPs change.
Fix not logging an error and returning it in the K8s Reconcile method when a GatewayClass is not accepted.
Fixed validation of host header in RequestHeaderModifier filter.
Fixed an OpenTelemetry access log sink failure caused by an ‘otel.Text is nil’ error.

Performance improvements

Added a cache for the Wasm OCI image permission checks and check the pullSecrets against the OCI image registry in a background goroutine.

Other changes

Bumped envoy to v1.32.4.
Bumped ratelimit to 0141a24f.

v1.3.2

Mon, 24 Mar 2025 00:00:00 +0000

Date: March 24, 2025

Bug fixes

Added support for BackendTLSPolicy and EnvoyExtensionPolicy parsing in Standalone mode.
Fixed updates of endpoints when mirrored backend Pod IPs are changed.
Fix not logging an error and returning it in the K8s Reconcile method when a GatewayClass is not accepted.
Fix allowing empty text field for opentelemetry sink when using JSON format.
Fixed validation of host header in RequestHeaderModifier filter.
Retrigger reconciliation when backendRef of type ServiceImport is updated or when EndpointSlice(s) for a ServiceImport are updated.

Performance improvements

Added a cache for the Wasm OCI image permission checks and check the pullSecrets against the OCI image registry in
a background goroutine.

Other changes

Bumped envoy to v1.33.1.
Bumped ratelimit to 0141a24f.

v1.2.7

Thu, 06 Mar 2025 00:00:00 +0000

Date: March 06, 2025

Security updates

Fixed CVE-2025-25294: log injection vulnerability in Envoy Gateway when using default access log.

Bug fixes

Fixed translating of backendSettings for extAuth.
Fixed allowing weights to be zero on endpoints for backendRefs in TCPRoute and UDPRoute.
Fixed validation of all xDS resources before sending them to the Envoy fleet.
Added support for Secret and ConfigMap parsing in Standalone mode.

Other changes

Bumped the version of the ratelimit image to ae4cee11.

v1.3.1

Tue, 04 Mar 2025 00:00:00 +0000

Date: March 4, 2025

Breaking changes

Use the envoy JSON formatter for the default access log instead of text formatter.

Security updates

Fixed CVE-2025-25294: log injection vulnerability in Envoy Gateway when using default access log.

New features

Add defaulter for gateway-api resources loading from file to be able to set default values.

Bug fixes

Added support for Secret and ConfigMap parsing in Standalone mode.
Fix translating backendSettings for extAuth.
Fix allowing weights to be zero on endpoints for backendRefs in TCPRoute and UDPRoute.
Fix validation of all xDS resources.
Fix support for empty values in fields with default values in Standalone.

Other changes

Bump golang to 1.23.6.
Bump k8s-io to 1.32.1.
Bump ratelimit to ae4cee11.
Bump golang.org/x/oauth2 to v0.27.0.
Bump golang.org/x/crypto to v0.35.0.

Announcing Envoy Gateway v1.3

Thu, 30 Jan 2025 00:00:00 +0000

We are thrilled to announce the arrival of Envoy Gateway v1.3.0.

Thank you for being an integral part of this journey. We are excited to see how Envoy Gateway v1.3.0 will empower your operations and look forward to continuing our work together to drive the future of Cloud Native API Gateway.

v1.3.0

Thu, 30 Jan 2025 00:00:00 +0000

Date: January 30, 2025

Breaking changes

The Container ports field of the gateway instance has been removed, which will cause the gateway Pod to be rebuilt when upgrading the version.
ClientTrafficPolicy previously treated an empty TLS ALPNProtocols list as being undefined and applied Envoy Gateway defaults. An empty TLS ALPNProtocols list is now treated as user-defined disablement of the TLS ALPN extension.
Outlier detection (passive health check) is now disabled by default. refer to https://gateway.envoyproxy.io/docs/api/extension_types/#backendtrafficpolicy for working with passive health checks.
Envoy Gateway treats errors in calls to an extension service as fail-closed by default. Any error returned from the extension server will replace the affected resource with an “Internal Server Error” immediate response. The previous behavior can be enabled by setting the failOpen field to true in the extension service configuration.
Envoy Gateway now return a 500 response when a ClientTrafficPolicy translation fails for HTTP/GRPC routes, and forwards client traffic to an empty cluster when a ClientTrafficPolicy translation fails for TCP routes.
Any issues with EnvoyProxy reference in a Gateway will prevent the Envoy fleet from being created or result in the deletion of an existing Envoy fleet.
Envoy Gateway now returns a 500 response when a BackendTLSPolicy translation fails for HTTP/GRPC/TLS routes.

Security updates

Fixed vulnerability which exposed the Envoy admin interface through the prometheus stats endpoint.

New features

Added support for trusted CIDRs in the ClientIPDetectionSettings API.
Added support for sending attributes to external processor in EnvoyExtensionPolicy API.
Added support for patching EnvoyProxy.spec.provider.kubernetes.envoyHpa and EnvoyProxy.spec.provider.kubernetes.envoyPDB.
Added support for defining rateLimitHpa in EnvoyGateway API.
Added support for preserving the user defined HTTPRoute match order in EnvoyProxy API.
Added support for response compression in the BackendTrafficPolicy API.
Added support for cost specifier in the rate limit API.
Added support for specifying dynamic metadata namespaces that External Processing services can access read from and write to in EnvoyExtensionPolicy API.
Added support for API Key Authentication in the SecurityPolicy API.
Continue using and drain endpoints during their graceful termination, as indicated by their respective EndpointConditions.
Added support for GEP-1731 (HTTPRoute Retries).
Added support for routing to Backend resources in the GRPCRoute, TCPRoute and UDPRoute APIs.
Added support for configuring Max GRPC message size for the Extension Manager in EnvoyGateway config.
Added support for configuring tracing sampling rate with Fraction.
Added support for dynamic reload of System WellKnownCACertificates in BackendTLSPolicy.
Added support for overriding status code in response overrides ClientTrafficPolicy.
Added support for AllowModeOverride for ext-proc in EnvoyExtensionPolicy.
Added support for configuring remote JWKS settings with BackendCluster in SecurityPolicy.
Added support for sending body to Ext-Auth server in SecurityPolicy.
Added support for Sending attributes to ext-proc in EnvoyExtensionPolicy.
Added support for configuring hostEnvKeys for Wasm extensions in EnvoyExtensionPolicy.
Gateway API Route rule name is propagated to XDS metadata as sectionName.

Bug fixes

Fixed a panic in the provider goroutine when the body in the direct response configuration was nil.
Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes.
Fixed failed to update SecurityPolicy resources with the backendRef field specified.
Fixed xDS translation failed when oidc tokenEndpoint and jwt remoteJWKS are specified in the same SecurityPolicy and using the same hostname.
Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn.
Disabled the retry policy for the JWT provider to reduce requests sent to the JWKS endpoint. Failed async fetches will retry every 1s.
Fixed BackendTLSPolicy not supporting the use of a port name as the sectionName in targetRefs.
Fixed reference grant from EnvoyExtensionPolicy to the referenced ext-proc backend not being respected.
Fixed BackendTrafficPolicy not applying to Gateway Routes when a Route has a Request Timeout defined.
Fixed proxies connected to the secondary Envoy Gateway not receiving xDS configuration.
Fixed traffic splitting not working when some backends were invalid.
Fixed a nil pointer error that occurred when a SecurityPolicy referred to a UDS backend.
Fixed an issue where the Gateway API translator did not use the TLS configuration from the BackendTLSPolicy when connecting to the OIDC provider’s well-known endpoint.
Fixed a validation failure that occurred when multiple HTTPRoutes referred to the same extension filter.
Fixed a nil pointer error caused by accessing the cookie TTL without verifying if it was valid.
Fixed unexpected port number shifting in standalone mode.
Fixed an issue where the shutdown-manager did not respect the security context of the container spec.
Fixed readiness checks failing for single-stack IPv6 Envoy Gateway deployments on dual-stack clusters.
Fixed IPv6 dual-stack support not working as intended.
Fixed the ability to overwrite control plane certs with the certgen command by using a new command arg (-o).
Fixed a panic that occurred following update to the envoy-gateway-config ConfigMap.
Fixed prometheus format conversion of ratelimit metrics for remote address.
Fixed limitations that prevented creation of FQDN Endpoints with a single-character subdomain in Backend.
Fixed issue where SecurityContext of shutdown-manager container was not updated by overriding helm values.
Fixed issue with incorrect IPFamily detection for backends.
Fixed validation of interval values in Retry settings.

Other changes

Bumped Gateway API to v1.2.1.
Use V4_PREFERRED instead of V4_ONLY by default for the cluster’s DnsLookupFamily.
EG Listens on IPv4 by default, but if IPFamily is set to IPv6 or DualStack, it listens on :: and enables ipv4_compat for DualStack.
Modified the base container image to gcr.io/distroless/base-nossl:nonroot.
[SecurityPolicy] Modify the JWT Provider Issuer validation constraint.
Add support for Kubernetes 1.32.x in the test matrix, and remove support for Kubernetes 1.28.x.
Added metrics and dashboards for Envoy Gateway panics in watchables.
Bumped go-control-plane to v0.13.4.
Envoy Gateway now validates all XDS resources are before adding them to the snapshot.
Increased the maximum amount of endpoints to 64 in Backend.
Envoy Gateway would recover from panics in the reconciliation flow.
Bumped Golang to 1.23.3.
Added e2e test for BackendTLSPolicy with System Truststore.
Added e2e test for response code override.
Added e2e test remote JWKS Backend Cluster settings.
Added e2e test for GRPCRoute, TCPRoute and UDPRoute referencing Backend.
Added e2e test for ratelimit cost.
Added e2e test for XFF Trusted CIDRs.
Added e2e test for Compression.
Added e2e test for API Key Auth.
Added e2e test for Ext-Proc Metadata Options.
Added e2e test for Route order preservation.
Added e2e test for OIDC provider with TLS.
Added e2e test for Basic Auth.
Added e2e tests for IPv6.
Added e2e test for Ext-Proc Attributes.
Added docs for using OIDC provider with self-singed certificate.
Added docs for using dual-stack.
Fixed docs for Extension Server RBAC requirements.
Added docs for patching bootstrap config with JSONPatch using EnvoyProxy.
Added docs for standalone mode.
Added docs for OIDC cookieDomain.
Added docs for Response Override.
Added note on CRD upgrades.
Added docs for failover.
Added docs for standalone mode in container.
Updated Observability prerequisite docs.

v1.2.6

Thu, 23 Jan 2025 00:00:00 +0000

Date: January 23, 2025

Security updates

Fixed vulnerability CVE-2025-24030, which exposed the Envoy admin interface via the Prometheus stats endpoint. For more details, refer to GHSA-j777-63hf-hx76.

Bug fixes

Fixed a panic that occurred following update to the envoy-gateway-config ConfigMap.

v1.2.5

Tue, 14 Jan 2025 00:00:00 +0000

Date: January 14, 2025

Bug fixes

Fixed a nil pointer error that occurred when a SecurityPolicy referred to a UDS backend.
Fixed an issue where the Gateway API translator did not use the TLS configuration from the BackendTLSPolicy when connecting to the OIDC provider’s well-known endpoint.
Fixed a validation failure that occurred when multiple HTTPRoutes referred to the same extension filter.
Fixed a nil pointer error caused by accessing the cookie TTL without verifying if it was valid.
Fixed unexpected port number shifting in standalone mode.
Fixed an issue where the shutdown-manager did not respect the security context of the container spec.
Fixed readiness checks failing for single-stack IPv6 Envoy Gateway deployments on dual-stack clusters.
Fixed IPv6 dual-stack support not working as intended.

Other changes

Bumped Envoy to version 1.32.3.

v1.2.4

Fri, 13 Dec 2024 00:00:00 +0000

Date: December 13, 2024

Bug fixes

Fixed BackendTLSPolicy not supporting the use of a port name as the sectionName in targetRefs.
Fixed reference grant from EnvoyExtensionPolicy to the referenced ext-proc backend not being respected.
Fixed BackendTrafficPolicy not applying to Gateway Routes when a Route has a Request Timeout defined.
Fixed proxies connected to the secondary Envoy Gateway not receiving xDS configuration.
Fixed traffic splitting not working when some backends were invalid.

Other changes

Bumped Envoy to version 1.32.2.

v1.1.4

Thu, 12 Dec 2024 00:00:00 +0000

Date: December 12, 2024

Bug fixes

Fixed validate proto messages before converting them to anypb.Any
Fixed BackendTlsPolicy specify multiple targetRefs of the same service, only one will work
Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes
Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn
Fixed reference grant from EnvoyExtensionPolicy to referenced ext-proc backend not respected
Fixed BackendTrafficPolicy not applying to Gateway Route when Route has a Request Timeout defined

Other changes

Bumped Rate Limit to 49af5cca
Bumped golang.org/x/crypto to 0.31.0

v1.2.3

Mon, 02 Dec 2024 00:00:00 +0000

Date: December 2, 2024

Bug fixes

Disabled the retry policy for the JWT provider to reduce requests sent to the JWKS endpoint. Failed async fetches will retry every 1s.
Used a waitGroup instead of an enabled channel in the status updater.

Other changes

EG Listens on IPv4 by default, but if IPFamily is set to IPv6 or DualStack, it listens on :: and enables ipv4_compat for DualStack.
Bumped Gateway API to v1.2.1.

v1.2.2

Thu, 28 Nov 2024 00:00:00 +0000

Date: November 28, 2024

Bug fixes

Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes.
Fixed failed to update SecurityPolicy resources with the backendRef field specified.
Fixed xDS translation failed when oidc tokenEndpoint and jwt remoteJWKS are specified in the same SecurityPolicy and using the same hostname.
Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn.

Other changes

Bump the RateLimit image to 49af5cca.
Always use :: and IPv4Compact enabled on dynamic listeners.
Use V4_PREFERRED instead of V4_ONLY by default for the cluster’s DnsLookupFamily.

v1.2.1

Thu, 07 Nov 2024 00:00:00 +0000

Date: November 7, 2024

Bug fixes

Fixed a panic in the provider goroutine when the body in the direct response configuration was nil.

Announcing Envoy Gateway v1.2

Wed, 06 Nov 2024 00:00:00 +0000

We are thrilled to announce the arrival of Envoy Gateway v1.2.0.

Thank you for being an integral part of this journey. We are excited to see how Envoy Gateway v1.2.0 will empower your operations and look forward to continuing our work together to drive the future of Cloud Native API Gateway.

v1.2.0

Wed, 06 Nov 2024 00:00:00 +0000

Date: November 06, 2024

Breaking Changes

Gateway API GRPCRoute and ReferenceGrant v1alpha2 have been removed
Please refer to the Gateway API v1.2.0 documentation for more information
Removed default CPU limit of the Envoy Gateway deployment, to eliminate CPU throttling
Changed default Envoy shutdown settings: drain strategy has been changed to immediate, default minDrainDuration, drainTimeout and terminationGracePeriodSeconds have been set to 10s, 60s and 360s respectively
Set ignore_health_on_host_removal to true for clusters with static endpoints This was done to speed up removal of static endpoints by the control plane when active health check is configured
Xds and Infra IR logs are logged at Debug level instead of Info level. They will now not be seen by default in Envoy Gateway logs. You can change the logging level to default: debug to view them

New Features

Added support for Gateway-API v1.2.0
Added support for IPv4/IPv6 Dual Stack for EnvoyProxy fleet and BackendRef resources
Added experimental support for EG standalone(host deployment) mode
Added support for JWT claims based Authorization in SecurityPolicy CRD
Added support for Response Override in BackendTrafficPolicy CRD
Added support for RequestTimeout in BackendTrafficPolicy CRD
Added support for inverting header matches for Rate Limit in BackendTrafficPolicy CRD
Added support for client TLS session resumption in ClientTrafficPolicy CRD
Added support for HTTPRouteFilter and path regex rewrite
Added support for host header rewrite in HTTPRouteFilter CRD
Added support for Listener Access Log in EnvoyProxy CRD
Added support for Datadog tracing support in EnvoyProxy CRD
Added support for request response sizes stats in EnvoyProxy CRD
Added support for modifying container SecurityContext for Envoy Gateway deployment in Helm
Added support for wildcard matching for CORS AllowMethods and AllowHeaders settings in SecurityPolicy CRD
Added support for match conditions for access log in EnvoyProxy CRD
Added support for using BackendCluster to represent OIDCProvider
Added support for RecomputeRoute for ExtAuth in SecurityPolicy CRD
Added support for sharing token cookies between multiple domains in SecurityPolicy CRD
Added support for JSONPatches for proxy bootstrap modifications in EnvoyProxy CRD
Added support for Active Passive Failover Backends
Added support for configuring the GRPC Health Checker in the BackendTrafficPolicy CRD
Added support for early request header mutation in the ClientTrafficPolicy CRD
Added support for JsonPath in the EnvoyPatchPolicy CRD
Added support for cluster settings for tracing and access log backends in EnvoyProxy CRD
Added support for cluster settings for non xRoute-generated backend refs
Added support for socket buffer limit field in ClientTrafficPolicy and BackendTrafficPolicy CRD
Added support for http2 upstream settings in BackendTrafficPolicy CRD
Added support for DNS resolution settings in BackendTrafficPolicy CRD
Added support for configuring service annotations in the Envoy Gateway helm chart
Added support for configuring priorityClassName to Envoy Gateway helm chart
Added support for ratelimit metrics monitoring in grafana in the addons helm chart
Added support for default user group and user id for the SecurityContexts in the Envoy Gateway helm chart
Added support for maxUnavailable in the PodDisruptionBudget in the Envoy Gateway helm chart
Added support for configuring NodeSelector in the Envoy Gateway helm chart
Added support for nonce in the OIDC auth flow
Added support for choosing an HTTPRoute’s non-wildcard hostname as the default Host
Added support for returning 500 when EnvoyExtensionTrafficPolicy translation fails
Added support for returning 500 when SecurityPolicy translation fails
Added support for multiple backendRefs for ExtAuth and ExtProc
Added support for session persistence in HTTPRoute rules
Added support for the Backend resource for ExtAuth
Added support for target selectors on Envoy Gateway Extension Server policies
Added support for non-Kubernetes Backends for TLSRoute
Added support for fallback to the Backend API
Added support for reloadable EnvoyGateway configuration
Added support for adding Labels to the Envoy Service
Added support for custom name for ratelimit deployment
Added default SecurityContext for EG components
Added startupProbe to all provisioned containers
Added support for local validations for egctl translate and file provider
Added support for egctl x collect to collect information from the cluster for debugging
Added support for a native prometheus metrics endpoint in the ratelimit server

Bug Fixes

Fixed xDS translation failing when the WASM HTTP code source was configured without an SHA
Fixed unsupported listener protocol types causing errors while updating Gateway status
Fixed unsupported listener protocol types causing errors while updating Gateway status
Fixed invalid sectionName in BackendTLSPolicy for Backend
Fixed Delay in SecurityPolicy change propagation for HTTPRoute when using targetSelectors
Fixed JSONPath not being correctly translated to JSONPatch paths
Fixed allowing an empty slowStart value when using LeastRequest
Fixed updating the HTTPRoute status correctly when the linked Backend resource is invalid
Fixed timeout settings originating from the route being lost when translating the backend traffic policy
Fixed Backend resources not receiving status updates
Fixed active health checks requiring the expectedStatuses field to function correctly
Fixed HTTPHeaderFilter processing not correctly supporting multiple header values
Fixed reconciling multiple ReferenceGrants within the same namespace
Fixed unwanted / appearing in the Path when using Prefix Rewrites
Fixed incorrect gateway being selected as the HTTPRoute parent
Fixed override issues for EnvoyExtensionPolicy
Fixed nil pointer error when translating hash load balancing
Fixed nil pointer if backedtls.minVersion is set but backedtls.maxVersion is not
Fixed empty connection limits causing xDS rejection
Fixed rate limiting not working with both headers and CIDR matches
Fixed EDS not updating when deployments were created after services
Fixed RBAC issue for deleting infrastructure resources
Fixed gateways never reaching ready/programmed status when running Envoy as a Daemonset
Fixed rate limit deployment ignoring pod labels and annotation merges
Fixed the API Server receives unnecessary requests
Fixed egctl experimental translate using an incorrect namespace
Fixed reconciliation not being triggered for Secret updates referenced by a BackendTLSPolicy
Fixed xDS translation failure when WASM HTTP code source was configured without an SHA
Fixed HTTPRoute status displaying only one parent when targeting multiple gateways from different GatewayClasses
Fixed Route with multiple parents having an incorrect namespace in the parentRef status
Fixed BackendTlsPolicy specifying multiple targetRefs for the same service, to work

Performance Improvements

Optimize memory usage by only storing distinct resources
SecurityPolicy translation failures will now cause routes referenced by the policy to return an immediate 500 response
Gateway-API BackendTLSPolicy v1alpha3 is incompatible with previous versions of the CRD
xPolicy targetRefs can no longer specify a namespace, since Gateway-API v1.1.0 uses LocalPolicyTargetReferenceWithSectionName in Policy resources

Other changes

Upgraded Envoy Proxy to v1.32.1
Reduced the amount of configuration logging, and make it line-delimited friendly
Made watching alpha CRDs optional, so that Envoy Gateway can run with older Gateway Api versions
Removed grafana test framework from the addons helm chart
Disabled ALPN for non-HTTP routes
Added statPrefix for HCM and TCPProxy
Enabled GatewayHTTPListenerIsolation conformance test
Enabled GRPC conformance profile
Enabled HTTPRouteBackendRequestHeaderModifier conformance test
Added e2e test for Daemonset mode
Fixed OVS scanner wrong license warnings
Added e2e test for Gateway with EnvoyProxy
Added e2e test for TLS session resumption
Added heap profile into benchmark report
Added e2e test for RecomputeRoute in ExtAuth
Added benchmark memory profiles into report
Fixed flaky gateway_with_conflicted_listener_cannot_be_merged e2e test
Fixed flaky Zipkin Tracing e2e test
Added e2e test for cookie based consistent hash load balancing
Added e2e test for load balancing
Fixed flaky authorization tests
Enabled upgrade test
Fixed flaky basic auth e2e test
Enabled use-client-protocol e2e test
Added performance benchmarking test for 1000 HTTPRoutes
Added e2e test for Datadog tracing
Added e2e tests for ratelimit invert matching headers
Reduced readinessProbe failureThreshold and periodSeconds
Bumped go-control-plane to v0.13.1
Enabled e2e tests for dual stack
Use grafana alloy instead of fluent-bit for e2e tests
Push tags without the v prefix for helm charts to support Flux HelmReleases
Use a stable label selector when creating Envoy Proxy fleet pods

v1.1.3

Fri, 01 Nov 2024 00:00:00 +0000

Date: November 1, 2024

Breaking changes

New features

Bug fixes

Fixed unsupported listener protocol type causing an error while updating Gateway Status
Fixed some status updates were being discarded by the status updater
Fixed error level logging for admin and metrics modules
Fixed Dashboard typos
Fixed Ratelimit Deployment ignoring pod labels and annotation merge
Fixed the API Server receives unnecessary requests
Fixed set invalid Listener.SupportedKinds to empty list
Fixed losing timeout settings that originate from the route when translating the backend traffic policy
Fixed xds translation failure when wasm http code source configured without sha

Performance improvements

Other changes

Bumped Envoy proxy to 1.31.3
Bumped github.com/docker/docker to 27.3.1+incompatible

v1.1.2

Tue, 24 Sep 2024 00:00:00 +0000

Date: September 24, 2024

Translator

Fixed handling of sectionName in BackendTLSPolicy for Backend resource

Infra-manager

Pin Envoy Proxy version to v1.32.2
Change Envoy listener drain strategy from gradual to immediate

Providers

Fixed reconciliation of HTTPRoutes when labels change

v1.1.1

Wed, 11 Sep 2024 00:00:00 +0000

Date: September 11, 2024

Documentation

Bumped Golang version to 1.22.7

Conformance

Enabled GatewayHTTPListenerIsolation test

Testing

Fix download URL of envoy proxy WASM examples used in tests

Translator

Fixed url rewrite to remove trailing slash
Isolate HTTP route tables to listener according to Gateway-API specifications
Fixed identification of ReferenceGrant when multiple ReferenceGrants exist in a namespace
Fixed added header values as a command and space delimited list
Fixed assertion on expected status in active HTTP healthcheck
Fixed rejection of invalid Backends referenced by xRoutes
Fixed support for empty SlowStart configuration when using LeastRequest loadbalancing
Fixed update of status for Backends

Infra-manager

Pin ratelimit version to 26f28d78
Reduce readinessProbe failureThreshold and periodSeconds of proxy
Expose ratelimit statsd

Providers

Fixed error returned when referenced Configmap or Secret is not found
Use component name in Envoy Gateway logs

Announcing Envoy Gateway v1.1

Mon, 22 Jul 2024 00:00:00 +0000

We are thrilled to announce the arrival of Envoy Gateway v1.1.0.

Thank you for being an integral part of this journey. We are excited to see how Envoy Gateway v1.1.0 will empower your operations and look forward to continuing our work together to drive the future of Cloud Native API Gateway.

v1.1.0

Mon, 22 Jul 2024 00:00:00 +0000

Date: July 22, 2024

Documentation

Added Concepts Doc
Added User Guide for Wasm Extension
Added User Guide for patching Envoy Service
Added User Guide for Backend MTLS
Added User Guide for Backend TLS Parameters
Added User Guide for IP Allowlist/Denylist
Added User Guide for Extension Server
Added User Guide for building Wasm image
Added Performance Benchmarking Document
Added User Guide for Zipkin Tracing
Added User Guide for Customizing Ordering of Filters
Added User Guide for External Processing Filter in EnvoyExtensionPolicy
Added User Guide for installation of egctl with brew
Added User Guide for Client Buffer Size Limit
Added User Guide for Client Idle Timeout
Added Chinese translation for release notes, roadmap, installation, development, contribution and several User Guides
Added User Guide for Backend resource
Added GA Blog Post
Added Threat Model
Added Adopters section to docs
Added User Guide and Dashboards for Control Plane and Resource Observability
Added User Guide for Connection Limits in ClientTrafficPolicy
Added User Guide on using Private Key Provider
Added Design Doc for Authorization
Added Design Doc for XDS Metadata
Added Design Doc for Backend resource
Added Design Doc for Control Plane Observability
Added Design Doc for EnvoyExtensionPolicy
Added Design Doc for External Processing in EnvoyExtensionPolicy
Updated Access Logging User Guide to include filtering with CEL Expression
Updated Access Logging User Guide to include Metadata
Updated Development Guide to require Golang 1.22
Updated Quickstart User Guide to fetch GATEWAY_HOST from Gateway resource
Updated Site to reflect GA status
Updated HTTP Redirect User Guide to not set a redirect port or require a BackendRef
Updated Observability User Guides to use gateway-addons-helm
Updated Gateway-API User Guide to reflect support for BackendRef filters
Updated HTTP Timeouts User Guide to highlight default Envoy timeouts
Updated Installation Guide to use server-side apply
Updated Installation Guide to refer to values.yaml docs
Updated BackendTLSPolicy User Guide to GW-API v1.1.0
Updated User Guides to use tabs when applying yaml from file or stdin
Updated OIDC User Guide to use HTTPS redirect URLs
Updated Order of versions in Site
Updated Extensbility User Gudie to use yaml-format patches
Updated Quickstart Guide to include next steps
Updated CRD docs to include enum values
Updated Extensibility User Guide with Envoy Patch Policy examples
Updated structure of docs: rename Guides to Tasks, move Contribution
Updated Support Matrix
Updated egctl x status docs for xRoute and xPolicy
Updated egctl User Guide with Install and Uninstall commands
Updated GRPCRoute docs to use v1 instead of v1alpha2
Fixed Rate Limiting User Guide to use correct CIDR matcher type names
Fixed User Guide for JWT-based routing
Fixed JSON Access Log Example
Use linkinator to detect dead links in docs
Use helm-docs to generate chart docs
Support Not-Implemented-Hide marker in API docs

Installation

Added startupProbe to all provisioned containers to reduce risk of restart
Added new gateway-addons-helm chart for Observability
Added support for global image settings for all images in Envoy Gateway helm chart
Added Support for PodDistruptionBudget for Envoy Gateway
Added Support for TopologySpreadConstraints for Envoy Gateway
Added Support for Tolerations for Envoy Gateway
Added Support for Ratelimit image pull secrets and pull policy
Updated ttlSecondsAfterFinished on certgen job to 30 by default
Updated Envoy Gateway ImagePullPolicy to IfNotPresent released charts
Remove envoy-gateway-metrics-service and merge its contents into envoy-gateway service

API

Added Support for Gateway-API v1.1.0
Added new Backend CRD
Added new EnvoyExtensionPolicy CRD
Added Support for Plural Target Refs and Target Selectors in xPolicy CRDs
Added Support for Backend CRD BackendRefs in HTTPRoute, GRPCRoute and EnvoyExtensionPolicy CRDs
Added Support for Custom Extension Server Policy CRDs in EnvoyGateway Config
Added Support for Custom ShutDownManager Image in EnvoyGateway Config
Added Support for Leader Election in EnvoyGateway Config
Added Support for Connecting to Extension Server over Unix Domain Socket in EnvoyGateway Config
Added Support for Proxy PodDisruptionBudget in EnvoyProxy CRD
Added Support for Running Envoy Proxy as a Daemonset in EnvoyProxy CRD
Added Support for Proxy Loadbalancer Source Ranges in EnvoyProxy CRD
Added Support for Proxy Prometheus Metrics Compression in EnvoyProxy CRD
Added Support for BackendRefs in Access Log, Metric and Trace Sinks in EnvoyProxy CRD
Added Support for Rate Limiting Tracing in EnvoyProxy CRD
Added Support for Routing to Service IP in EnvoyProxy CRD
Added Support for Access Log CEL filters in EnvoyProxy CRD
Added Support for Access Log Formatters for File and OpenTelemetry in EnvoyProxy CRD
Added Support for Zipkin Tracing in EnvoyProxy CRD
Added Support for using the Listener port as a the Container port in EnvoyProxy CRD
Added Support for OpenTelemtry Sink Export Settings in EnvoyProxy CRD
Added Support for Backend Client Certificate Authentication in EnvoyProxy CRD
Added Support for Backend TLS Settings in EnvoyProxy CRD
Added Support for HTTP Filter Ordering in EnvoyProxy CRD
Added Support for gRPC Access Log Service (ALS) Sink in EnvoyProxy CRD
Added Support for OpenTelelemetry Sinks as a BackendRef in EnvoyProxy CRD
Added Support for User-Provided name for generate Kubernetes resources in EnvoyProxy CRD
Added Support for Per-Endpoint stats in EnvoyProxy CRD
Added Support for Targeting SectionNames in ClientTrafficPolicy CRD
Added Support for Preserving X-Request-ID header in ClientTrafficPolicy CRD
Added Support for Using Downstream Protocol in Upstream connections in ClientTrafficPolicy CRD
Added Support for HTTP/2 settings in ClientTrafficPolicy CRD
Added Support for Connection Buffer Size Limit in ClientTrafficPolicy CRD
Added Support for HTTP Health Check in ClientTrafficPolicy CRD
Added Support for Optionally requiring a Client Certificate in ClientTrafficPolicy CRD
Added Support for Headers with Underscores CRD in ClientTrafficPolicy CRD
Added Support for XFCC header processing in ClientTrafficPolicy CRD
Added Support for TCP Listener Idle Timeout in ClientTrafficPolicy CRD
Added Support for IdleTimeout in ClientTrafficPolicy CRD
Added Support for Connection Limits in ClientTrafficPolicy CRD
Added Support for additional OIDC settings related to Resource, Token and Cookie in SecurityPolicy CRD
Added Support for Optionally requiring a JWT in SecurityPolicy CRD
Added Support for BackendRefs for Ext-Auth in SecurityPolicy CRD
Added Support for Authorization in SecurityPolicy CRD
Added Support for Ext-Auth failOpen in SecurityPolicy CRD
Added Support for Loadbalancer Cookie Consistent Hashing in BackendTrafficPolicy CRD
Added Support for Disabling X-RateLimit headers in BackendTrafficPolicy CRD
Added Support for Connection Buffer Size Limit in BackendTrafficPolicy CRD
Added Support for Loadbalancing Consistent Hash Table Size in BackendTrafficPolicy CRD
Added Support for Loadbalancing Header Hash Policy in BackendTrafficPolicy CRD
Added Support for Cluster Connection Buffer Size Limit in BackendTrafficPolicy
Added Support for more Rate Limit Rules in BackendTrafficPolicy CRD
Added Support for Wasm extension in EnvoyExtensionPolicy CRD
Added Support for External Processing extension in EnvoyExtensionPolicy CRD
Removed Status Print Column from xPolicy CRDs

Breaking Changes

SecurityPolicy translation failures will now cause routes referenced by the policy to return an immediate 500 response
Gateway-API BackendTLSPolicy v1alpha3 is incompatible with previous versions of the CRD
xPolicy targetRefs can no longer specify a namespace, since Gateway-API v1.1.0 uses LocalPolicyTargetReferenceWithSectionName in Policy resources

Deprecations

xPolicy targetRef is deprecated, use targetRefs instead
SecurityPolicy ExtAuth BackendRef is deprecated, use BackendRefs instead
OpenTelemetry Proxy Access Log Host and Port are deprecated, use backendRefs instead
OpenTelemetry Proxy Metrics Sink Host and Port are deprecated, use backendRefs instead
Proxy Tracing Provider Host and Port are deprecated, use backendRefs instead
Envoy Gateway Extension Server Host and Port are deprecated, use BackendEndpoint instead

Conformance

Added Supported Features to Gateway Class

Testing

Added e2e test for Client MTLS
Added e2e test for Load Balancing
Added performance benchmarking test
Added e2e test for Zipking Tracing
Added e2e test for HTTP Health Checks
Added e2e test for CEL Access Log Filter
Added e2e test for GRPC Access Log Service Sink
Added e2e test for XDS Metadata
Added e2e test for Wasm from OCI Images and HTTP Source
Added e2e test for Service IP Routing
Added e2e test for Multiple GatewayClasses
Added e2e test for HTTP Full Path rewrite
Added e2e test for Backend API
Added e2e test for Backend TLS Settings
Added e2e test for disabling X-RateLimit Headers
Added e2e test for Authorization
Added e2e test for BackendRefs in Ext-Auth
Added e2e test for Using Client Protocol in Upstream Connection
Added e2e test for Backend Client Cert Authentication
Added e2e test for External Processing Filter
Added e2e test for Merge Gateways Feature
Added e2e test for Option JWT authentication
Added e2e test for Infrastructure using Server-Side Apply
Added e2e test for Connection Limits
Added e2e test for Envoy Graceful Shutdown
Updated e2e test for Limit to cover multiple listeners
Updated e2e test for CORS to not require access-control-expose-headers
Run CEL tests on all supported K8s versions
Added OSV Scanner for Golang Vulnerabilities and Licenses
Added Trivy scanner for Docker images

Translator

Added Support for BackendRef HTTP Filters
Added Support for attaching EnvoyProxy to Gateways
Added Support for cross-namespace EnvoyProxy reference from GatewayClass
Added Support for Backend Traffic Policy for UDPRoute and TCPRoute
Added Support for ClientTrafficPolicy for UDPRoute and TCPRoute
Added Support for multiple BackendRefs in TCPRoute and UDPRoute
Added Metrics related to XDS Server, Infra Manager and Controller
Added Support for PolicyStatus in EnvoyPatchPolicy
Added Support for Websocket upgrades in HTTP/1 Routes
Added Support for custom controller name in egctl
Added Support for BackendTLSPolicy CA Certificate reference to Secret
Added names to Filter Chains
Added Support extension server hooks for TCP and UDP listeners
Added Support for attaching EnvoyProxy resource to Gateways
Added Support for Exposing Prometheus Port in Rate Limiter Service
Added Support for Optional Rate Limit Backend Redis
Updated OAuth2 filter to preserve Authorization header if OIDC token forwarding is enabled
Updated Default Filter Order to have Fault filter first in the HTTP Filter Chain
Updated Ext-Auth Per-Route config to use filter-specific Config Type
Updated Overload Manager configuration according to Envoy recommendations by default
Updated Infrastructure resource management to user Server-Side Apply
Updated Reflection of Errors in Gateway Status when too many addresses are assigned
Fixed enforcement of same-namespace for BackendTLSPolicy and target
Fixed processing all listeners before returning with an error
Fixed creation of infrastructure resources if there are no listeners
Fixed use GatewayClass Name for Observability if Merge Gateways is enabled
Fixed CORS to not forward Not-Matching Preflights to Backends
Fixed BackendTLSPolicy status to fully conform with PolicyStatus
Fixed duplication of Ext-Auth, OIDC and Basic Auth Filters
Fixed Proxy Protocol Filter to always be the first Listener Filter
Fixed Translation Consistency by sorting Gateways
Fixed QUIC Listener to only Advertise HTTP/3 over ALPN
Fixed SNI matching for TCP Routes with TLS termination
Fixed Reconciliation when EnvoyProxy backendRefs changes
Fixed Reconciliation when a referenced Secret or ConfigMap changes
Fixed ReplaceFullPath not working for root path
Fixed Default Application Protocol to TCP for Zipkin Tracing
Fixed not appending well-known ports (80, 443) in rediret Location header

Providers

Bumped K8s Client to v0.30.0

xDS

Bumped go-control-plane to v0.12.1

Cli

Added egctl x collect command
Added Support for Install and Uninstall commands to egctl
Added Support for xRoute and xPolicy in egctl x status
Added Golang version to Envoy Gateway version command
Fixed egctl x status gatewayclass example message

v1.0.2

Wed, 12 Jun 2024 00:00:00 +0000

Date: June 12, 2024

Installation

Updated EnvoyProxy to 1.29.5
Use Patch API for infra-client
Use ServerSideApply instead of CreateOrUpdate for infra-client

Testing

Fixed failures due to an expired certificate in one of the translator tests

Translator

Use - for naming service and container ports
Added proxy protocol always as first listenerFilter
Set ignoreCase for header matchers in extAuth
Added backend TLS SAN validation
Fixed ReplaceFullPath not working for root path (/)

Providers

Fixed duplicated xroutes are added to gatewayapi Resources
Fixed security policy reference grant from field type
Fixed Route extension filters with different types but the same name and namespace aren’t correctly cached
Fixed secrets/configmap updates to trigger a controller reconcile by removing the generationChanged predicate
Removed namespace restriction for EnvoyProxy parametersRef

v1.0.1

Tue, 09 Apr 2024 00:00:00 +0000

Date: April 9, 2024

Installation

Updated EnvoyProxy version to v1.29.3
Fixed certgen to support creating the hmac secret during an upgrade

Translator

Fixed nil secret in resourceversiontable
Add missing http filters to the http filter chain when ClientTrafficPolicy and MergeGateways is enabled
Allow websockets when url rewrite is enabled
Set the Host header for http health checker
Fixed double slashes in redirect URL
Allow ClientTrafficPolicy to attach to multiple http (non https) listeners within the same Gateway
Set path prefix for the http ext auth service
Set the route matching precedence order to Exact > RegularExpression > PathPrefix
Fixed infraIR duplicate port translation for merged gateways
Set SpawnUpstreamSpan to true
Allow rate limit to work with multiple listeners

Infra-manager

Skip creating infra resources when the InfraIR has empty listeners

Announcing Envoy Gateway’s 1.0 Release!

Thu, 14 Mar 2024 00:00:00 +0000

Today we’re ecstatic to announce the 1.0 release of Envoy Gateway (EG) for Kubernetes. A mature version ready for widespread adoption in production that simplifies the use of Envoy for managing North-South traffic.

After nearly two years with contributions from over 90 engineers we are proud to say EG meets the goals that Matt outlined in the original post introducing the project, summarized here:

Built around the (then emerging) Kubernetes Gateway API
Addresses common needs with a solution that is simple to configure and understand
Provides great docs for common use cases to enable ease of adoption
Empowers the community and vendors to drive the project forward through an extensible API

Can’t wait to try it? Visit the EG tasks to get started with Envoy Gateway 1.0

Announcing Envoy Gateway v1.0

Wed, 13 Mar 2024 00:00:00 +0000

We are thrilled to announce the arrival of Envoy Gateway v1.0.0, marking the official General Availability (GA) milestone for the project!

Thank you for being an integral part of this journey. We are excited to see how Envoy Gateway v1.0.0 will empower your operations and look forward to continuing our work together to drive the future of Cloud Native API Gateway.

v1.0.0

Wed, 13 Mar 2024 00:00:00 +0000

Date: March 13, 2024

Documentation

Added User Guide for Local Ratelimit
Added User Guide for Circuit Breaker
Added User Guide for fault injection
Added User Guide for EnvoyProxy extraArgs
Added User Guide for Timeouts in ClientTrafficPolicy
Added User Guide for JWT claim base routing
Added User Guide for HTTP Timeout
Added User Guide for Retry in BackendTrafficPolicy
Added User Guide for Basic Auth
Added User Guide for OIDC
Added User Guide for ClientTrafficPolicy
Added User Guide for BackendTrafficPolicy
Added User Guide for Basic Auth using HTTPS
Added User Guide for External Authorization
Added User Guide for Routing Outside Kubernetes
Added User Guide for BackendTLSPolicy
Added User Guide for Mutual TLS from External Clients to the Gateway
Added User Guide for Control Plane Authentication using custom certs
Added User Guide for Multiple Gatewayclass and Merge Gateways Deployment Mode
Added Type and required for CRD API doc
Refactored Structure of User Guide docs
Refactored Move Design docs under “Get Involved”
Updated crd-ref-docs to 0.0.10
Updated Envoy proxy image to envoy:distroless-dev in main

Installation

Added Support for Pulling envoyGateway image from a private registry
Added Support for Configuring resources for certgen job
Added Support for Configuring affinity for EnvoyGateway pod

API

Added Support for Downstream QUIC/HTTP3 in ClientTrafficPolicy CRD
Added Support for Downstream MTLS in ClientTrafficPolicy CRD
Added Support for Enabling EnvoyHeaders in ClientTrafficPolicy CRD
Added Support for DisableMergeSlash and escapedSlashesAction in ClientTrafficPolicy CRD
Added Support for EnableTrailers in HTTP/1.1 in ClientTrafficPolicy CRD
Added Support for Preserving header letter-case on HTTP/1 in ClientTrafficPolicy CRD
Added Support for Enabling HTTP/1.0 and HTTP/0.9 in ClientTrafficPolicy CRD
Added Support for Client IP Detection using XFF in ClientTrafficPolicy CRD
Added Support for Client IP Detection using Custom Header in ClientTrafficPolicy CRD
Added Support for Connection Timeouts in ClientTrafficPolicy CRD
Added Support for Common TLS configuration properties in ClientTrafficPolicy CRD
Added Support for Proxy protocol in ClientTrafficPolicy CRD
Added Support for TCPKeepAlive in ClientTrafficPolicy CRD
Added Support for Local rate limit in BackendTrafficPolicy CRD
Added Support for CircuitBreaker in BackendTrafficPolicy CRD
Added Support for Fault injection in BackendTrafficPolicy CRD
Added Support for Passive Health Checks in BackendTrafficPolicy CRD
Added Support for Active Health Checks in BackendTrafficPolicy CRD
Added Support for Connection Timeouts in BackendTrafficPolicy CRD
Added Support for Compressor/Decompressor in BackendTrafficPolicy CRD
Added Support for Retry in BackendTrafficPolicy CRD
Added Support for Slow start mode in BackendTrafficPolicy CRD
Added Support for Proxy protocol in BackendTrafficPolicy CRD
Added Support for TCPKeepAlive in BackendTrafficPolicy CRD
Added Support for PolicyStatus in BackendTrafficPolicy CRD
Added Support for PolicyStatus in ClientTrafficPolicy CRD
Added Support for PolicyStatus in SecurityPolicy CRD
Added Support for OIDC in SecurityPolicy CRD
Added Support for Basic Auth in SecurityPolicy CRD
Added Support for RedirectURL and signoutPath to OIDC in SecurityPolicy CRD
Added Support for ExtractFrom headers and params to JWT in SecurityPolicy CRD
Added Support for External Authorization in SecurityPolicy CRD
Added Support for RecomputeRoute field to JWT in SecurityPolicy CRD
Added Support for AllowCredentials knob to CORS setting in SecurityPolicy CRD
Added Support for Extract from different identifier to JWT in SecurityPolicy CRD
Added Support for Secret resource in EnvoyPatchPolicy CRD
Added Support for Making the value optional for JSONPatchOperation in EnvoyPatchPolicy CRD
Added Support for From field to JSONPatchOperation in EnvoyPatchPolicy CRD
Added Support for MergeGateways in EnvoyPatchPolicy CRD
Added Support for Upstream TLS by implementing BackendTLSPolicy CRD
Added Support for LabelSelector type for NamespaceSelectors in EnvoyGateway Configuration
Added Support for Ratelimit prometheus in EnvoyGateway Configuration
Added Support for Gracefully drain listeners before envoy shutdown on pod termination in EnvoyProxy CRD
Added Support for Configuring externalTrafficPolicy to the envoy service in EnvoyProxy CRD
Added Support for Envoy extra args in EnvoyProxy CRD
Added Support for Mergepatch to envoyproxy/ratelimit deployment in EnvoyProxy CRD
Added Support for Mergepatch to envoyproxy service in EnvoyProxy CRD
Added Support for NodeSelector to PodSpec in EnvoyProxy CRD
Added Support for HorizontalPodAutoscaler in EnvoyProxy CRD
Added Support for TopologySpreadConstraints to PodSpec in EnvoyProxy CRD
Added Support for ImagePullSecrets to PodSpec in EnvoyProxy CRD

Breaking Changes

Use wildcard to match AllowOrigins to CORS in SecurityPolicy CRD
Remove Hostnetwork support in EnvoyProxy CRD

Conformance

Replaced backend image from gcr.io/k8s-staging-ingressconformance/echoserver to gcr.io/k8s-staging-gateway-api/echo-basic

Testing

Added e2e test for Header Case-Preserving
Added e2e test for Timeout in ClientTrafficPolicy
Added e2e test for JWT claim base routing
Added e2e test for OIDC
Added e2e test for BackendTrafficPolicy Retry
Added e2e test for Backend Upgrade
Added e2e test for External Authorization
Added e2e test for Backend TLS policy
Added e2e test for Envoy Gateway Release Upgrade
Added e2e test for Weighted backend
Added validation for LoadBalancerIP to prevent trailing period

Translator

Fixed Prefix match to prevent mismatching routes with the same prefix
Fixed Multiple reconciling by implementing comparable interface for ir.Infra
Fixed EndpointSlice with empty conditions {}
Fixed Error handling when parsing the http request timeout
Fixed No status when EnvoyPatchPolicy is disabled
Fixed Printable for xds and infra IRs
Fixed Skip backendRefs with weight set to 0
Fixed AND Header matches in ratelimiting not working
Fixed Deletion logics when no gatewayclasses exist
Fixed Match mergedGateways irKey for ClientTrafficPolicy
Fixed Policies should apply only to gateways they were attached to when mergeGateways is true
Fixed Listener status is not surfaced for gateways when MergeGateways enabled
Fixed GRPCroute websocket not working by moving web socket upgrade config from hcm to route
Fixed Configure idle timeout when timeout is set on HTTPRoute
Fixed Relaxing HTTPS restriction for OIDC token endpoint
Fixed Panic when translating routes with empty backends
Fixed Xds translation should be done in a best-effort manner
Fixed Delete unused status keys from watchable
Fixed Ignoring finalizers when comparing envoy proxy service
Fixed Don’t override the ALPN array if HTTP/3 is enabled
Fixed Add h3 ALPN by default if HTTP/3 is enabled
Fixed Change the Merge behavior to Replace for SecurityPolicy/BackendTrafficPolicy
Fixed Use service port in alt-svc header if HTTP/3 is enabled
Fixed Prevent policies targeting non-TLS listeners on the same port from conflicting
Fixed Skip the ReasonTargetNotFound for all policies
Fixed Skip publishing empty status for all policies
Added Support for validating regex before sending to Envoy
Added Support for setting spec.addresses.value into ClusterIP when Service Type is ClusterIP
Added Unsupported status condition for filters within BackendRef
Added List instead of map for Provider Resources for order stability
Added Suffix for oauth cookies to prevent multiple oauth filters from overwriting each other’s cookies
Added Support for overriding condition to BackendTrafficPolicy and SecurityPolicy
Added Support for default retry budget and retry host predicate
Added Support for implementing gateway.spec.infrastructure
Added Support for Upstream TLS to multiple Backends
Added Validation for CA Cert in ClientTrafficPolicy

Providers

Added Support for multiple GatewayClass per controller
Added SecurityPolicyIndexers in Kubernetes Provider
Added Support for generating HMAC secret in CertGen Job
Fixed Finalizer logic when deleting Gatewayclasses
Fixed MergeGateways panics when restarting control plane

xDS

Added Support for EDS cache
Added Support for ADS cache to ensure the rule order
Fixed Deprecated field error when using RequestHeaderModifier filter
Fixed Envoy rejects XDS at runtime losing all routes on restart
Fixed Requests not matching defined routes trigger per-route filters
Bumped go-control-plane to v0.12.0

Cli

Added Support for egctl x status
Added Support for egctl experimental dashboard envoy-proxy
Added Support for egctl config ratelimit
Added Support for egctl translate from gateway-api resources to IR

Announcing Envoy Gateway v0.6

Wed, 01 Nov 2023 00:00:00 +0000

We are pleased to announce the release of Envoy Gateway v0.6!

This is the fifth functional release of Envoy Gateway. We would like to thank the entire Envoy Gateway community for helping publish the release.

Release Notes	Docs	Compatibility Matrix	Download

What’s New

The release adds a ton of features and functionality. Here are some highlights:

Gateway API

Upgraded to Gateway API v1.0
Added support for HTTPRoute Timeouts

Add Control Plane Proxy Telemetry

Added Support for Metrics Telemetry

Add Support for directly configuring xDS

Added Support for the EnvoyPatchPolicy API

ClientTrafficPolicy

Added Support for configuring Downstream Keep Alives

BackendTrafficPolicy

Added Support for configuring Rate limiting
Added Support for configuring load balancing

SecurityPolicy

Added Support for configuring JWT
Added Support for configuring CORS

API Updates

Added support for selectively watching resources based on Namespace Selector
Added EnvoyGateway Metrics with Prometheus and OpenTelemetry support
Added Support for InitContainers in EnvoyProxy CRD
Added Support for LoadBalancerIP in EnvoyProxy CRD
Added Support for AllocateLoadBalancerNodePorts in EnvoyProxy CRD
Added Support for LoadBalancerClass in EnvoyProxy CRD
Added Support for selecting EnvoyProxy stats to be generated
Added Support for enabling EnvoyProxy Virtual Host metrics
Added Support for Merging Gateway resources onto the same infrastructure

CLI

Added egctl stats command

Kubernetes Provider

Improved reconiliation by using the same enqueue request for all resources
Added support for reconciling ServiceImport CRD

Breaking changes

Removed RateLimitFilter, and replaced it with BackendTrafficPolicy
Removed AuthenticationFilter, and replaced it with SecurityPolicy
Moved the EnvoyProxy CRD from config.gateway.envoyproxy.io to gateway.envoyproxy.io
Converted the bootstrap field within EnvoyProxy into a struct to support merge operations.

v0.6.0

Wed, 01 Nov 2023 00:00:00 +0000

Date: Nov 1, 2023

Documentation

Introduced a new website based on Hugo
Added Grafana dashboards and integration docs for EnvoyProxy metrics
Added Grafana integration docs for Gateway API metrics

Installation

Updated EnvoyProxy image to be a distroless variant.
Removed resources around kube-rbac-proxy

API

Upgraded to Gateway API v1.0.0
Added the ClientTrafficPolicy CRD with Keep Alive Support
Added the BackendTrafficPolicy CRD with RateLimit and LoadBalancer Support
Added the SecurityPolicy CRD with CORS and JWT Support
Added EnvoyGateway Metrics with Prometheus and OpenTelemetry support
Added Support for InitContainers in EnvoyProxy CRD
Added Support for LoadBalancerIP in EnvoyProxy CRD
Added Support for AllocateLoadBalancerNodePorts in EnvoyProxy CRD
Added Support for LoadBalancerClass in EnvoyProxy CRD
Added Support for selecting EnvoyProxy stats to be generated
Added Support for enabling EnvoyProxy Virtual Host metrics
Added Support for Merging Gateway resources onto the same infrastructure

Breaking Changes

Removed the AuthenticationFilter CRD
Removed the RateLimitFilter CRD
Moved EnvoyProxy CRD from config.gateway.envoyproxy.io to gateway.envoyproxy.io
Enabled EnvoyProxy Prometheus Endpoint by default with an option to disable it
Updated the Bootstrap field within the EnvoyProxy CRD with an additional value
field to specify bootstrap config

Conformance

Added Support for HTTPRouteBackendProtocolH2C Test
Added Support for HTTPRouteBackendProtocolWebSocket Test
Added Support for HTTPRouteRequestMultipleMirrors Test
Added Support for HTTPRouteTimeoutRequest Test
Added Support for HTTPRouteTimeoutBackendRequest Test
Added Support for HTTPRouteRedirectPortAndScheme Test

Watchable

Improved caching of resource by implementing a compare function agnostic of resource order

Translator

Added support for routing to EndpointSlice endpoints
Added support for HTTPRoute Timeouts
Added support for multiple RequestMirror filters per HTTPRoute rule
Use / instead of - in IR Route Names
Added Support to ignore ports in Host header

Providers

Added the generationChangedPredicate to most resources to limit resource reconiliation
Improved reconiliation by using the same enqueue request for all resources
Added support for reconciling ServiceImport CRD
Added support for selectively watching resources based on Namespace Selector

xDS

Fixed Layered Runtime warnings
Upgraded to the latest version of go-control-plane that fixed xDS Resource ordering issues for ADS.
Added HTTP2 Keep Alives to the xds connection

Cli

Added Support for egctl stats command

Control Plane Observability: Metrics

Tue, 10 Oct 2023 00:00:00 +0000

This document aims to cover all aspects of envoy gateway control plane metrics observability.

Note

Data plane observability (while important) is outside of scope for this document. For data plane observability, refer to here.

Current State

At present, the Envoy Gateway control plane provides logs and controller-runtime metrics, without traces. Logs are managed through our proprietary library (internal/logging, a shim to zap) and are written to /dev/stdout.

Control Plane Observability: Metrics

Tue, 10 Oct 2023 00:00:00 +0000

This document aims to cover all aspects of envoy gateway control plane metrics observability.

Note

Data plane observability (while important) is outside of scope for this document. For dataplane observability, refer to here.

Current State

Goals

Our objectives include:

Welcome to new website!

Sun, 08 Oct 2023 00:00:00 +0000

Summary

Migrate from Sphinx to Hugo for Envoy Gateway Documents.

Introduction

In the realm of static site generators, two names often come up: Sphinx and Hugo. While both are powerful tools, we recently made the decision to migrate our documentation from Sphinx to Hugo. This article aims to shed light on the reasons behind this move and the advantages we’ve discovered in using Hugo for static blogging.

KubeCon China 2023

Thu, 28 Sep 2023 00:00:00 +0000

Topic: Envoy Gateway: The API Gateway in the Cloud Native Era

— KubeCon China 2023

Speaker

Xunzhuo Liu: Tencent, Envoy Gateway Maintainer
Huabing Zhao: Tetrate.io, Envoy Gateway Reviewer

Slides

Download from Link.

Watch Videos

Announcing Envoy Gateway v0.5

Wed, 02 Aug 2023 00:00:00 +0000

We are pleased to announce the release of Envoy Gateway v0.5!

This is the fourth functional release of Envoy Gateway. We would like to thank the entire Envoy Gateway community for helping publish the release.

Release Notes	Docs	Compatibility Matrix	Download

What’s New

The release adds a ton of features and functionality. Here are some highlights:

Upgrade Gateway API Dependency

Upgraded to Gateway API v0.7.1

Add Data Plane Proxy Telemetry

Added Support for Access Logging, Tracing and Metrics Telemetry

Add Support for directly configuring xDS

Added Support for the EnvoyPatchPolicy API

Ratelimiting

Added Support for Distinct Ratelimiting Based On IP Addresses
Added Support for JWT Claim based Ratelimiting
Switched to Xds SOTW Server for RateLimit Service Configuration

API Updates

Added Support for configuring EnvoyProxy Pod Labels
Added Support for configuring EnvoyProxy Deployment Strategy Settings, Volumes and Volume Mounts
Added Support for configuring EnvoyProxy as a NodePort Type Service
Added Admin Server for Envoy Gateway
Added Pprof Debug Support for Envoy Gateway
Added Support to Watch for Resources in Select Namespaces

Envoy Proxy

Added Best Practices Default Edge Settings to Xds Resources

v0.5.0

Wed, 26 Jul 2023 00:00:00 +0000

Date: July 26, 2023

Documentation

Added Docs for Installation page using Helm
Added Docs for Cert Manager Integration
Added Docs for Presentation Links
Added Docs for configuring multiple TLS Certificates per Listener

Installation

Added Support for configuring Envoy Gateway Label and Annotations using Helm
Increased default Resource defaults for Envoy Gateway to 100m CPU and 256Mi Memory
Fixes Helm values for EnvoyGateway startup configuration
Added opt-in field to skip creating control plane TLS Certificates allowing users to bring their own certificates.

API

Upgraded to Gateway API v0.7.1
Added Support for EnvoyPatchPolicy
Added Support for EnvoyProxy Telemetry - Access Logging, Traces and Metrics
Added Support for configuring EnvoyProxy Pod Labels
Added Support for configuring EnvoyProxy Deployment Strategy Settings, Volumes and Volume Mounts
Added Support for configuring EnvoyProxy as a NodePort Type Service
Added Support for Distinct RateLimiting for IP Addresses
Added Support for converting JWT Claims to Headers, to be used for RateLimiting
Added Admin Server for Envoy Gateway
Added Pprof Debug Support for Envoy Gateway
Added Support to Watch for Resources in Select Namespaces

Breaking Changes

Renamed field in EnvoyGateway API from Extension to ExtensionManager

Ci tooling testing

Added Retest Github Action
Added CherryPick Github Action
Added E2E Step in Github CI Workflow
Added RateLimit E2E Tests
Added JWT Claim based RateLimit E2E Tests
Added Access Logging E2E tests
Added Metrics E2E tests
Added Tracing E2E tests

Conformance

Enabled GatewayWithAttachedRoutes Test
Enabled HttpRouteRequestMirror Test
Skipped HTTPRouteRedirectPortAndScheme Test

Translator

Breaking Changes

Renamed IR resources from - to /
which also affects generated Xds Resources

Providers

Reconcile Node resources to be able to compute Status Addresses for Gateway
Discard Status before publishing Provider resources to reduce memory consumption

xDS

Fix Init Race in Xds Runner when starting Xds Server and receiving Xds Input
Switched to Xds SOTW Server for RateLimit Service Configuration
Added Control Plane TLS between EnvoyProxy and RateLimit Service
Enabled adding RateLimit Headers when RateLimit is set
Allowed GRPCRoute and HTTPRoute to be linked to the same HTTPS Listener
Set ALPN in the Xds Listener with TLS enabled.
Added Best Practices Default Edge Settings to Xds Resources
Compute and Publish EnvoyPatchPolicy status from xds-translator runner

Cli

Added egctl x translate Support to generate default missing Resources
Added egctl x translate Support for AuthenticationFilter and EnvoyPatchPolicy

KubeCon Europe 2023

Mon, 01 May 2023 00:00:00 +0000

Topic: Envoy Gateway Update

— KubeCon Europe 2023

Speaker

Alice Wasko: Ambassador Labs, Envoy Gateway Maintainer

Slides

Download from Link.

Watch Videos

Announcing Envoy Gateway v0.4

Mon, 24 Apr 2023 00:00:00 +0000

We are pleased to announce the release of Envoy Gateway v0.4!

This is the third functional release of Envoy Gateway. We would like to thank the entire Envoy Gateway community for helping publish the release.

Release Notes	Docs	Compatibility Matrix	Download

What’s New

The release adds a ton of features and functionality. Here are some highlights:

Upgrade Gateway API Dependency

Upgraded to Gateway API v0.6.2

Add Helm Support

Installation of Envoy Gateway can now be done through helm

Add egctl CLI Tool

Added egctl Support for Dry Runs of Gateway API Config
Added egctl Support for Dumping Envoy Proxy xDS Resources

Add Support for extending Envoy Gateway

Added Initial Framework for Building an Extension on top of Envoy Gateway

Ratelimiting

Added Support for Ratelimiting Based On IP Subnet

API Updates

Added Support for Custom Envoy Proxy Bootstrap Config
Added Support for Configuring the Envoy Proxy Image and Service
Added Support for Configuring Annotations, Resources, and Securitycontext Settings on Ratelimit Infra and Envoy Proxy
Added Support for Using Multiple Certificates on a Single Fully Qualified Domain Name
Envoy Proxy Pod and Container SecurityContext is now Configurable
Added Support for Service Method Match in GRPCRoute
Added EDS Support

v0.4.0

Mon, 24 Apr 2023 00:00:00 +0000

Date: April 24, 2023

Documentation

Added Docs for Installing and Using egctl

Installation

Added Helm Installation Support
Added Support for Ratelimiting Based On IP Subnet
Added Gateway API Support Doc
Added Namespace Resource to Helm Templates
Updated Installation Yaml to Use the envoy-gateway-system Namespace

API

Upgraded to Gateway API v0.6.2
Added Support for Custom Envoy Proxy Bootstrap Config
Added Support for Configuring the Envoy Proxy Image and Service
Added Support for Configuring Annotations, Resources, and Securitycontext Settings on Ratelimit Infra and Envoy Proxy
Added Support for Using Multiple Certificates on a Single Fully Qualified Domain Name
Gateway Status Address is now Populated for ClusterIP type Envoy Services
Envoy Proxy Pod and Container SecurityContext is now Configurable
Added Custom Envoy Gateway Extensions Framework
Added Support for Service Method Match in GRPCRoute
Fixed a Bug in the Extension Hooks for xDS Virtual Hosts and Routes

Ci tooling testing

Fixed CI Flakes During Helm Install
Added Test To Ensure Static xDS Cluster Has Same Field Values as Dynamic Cluster
Added egctl to Build and Test CI Workflow
Code Coverage Thresholds are now Enforced by CI
Fixed latest-release-check CI Job Failures
Added Auto Release Tooling for Charts

Conformance

Enabled GatewayWithAttachedRoutes Test
Enabled Enable HTTPRouteInvalidParentRefNotMatchingSectionName Test
Enabled Enable HTTPRouteDisallowedKind Test
Re-Enabled Gateway/HTTPRouteObservedGenerationBump Test

Translator

Added Support for Dynamic GatewayControllerName in Route Status

Providers

Update GatewayClass Status Based on EnvoyProxy Config Validation

xDS

Added EDS Support
Fixed PathSeparatedPrefix and Optimized Logic for Prefixes Ending With Trailing Slash
Updated Deprecated RegexMatcher
Refactored Authn and Ratelimit Features to Reuse buildXdsCluster

Cli

Added egctl CLI Tool
Added egctl Support for Dry Runs of Gateway API Config
Added egctl Support for Dumping Envoy Proxy xDS Resources

Announcing Envoy Gateway v0.3

Thu, 09 Feb 2023 00:00:00 +0000

We are pleased to announce the release of Envoy Gateway v0.3!

This is the second functional release of Envoy Gateway. We would like to thank the entire Envoy Gateway community for helping publish the release.

Release Notes	Docs	Compatibility Matrix	Download

What’s New

The release adds a ton of features and functionality. Here are some highlights:

Add Support for extended Gateway API fields

Added Support for HTTPRoute URLRewrite Filter
Added Support for HTTPRoute RequestMirror Filter
Added Support for HTTPRoute ResponseHeaderModifier Filter

Add Support for experimental Gateway APIs

Added Support for the TCPRoute API
Added Support for the UDPRoute API
Added Support for the GRPCRoute API

Add Support for Rate Limiting

Added Support for Global Rate Limiting

Add Support for Authentication

Added Support for Request Authentication

v0.3.0

Thu, 09 Feb 2023 00:00:00 +0000

Date: February 09, 2023

Documentation

Added Global Rate Limit User Docs
Added Request Authentication User Docs
Added TCP Routing User Docs
Added UDP Routing User Docs
Added GRPC Routing User Docs
Added HTTP Response Headers User Docs
Added TCP and UDP Proxy Design Docs
Added egctl Design Docs
Added Rate Limit Design Docs
Added Request Authentication Design Docs
Added Support for Versioned Docs
Added Support for Multiple Release Versions
Added Release Details Docs
Added API Docs Generating Tooling
Refactored Layout for User Docs

API

Upgraded to v0.6.1 Gateway API
Added Support for the TCPRoute API
Added Support for the UDPRoute API
Added Support for the GRPCRoute API
Added Support for HTTPRoute URLRewrite Filter
Added Support for HTTPRoute RequestMirror Filter
Added Support for HTTPRoute ResponseHeaderModifier Filter
Added Support for Request Authentication
Added Support for Global Rate Limiting
Added Support for Routes ReferenceGrant
Added Support for Namespace Server Config Type
Added initial management of Envoy Proxy deployment via EnvoyProxy API

Ci tooling testing

Fixed Make Image Failed in Darwin
Fixed Wait for Job Succeeded before conformance test
Upgraded Echoserver Image Tag
Added Support for User-Facing Version
Added Support for Testing EG against Multiple Kubernetes Versions

Conformance

Enabled GatewayClassObservedGenerationBump conformance test
Enabled GatewayInvalidTLSConfiguration conformance test
Enabled GatewayInvalidRouteKind conformance test
Enabled HTTPRouteReferenceGrant conformance test
Enabled HTTPRouteMethodMatching conformance test
Enabled HTTPRoutePartiallyInvalidViaInvalidReferenceGrant conformance test
Enabled HTTPRouteInvalidParentRefNotMatchingListenerPort conformance test
(Currently EG passes all conformance tests except redirect and gateway/httproute ObservedGenerationBump tests. Redirect tests are failing due to a possible issue with the way upstream conformance tests have made assumptions. Skip them for now until below issues #992 #993 #994 are resolved)

IR

Added TCP Listener per TLSRoute

Translator

Fixes Remove Stale Listener Condition
Added Support for Suffix Matches for Headers
Added Support for HTTP Method Matching to HTTPRoute
Added Support for Regex Match Type
Added Support for HTTPQueryParamMatch

Providers

Refactored Kubernetes Provider to Single Reconciler
Upgraded Kube Provider Test Data Manifests to v0.6.1
Removed Duplicate Settings from Bootstrap Config
Updated Certgen to Use EG Namespace Env
Added EnvoyProxy to Translator and Kube Infra Manager
Upgraded Envoyproxy Image to envoy-dev latest in Main
Removed EG Logs Private Key

xDS

Fixed Start xDS Server Watchable Map Panics
Enabled Access Logging for xDS Components

KubeCon North America 2022

Fri, 28 Oct 2022 00:00:00 +0000

Topic: Envoy Gateway Update

— KubeCon North America 2022

Speaker

Daneyon Hansen: Solo.io, Envoy Gateway Maintainer
Alice Wasko: Ambassador Labs, Envoy Gateway Maintainer

Slides

Download from Link.

Watch Videos

Announcing Envoy Gateway v0.2

Thu, 20 Oct 2022 00:00:00 +0000

We are pleased to announce the release of Envoy Gateway v0.2!

This is the first functional release of Envoy Gateway. We would like to thank the entire Envoy Gateway community for helping publish the release.

Release Notes	Docs	Compatibility Matrix	Download

What’s New

The release adds a ton of features and functionality. Here are some highlights:

Kubernetes Support

Run Envoy Gateway in a Kubernetes cluster. Checkout the quickstart guide to get started with Envoy Gateway in a few simple steps.

v0.2.0

Wed, 19 Oct 2022 00:00:00 +0000

Date: October 19, 2022

Documentation

Added Config API, translator, roadmap, and message bus design documentation.
Added documentation for releasing Envoy Gateway.
Added user guides for configuring common tasks, e.g. HTTP request routing.
Added support for the Sphinx documentation generator.

API

Added the EnvoyGateway API type for configuring Envoy Gateway.
Added the EnvoyProxy API type for configuring managed Envoys.

Ci tooling testing

Added tooling to build, run, etc. Envoy Gateway.
Added Gateway API conformance tests.
Added Make-based tooling to fetch all tools so checks (code lint, spellchecks) and tests can be run locally.
Added support for releasing latest artifacts to GitHub.
Added code coverage with a minimum 60% threshold.

IR

Added xds and infra IRs to decouple user-facing APIs from Envoy Gateway.
Added IR validation.

Translator

Added the gatewayapi translator to translate Gateway API and associated resources to the IR and manage the
status of Gateway API resources.
Added the xDS translator to translate the xds IR to xDS resources.

Message-service

Added infra and xds IR watchable map messages for inter-component communication.
Added a Runner to each Envoy Gateway component to support pub/sub between components.
Added support for managing multiple separate Envoy proxy fleets.

Infra-manager

Added Kubernetes Infra Manager to manage Envoy infrastructure running in a Kubernetes cluster.
Added support for managing a separate Envoy infrastructure per Gateway.

Providers

Added the Kubernetes provider with support for managing GatewayClass, Gateway, HTTPRoute, ReferenceGrant, and
TLSRoute resources.
Due to Issue #539, a ReferenceGrant is not removed from the system when unreferenced.
Due to Issue #577, TLSRoute is not being tested for Gateway API conformance.
Added watchers for dependent resources of managed Envoy infrastructure to trigger reconciliation.
Added support for labeling managed infrastructure using Gateway namespace/name labels.
Added support for finalizing the managed GatewayClass.

xDS

Added xDS server support to configure managed Envoys using Delta xDS.
Added initial support for mTLS between the xDS server and managed Envoys.
Due to envoyproxy/go-control-plane Issue #599, Envoy Gateway logs the private key of HTTPS listeners.

v0.1.0

Mon, 16 May 2022 00:00:00 +0000

Date: May 16, 2022

Documentation

The initial open source release describing project goals and high-level design.

About Envoy Gateway

Mon, 01 Jan 0001 00:00:00 +0000

Advanced Traffic Management for Everyone

Envoy Gateway democratizes the power of Envoy Proxy, bringing you it's battle-tested traffic management via a Kubernetes Gateway API implementation. Envoy is trusted by tech giants worldwide, we're making enterprise capabilities accessible to everyone.

Get Started GitHub

Our Vision

Envoy Gateway was created with a clear mission: to make Envoy Proxy's powerful features accessible to all users while providing a robust implementation of the Kubernetes Gateway API. We believe that managing application traffic should be straightforward, allowing teams to focus on building great applications rather than wrestling with complex proxy configurations.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

This task will walk you through the steps required to configure TLS Termination mode for TCP traffic while also using the Envoy Private Key Provider to accelerate the TLS handshake by leveraging QAT and the HW accelerator available on Intel SPR/EMR Xeon server platforms.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Accelerating TLS Handshakes using Private Key Provider in Envoy

Mon, 01 Jan 0001 00:00:00 +0000

TLS operations can be accelerated or the private key can be protected using specialized hardware. This can be leveraged in Envoy using Envoy Private Key Provider is added to Envoy.

Today, there are two private key providers implemented in Envoy as contrib extensions:

Both of them are used to accelerate the TLS handshake through the hardware capabilities.

Add Pprof support in Envoy Gateway

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Envoy Gateway exposes endpoints at localhost:8899/debug/pprof to run Golang profiles to aid in live debugging. The endpoints are equivalent to those found in the http/pprof package. /debug/pprof/ returns an HTML page listing the available profiles.

Goals

Add Debug Pprof support to Envoy Gateway control plane.
Define an API to allow Envoy Gateway to custom debug server configuration.

The following are the different types of profiles end-user can run:

Admin Console

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides a built-in web-based admin console that offers a comprehensive interface for monitoring, debugging, and managing your Envoy Gateway deployment. The admin console provides real-time visibility into the control plane status, configuration state, performance metrics, and debugging capabilities.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Admin Console

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Admin Console

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Admin Console

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Adopters

Mon, 01 Jan 0001 00:00:00 +0000

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

BackendTrafficPolicy

BackendTrafficPolicy allows the user to configure the behavior of the connection between the downstream client and Envoy Proxy listener.

Appears in:

BackendTrafficPolicyList

Field	Description
`apiVersion` string	`gateway.envoyproxy.io/v1alpha1`
`kind` string	`BackendTrafficPolicy`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` BackendTrafficPolicySpec	spec defines the desired state of BackendTrafficPolicy.

BackendTrafficPolicyList

BackendTrafficPolicyList contains a list of BackendTrafficPolicy resources.

API Reference

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

TLSSettings

ActiveHealthCheck

ActiveHealthCheck defines the active health check configuration. EG supports various types of active health checking including HTTP, TCP.

API Reference

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

API Reference

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Backend

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces the Backend API allowing system administrators to represent backends without the use of a K8s Service resource.

Common use cases for non-Service backends in the K8s and Envoy ecosystem include:

Cluster-external endpoints, which are currently second-class citizens in Gateway-API (supported using Services and FQDN endpoints).
Host-local endpoints, such as sidecars or daemons that listen on unix domain sockets or envoy internal listeners, that cannot be represented by a K8s service at all.

Several projects currently support backends that are not registered in the infrastructure-specific service registry.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Mutual TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mTLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy to establish TLS. For mTLS, the Gateway must authenticate by presenting a client certificate to the backend.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Backend TLS to install Envoy Gateway and configure TLS to the backend server.

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway supports routing to native K8s resources such as Service and ServiceImport. The Backend API is a custom Envoy Gateway extension resource that can used in Gateway-API BackendObjectReference.

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Similar to the K8s EndpointSlice API, the Backend API can be misused to allow traffic to be sent to otherwise restricted destinations, as described in CVE-2021-25740. A Backend resource can be used to:

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend Routing

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

The Backend API was added to support several use cases:

Allowing users to integrate Envoy with services (Ext Auth, Rate Limit, ALS, …) using Unix Domain Sockets, which are currently not supported by K8s.
Simplify routing to cluster-external backends, which currently requires users to maintain both K8s Service and EndpointSlice resources.

Warning

Backend TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how TLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Backend TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how TLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Backend TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how TLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest.

TLS Certificates

Generate the certificates and keys used by the backend to terminate TLS connections from the Gateways.

Backend TLS: Gateway to Backend

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how TLS can be achieved between the Gateway and a backend. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Envoy Gateway supports the Gateway-API defined BackendTLSPolicy.

Prerequisites

OpenSSL to generate TLS assets.

However, in certain scenarios—such as development or testing—you might want to skip TLS verification for a backend service. To do this, you can use the Backend API and set the tls.insecureSkipVerify field to true in the Backend resource.

Backend TLS: Skip TLS Verification

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how to skip TLS verification for a backend service in Envoy Gateway.

By default, you must configure a BackendTLSPolicy to validate the TLS certificate of a backend service when it uses TLS.

Backend TLS: Skip TLS Verification

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how to skip TLS verification for a backend service in Envoy Gateway.

By default, you must configure a BackendTLSPolicy to validate the TLS certificate of a backend service when it uses TLS.

Backend TLS: Skip TLS Verification

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how to skip TLS verification for a backend service in Envoy Gateway.

By default, you must configure a BackendTLSPolicy to validate the TLS certificate of a backend service when it uses TLS.

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is GA and has been part of the Standard
Channel since `v1.4.0`. For more information on release channels, refer
to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTLSPolicy specifically addresses the configuration of TLS in order to convey HTTPS from the Gateway dataplane to the backend. This is referred to as “backend TLS termination” and enables the Gateway to know how to connect to a backend pod that has its own certificate.

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is GA and has been part of the Standard
Channel since `v1.4.0`. For more information on release channels, refer
to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is Alpha and has been part of
the Experimental Channel since `v1.0.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is Alpha and has been part of
the Experimental Channel since `v1.0.0`. For more information on release
channels, refer to our [versioning guide](../concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is Alpha and has been part of
the Experimental Channel since `v1.0.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTLSPolicy

Mon, 01 Jan 0001 00:00:00 +0000

The `BackendTLSPolicy` resource is GA and has been part of the Standard
Channel since `v1.4.0`. For more information on release channels, refer
to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

BackendTLSPolicy is a Gateway API type for specifying the TLS configuration of the connection from the Gateway to a backend pod/s via the Service API object.

Background

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces the BackendTrafficPolicy API allowing users to configure the behavior for how the Envoy Proxy server communicates with upstream backend services/endpoints.

Goals

Add an API definition to hold settings for configuring behavior of the connection between the backend services and Envoy Proxy listener.

Non Goals

Define the API configuration fields in this API.

Implementation

BackendTrafficPolicy is an implied hierarchy type API that can be used to extend Gateway API. It can target either a Gateway, or an xRoute (HTTPRoute/GRPCRoute/etc.). When targeting a Gateway, it will apply the configured settings within ght BackendTrafficPolicy to all children xRoute resources of that Gateway. If a BackendTrafficPolicy targets an xRoute and a different BackendTrafficPolicy targets the Gateway that route belongs to, then the configuration from the policy that is targeting the xRoute resource will win in a conflict.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

BackendTrafficPolicy is an extension to the Kubernetes Gateway API that controls how Envoy Gateway communicates with your backend services. It can configure connection behavior, resilience mechanisms, and performance optimizations without requiring changes to your applications.

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces the BackendTrafficPolicy API allowing users to configure the behavior for how the Envoy Proxy server communicates with upstream backend services/endpoints.

Goals

Add an API definition to hold settings for configuring behavior of the connection between the backend services and Envoy Proxy listener.

Non Goals

Define the API configuration fields in this API.

Implementation

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Think of it as a traffic controller between your gateway and backend services. It can detect problems, prevent failures from spreading, and optimize request handling to improve system stability.

BackendTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

Issue 31 specifies the need for allowing advanced users to specify their custom Envoy Bootstrap configuration rather than using the default Bootstrap configuration defined in Envoy Gateway. This allows advanced users to extend Envoy Gateway and support their custom use cases such setting up tracing and stats configuration that is not supported by Envoy Gateway.

Goals

Define an API field to allow a user to specify a custom Bootstrap
Provide tooling to allow the user to generate the default Bootstrap configuration as well as validate their custom Bootstrap.

Non Goals

Allow user to configure only a section of the Bootstrap

API

Leverage the existing EnvoyProxy resource which can be attached to the GatewayClass using the parametersRef field, and define a Bootstrap field within the resource. If this field is set, the value is used as the Bootstrap configuration for all managed Envoy Proxies created by Envoy Gateway.

Bootstrap Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Goals

Define an API field to allow a user to specify a custom Bootstrap
Provide tooling to allow the user to generate the default Bootstrap configuration as well as validate their custom Bootstrap.

Non Goals

Allow user to configure only a section of the Bootstrap

API

Bootstrap Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Goals

Define an API field to allow a user to specify a custom Bootstrap
Provide tooling to allow the user to generate the default Bootstrap configuration as well as validate their custom Bootstrap.

Non Goals

Allow user to configure only a section of the Bootstrap

API

Bootstrap Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Goals

Define an API field to allow a user to specify a custom Bootstrap
Provide tooling to allow the user to generate the default Bootstrap configuration as well as validate their custom Bootstrap.

Non Goals

Allow user to configure only a section of the Bootstrap

API

Build a Wasm image

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway supports two types of Wasm extensions within the EnvoyExtensionPolicy API: HTTP Wasm Extensions and Image Wasm Extensions. Packaging a Wasm extension as an OCI image is beneficial because it simplifies versioning and distribution for users. Additionally, users can leverage existing image toolchain to build and manage Wasm images.

This document describes how to build OCI images which are consumable by Envoy Gateway.

Wasm Image Formats

There are two types of images that are supported by Envoy Gateway. One is in the Docker format, and another is the standard OCI specification compliant format. Please note that both of them are supported by any OCI registries. You can choose either format depending on your preference, and both types of images are consumable by Envoy Gateway EnvoyExtensionPolicy API.

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Envoy’s circuit breakers are distributed: counters are not synchronized across different Envoy processes. The default Envoy and Envoy Gateway circuit breaker threshold values (1024) may be too strict for high-throughput systems.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Circuit Breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy circuit breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy circuit breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy circuit breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy circuit breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy circuit breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Circuit Breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Circuit Breakers

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Circuit Breakers can be used to fail quickly and apply back-pressure in response to upstream service degradation.

Envoy Gateway supports the following circuit breaker thresholds:

Concurrent Connections: limit the connections that Envoy can establish to the upstream service. When this threshold is met, new connections will not be established, and some requests will be queued until an existing connection becomes available.
Concurrent Requests: limit on concurrent requests in-flight from Envoy to the upstream service. When this threshold is met, requests will be queued.
Pending Requests: limit the pending request queue size. When this threshold is met, overflowing requests will be terminated with a 503 status code.

Client Traffic Policy

Mon, 01 Jan 0001 00:00:00 +0000

This task explains the usage of the ClientTrafficPolicy API.

Introduction

The ClientTrafficPolicy API allows system administrators to configure the behavior for how the Envoy Proxy server behaves with downstream clients.

Motivation

Motivation

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy is an extension to the Kubernetes Gateway API that allows system administrators to configure how the Envoy Proxy server behaves with downstream clients. It is a policy attachment resource that can be applied to Gateway resources and holds settings for configuring the behavior of the connection between the downstream client and Envoy Proxy listener.

Think of ClientTrafficPolicy as a set of rules for your Gateway’s entry points, it lets you configure specific behaviors for each listener in your Gateway, with more specific rules taking precedence over general ones.

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Before you Begin

Gateway API Extensions

Overview

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces the ClientTrafficPolicy API allowing system administrators to configure the behavior for how the Envoy Proxy server behaves with downstream clients.

Goals

Add an API definition to hold settings for configuring behavior of the connection between the downstream client and Envoy Proxy listener.

Non Goals

Define the API configuration fields in this API.

Implementation

ClientTrafficPolicy is a Direct Policy Attachment type API that can be used to extend Gateway API to define configuration that affect the connection between the downstream client and Envoy Proxy listener.

ClientTrafficPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces the ClientTrafficPolicy API allowing system administrators to configure the behavior for how the Envoy Proxy server behaves with downstream clients.

Goals

Add an API definition to hold settings for configuring behavior of the connection between the downstream client and Envoy Proxy listener.

Non Goals

Define the API configuration fields in this API.

Envoy Gateway follows the CNCF Code of Conduct.

Compatibility Matrix

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway relies on the Envoy Proxy and the Gateway API, and runs within a Kubernetes cluster. Not all versions of each of these products can function together for Envoy Gateway. Supported version combinations are listed below; bold type indicates the versions of the Envoy Proxy and the Gateway API actually compiled into each Envoy Gateway release.

Envoy Gateway version	Envoy Proxy version	Rate Limit version	Gateway API version	Kubernetes version	End of Life
latest	dev-latest	master	v1.4.1	v1.32, v1.33, v1.34, v1.35	n/a
v1.6	distroless-v1.36.2	99d85510	v1.4.0	v1.30, v1.31, v1.32, v1.33	2026/05/13
v1.5	distroless-v1.35.0	a90e0e5d	v1.3.0	v1.30, v1.31, v1.32, v1.33	2026/02/13
v1.4	distroless-v1.34.1	3e085e5b	v1.3.0	v1.30, v1.31, v1.32, v1.33	2025/11/13
v1.3	distroless-v1.33.0	60d8e81b	v1.2.1	v1.29, v1.30, v1.31, v1.32	2025/07/30
v1.2	distroless-v1.32.1	28b1629a	v1.2.0	v1.28, v1.29, v1.30, v1.31	2025/05/06
v1.1	distroless-v1.31.0	91484c59	v1.1.0	v1.27, v1.28, v1.29, v1.30	2025/01/22
v1.0	distroless-v1.29.2	19f2079f	v1.0.0	v1.26, v1.27, v1.28, v1.29	2024/09/13
v0.6	distroless-v1.28-latest	b9796237	v1.0.0	v1.26, v1.27, v1.28	2024/05/02
v0.5	v1.27-latest	e059638d	v0.7.1	v1.25, v1.26, v1.27	2024/01/02
v0.4	v1.26-latest	542a6047	v0.6.2	v1.25, v1.26, v1.27	2023/10/24
v0.3	v1.25-latest	f28024e3	v0.6.1	v1.24, v1.25, v1.26	2023/08/09
v0.2	v1.23-latest		v0.5.1	v1.24	2023/04/20

Config APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

config.gateway.envoyproxy.io/v1alpha1

config.gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the config.gateway.envoyproxy.io API group.

Resource Types

EnvoyGateway

EnvoyGateway is the schema for the envoygateways API.

Field	Description
`apiVersion` string	`config.gateway.envoyproxy.io/v1alpha1`
`kind` string	`EnvoyGateway`
`EnvoyGatewaySpec` EnvoyGatewaySpec	EnvoyGatewaySpec defines the desired state of EnvoyGateway.

EnvoyGatewaySpec

EnvoyGatewaySpec defines the desired state of Envoy Gateway.

Appears in:

Config APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

config.gateway.envoyproxy.io/v1alpha1

config.gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the config.gateway.envoyproxy.io API group.

Resource Types

EnvoyGateway

EnvoyGateway is the schema for the envoygateways API.

Field	Description
`apiVersion` string	`config.gateway.envoyproxy.io/v1alpha1`
`kind` string	`EnvoyGateway`
`EnvoyGatewaySpec` EnvoyGatewaySpec	EnvoyGatewaySpec defines the desired state of EnvoyGateway.

EnvoyGatewayFileProvider

EnvoyGatewayFileProvider defines configuration for the File provider.

Appears in:

EnvoyGatewayProvider

EnvoyGatewayKubernetesProvider

EnvoyGatewayKubernetesProvider defines configuration for the Kubernetes provider.

Config APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

config.gateway.envoyproxy.io/v1alpha1

config.gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the config.gateway.envoyproxy.io API group.

Resource Types

CustomTag

Appears in:

ProxyTracing

Field	Description
`type` CustomTagType	Type defines the type of custom tag.
`literal` LiteralCustomTag	Literal adds hard-coded value to each span. It’s required when the type is “Literal”.
`environment` EnvironmentCustomTag	Environment adds value from environment variable to each span. It’s required when the type is “Environment”.
`requestHeader` RequestHeaderCustomTag	RequestHeader adds value from request header to each span. It’s required when the type is “RequestHeader”.

CustomTagType

Underlying type: string

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Issue 51 specifies the need to design an API for configuring Envoy Gateway. The control plane is configured statically at startup and the data plane is configured dynamically through Kubernetes resources, primarily Gateway API objects. Refer to the Envoy Gateway design doc for additional details regarding Envoy Gateway terminology and configuration.

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration API Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

Goals

Define an initial API to configure Envoy Gateway at startup.
Define an initial API for configuring the managed data plane, e.g. Envoy proxies.

Non-Goals

Implementation of the configuration APIs.
Define the status subresource of the configuration APIs.
Define a complete set of APIs for configuring Envoy Gateway. As stated in the Goals, this document defines the initial configuration APIs.
Define an API for deploying/provisioning/operating Envoy Gateway. If needed, a future Envoy Gateway operator would be responsible for designing and implementing this type of API.
Specify tooling for managing the API, e.g. generate protos, CRDs, controller RBAC, etc.

Control Plane API

The EnvoyGateway API defines the control plane configuration, e.g. Envoy Gateway. Key points of this API are:

Configuration Issues

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

The connection limit features allows users to limit the number of concurrently active TCP connections on a Gateway or a Listener. When the connection limit is reached, new connections are closed immediately by Envoy proxy. It’s possible to configure a delay for connection rejection.

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

Connection Limit

Mon, 01 Jan 0001 00:00:00 +0000

Users may want to limit the number of connections for several reasons:

Protect resources like CPU and Memory.
Ensure that different listeners can receive a fair share of global resources.
Protect from malicious activity like DoS attacks.

Envoy Gateway introduces a new CRD called Client Traffic Policy that allows the user to describe their desired connection limit settings. This instantiated resource can be linked to a Gateway.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for configuring Cross-Origin Resource Sharing (CORS) on Envoy Gateway. CORS defines a way for client web applications that are loaded in one domain to interact with resources in a different domain.

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure CORS. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

You can also configure CORS using the Gateway API’s HTTPCORSFilter, which offers a simpler option but is only supported on the HTTPRoute resource.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure CORS. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

You can also configure CORS using the Gateway API’s HTTPCORSFilter, which offers a simpler option but is only supported on the HTTPRoute resource.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure CORS. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

You can also configure CORS using the Gateway API’s HTTPCORSFilter, which offers a simpler option but is only supported on the HTTPRoute resource.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure CORS. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

You can also configure CORS using the Gateway API’s HTTPCORSFilter, which offers a simpler option but is only supported on the HTTPRoute resource.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure CORS. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

You can also configure CORS using the Gateway API’s HTTPCORSFilter, which offers a simpler option but is only supported on the HTTPRoute resource.

Credential Injection

Mon, 01 Jan 0001 00:00:00 +0000

This task shows how to use HTTPRouteFilter to inject credentials into requests. It can be used to add credentials such as Basic Authentication, JWTs, or API keys before the requests are sent to the backend service.

Mon, 01 Jan 0001 00:00:00 +0000

Note: We recommend creating a EnvoyProxy resource before creating a Gateway or GatewayClass that references it to avoid temporary disruption.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Customize EnvoyProxy

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides a EnvoyProxy CRD that can be linked to the ParametersRef in GatewayClass y cluster admins to customize the managed EnvoyProxy Deployment and Service. To learn more about GatewayClass and ParametersRef, please refer to Gateway API documentation.

Installation

Follow the steps from the Quickstart Guide to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Add GatewayClass ParametersRef

First, you need to add ParametersRef in GatewayClass, and refer to EnvoyProxy Config:

Customize EnvoyProxy

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Customize EnvoyProxy

Mon, 01 Jan 0001 00:00:00 +0000

Note: We recommend creating a EnvoyProxy resource before creating a Gateway or GatewayClass that references it to avoid temporary disruption.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Customize EnvoyProxy

Mon, 01 Jan 0001 00:00:00 +0000

Note: We recommend creating a EnvoyProxy resource before creating a Gateway or GatewayClass that references it to avoid temporary disruption.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Data Plane Observability: Accesslog

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Envoy supports extensible accesslog to different sinks, File, gRPC etc.

Envoy supports customizable access log formats using predefined fields as well as arbitrary HTTP request and response headers.

Envoy supports several built-in access log filters and extension filters that are registered at runtime.

Envoy Gateway leverages Gateway API for configuring managed Envoy proxies. Gateway API defines core, extended, and implementation-specific API support levels for implementers such as Envoy Gateway to expose features. Since accesslog is not covered by Core or Extended APIs, EG should provide an easy to config access log formats and sinks per EnvoyProxy.

Envoy Gateway exposes endpoints at localhost:19000/debug/pprof to run Golang profiles to aid in live debugging.

The endpoints are equivalent to those found in the http/pprof package. /debug/pprof/ returns an HTML page listing the available profiles.

Goals

Add admin server to Envoy Gateway control plane, separated with admin server.
Add pprof support to Envoy Gateway control plane.
Define an API to allow Envoy Gateway to custom admin server configuration.
Define an API to allow Envoy Gateway to open envoy gateway config dump in logs.

The following are the different types of profiles end-user can run:

Debug support in Envoy Gateway

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Envoy Gateway exposes endpoints at localhost:19000/debug/pprof to run Golang profiles to aid in live debugging.

The endpoints are equivalent to those found in the http/pprof package. /debug/pprof/ returns an HTML page listing the available profiles.

Goals

Add admin server to Envoy Gateway control plane, separated with admin server.
Add pprof support to Envoy Gateway control plane.
Define an API to allow Envoy Gateway to custom admin server configuration.
Define an API to allow Envoy Gateway to open envoy gateway config dump in logs.

The following are the different types of profiles end-user can run:

Deploy Envoy Gateway in Air-Gapped Environments

Mon, 01 Jan 0001 00:00:00 +0000

Deploying the Envoy Gateway in an air-gapped environment using a Helm chart requires careful configuration of the values.yaml file as well as adjustments when deploying a Gateway resource.

You will need to specify custom image repositories for the following components in the Helm chart. This can be done on a global level or image level.

Gateway
Ratelimit

Gateway – `values.yaml` Configuration

Example done in image level:

deployment:
 envoyGateway:
 image:
 repository: custom-cr.internal.io/envoyproxy/gateway
 tag: v1.4.1

It’s also possible to define the registry on a global level:

Deploy Envoy Gateway in Air-Gapped Environments

Mon, 01 Jan 0001 00:00:00 +0000

Deploying the Envoy Gateway in an air-gapped environment using a Helm chart requires careful configuration of the values.yaml file as well as adjustments when deploying a Gateway resource.

You will need to specify custom image repositories for the following components in the Helm chart. This can be done on a global level or image level.

Gateway
Ratelimit

Gateway – `values.yaml` Configuration

Example done in image level:

deployment:
 envoyGateway:
 image:
 repository: custom-cr.internal.io/envoyproxy/gateway
 tag: v1.4.1

It’s also possible to define the registry on a global level:

Deploy Envoy Gateway in Air-Gapped Environments

Mon, 01 Jan 0001 00:00:00 +0000

Deploying the Envoy Gateway in an air-gapped environment using a Helm chart requires careful configuration of the values.yaml file as well as adjustments when deploying a Gateway resource.

You will need to specify custom image repositories for the following components in the Helm chart. This can be done on a global level or image level.

Gateway
Ratelimit

Gateway – `values.yaml` Configuration

Example done in image level:

deployment:
 envoyGateway:
 image:
 repository: custom-cr.internal.io/envoyproxy/gateway
 tag: v1.4.1

It’s also possible to define the registry on a global level:

Deploy Envoy Gateway in Air-Gapped Environments

Mon, 01 Jan 0001 00:00:00 +0000

Deploying the Envoy Gateway in an air-gapped environment using a Helm chart requires careful configuration of the values.yaml file as well as adjustments when deploying a Gateway resource.

You will need to specify custom image repositories for the following components in the Helm chart. This can be done on a global level or image level.

Gateway
Ratelimit

Gateway – `values.yaml` Configuration

Example done in image level:

deployment:
 envoyGateway:
 image:
 repository: custom-cr.internal.io/envoyproxy/gateway
 tag: v1.4.1

It’s also possible to define the registry on a global level:

Deploy Envoy Gateway in Air-Gapped Environments

Mon, 01 Jan 0001 00:00:00 +0000

Deploying the Envoy Gateway in an air-gapped environment using a Helm chart requires careful configuration of the values.yaml file as well as adjustments when deploying a Gateway resource.

You will need to specify custom image repositories for the following components in the Helm chart. This can be done on a global level or image level.

Gateway
Ratelimit

Gateway – `values.yaml` Configuration

Example done in image level:

deployment:
 envoyGateway:
 image:
 repository: custom-cr.internal.io/envoyproxy/gateway
 tag: v1.4.1

It’s also possible to define the registry on a global level:

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

If you’ve instantiated multiple GatewayClasses, you can also run separate Envoy Gateway controllers in different namespaces, linking a GatewayClass to each of them for multi-tenancy. Please follow the example Multi-tenancy.

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

One GatewayClass per Envoy Gateway

Envoy Gateway can accept a single GatewayClass resource. If you’ve instantiated multiple GatewayClasses, we recommend running multiple Envoy Gateway controllers in different namespaces, linking a GatewayClass to each of them.
Support for accepting multiple GatewayClass is being tracked here.

Supported Modes

Kubernetes

The current deployment model is - Envoy Gateway watches for resources such a Service & HTTPRoute in all namespaces and creates managed data plane resources such as EnvoyProxy Deployment in the namespace where Envoy Gateway is running.
Support for alternate deployment modes is being tracked here.

Multi-tenancy

Kubernetes

A tenant is a group within an organization (e.g. a team or department) who shares organizational resources. We recommend each tenant deploy their own Envoy Gateway controller in their respective namespace. Below is an example of deploying Envoy Gateway by the marketing and product teams in separate namespaces.

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

One GatewayClass per Envoy Gateway

Envoy Gateway can accept a single GatewayClass resource. If you’ve instantiated multiple GatewayClasses, we recommend running multiple Envoy Gateway controllers in different namespaces, linking a GatewayClass to each of them.
Support for accepting multiple GatewayClass is being tracked here.

Supported Modes

Kubernetes

The current deployment model is - Envoy Gateway watches for resources such a Service & HTTPRoute in all namespaces and creates managed data plane resources such as EnvoyProxy Deployment in the namespace where Envoy Gateway is running.
Support for alternate deployment modes is being tracked here.

Multi-tenancy

Kubernetes

A tenant is a group within an organization (e.g. a team or department) who shares organizational resources. We recommend each tenant deploy their own Envoy Gateway controller in their respective namespace. Below is an example of deploying Envoy Gateway by the marketing and product teams in separate namespaces.

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

One GatewayClass per Envoy Gateway

Envoy Gateway can accept a single GatewayClass resource. If you’ve instantiated multiple GatewayClasses, we recommend running multiple Envoy Gateway controllers in different namespaces, linking a GatewayClass to each of them.
Support for accepting multiple GatewayClass is being tracked here.

Supported Modes

Kubernetes

The default deployment model is - Envoy Gateway watches for resources such a Service & HTTPRoute in all namespaces and creates managed data plane resources such as EnvoyProxy Deployment in the namespace where Envoy Gateway is running.
Envoy Gateway also supports Namespaced deployment mode, you can watch resources in the specific namespaces by assigning EnvoyGateway.provider.kubernetes.watch.namespaces and creates managed data plane resources in the namespace where Envoy Gateway is running.
Support for alternate deployment modes is being tracked here.

Multi-tenancy

Kubernetes

A tenant is a group within an organization (e.g. a team or department) who shares organizational resources. We recommend each tenant deploy their own Envoy Gateway controller in their respective namespace. Below is an example of deploying Envoy Gateway by the marketing and product teams in separate namespaces.

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

Separate Envoy Gateway Controllers

Deployment Mode

Mon, 01 Jan 0001 00:00:00 +0000

Deployment modes

One GatewayClass per Envoy Gateway Controller

An Envoy Gateway is associated with a single GatewayClass resource under one controller. This is the simplest deployment mode and is suitable for scenarios where each Gateway needs to have its own dedicated set of resources and configurations.

Multiple GatewayClasses per Envoy Gateway Controller

An Envoy Gateway is associated with multiple GatewayClass resources under one controller.
Support for accepting multiple GatewayClasses was added here.

cat <<EOF | kubectl apply -f -
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
 name: direct-response
spec:
 parentRefs:
 - name: eg
 hostnames:
 - "www.example.com" 
 rules:
 - matches:
 - path:
 type: PathPrefix
 value: /inline
 filters:
 - type: ExtensionRef
 extensionRef:
 group: gateway.envoyproxy.io
 kind: HTTPRouteFilter
 name: direct-response-inline
 - matches:
 - path:
 type: PathPrefix
 value: /value-ref
 filters:
 - type: ExtensionRef
 extensionRef:
 group: gateway.envoyproxy.io
 kind: HTTPRouteFilter
 name: direct-response-value-ref
---
apiVersion: v1
kind: ConfigMap
metadata:
 name: value-ref-response
data:
 response.body: '{"error": "Internal Server Error"}'
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: HTTPRouteFilter
metadata:
 name: direct-response-inline
spec:
 directResponse:
 contentType: text/plain
 statusCode: 503
 body:
 type: Inline
 inline: "Oops! Your request is not found."
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: HTTPRouteFilter
metadata:
 name: direct-response-value-ref
spec:
 directResponse:
 contentType: application/json
 statusCode: 500
 body:
 type: ValueRef
 valueRef:
 group: ""
 kind: ConfigMap
 name: value-ref-response
EOF

Note: the size of the response body (whether provided in-line or via a reference) cannot exceed 4096 bytes.

egctl Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

EG should provide a command line tool with following capabilities:

Collect configuration from envoy proxy and gateway
Analyse system configuration to diagnose any issues in envoy gateway

This tool is named egctl.

Syntax

Use the following syntax to run egctl commands from your terminal window:

egctl [command] [entity] [name] [flags]

where command, name, and flags are:

command: Specifies the operation that you want to perform on one or more resources, for example config, version.

egctl Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

EG should provide a command line tool with following capabilities:

Collect configuration from envoy proxy and gateway
Analyse system configuration to diagnose any issues in envoy gateway

This tool is named egctl.

Syntax

Use the following syntax to run egctl commands from your terminal window:

egctl [command] [entity] [name] [flags]

where command, name, and flags are:

command: Specifies the operation that you want to perform on one or more resources, for example config, version.

egctl Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

EG should provide a command line tool with following capabilities:

Collect configuration from envoy proxy and gateway
Analyse system configuration to diagnose any issues in envoy gateway

This tool is named egctl.

Syntax

Use the following syntax to run egctl commands from your terminal window:

egctl [command] [entity] [name] [flags]

where command, name, and flags are:

command: Specifies the operation that you want to perform on one or more resources, for example config, version.

egctl Design

Mon, 01 Jan 0001 00:00:00 +0000

Motivation

EG should provide a command line tool with following capabilities:

Collect configuration from envoy proxy and gateway
Analyse system configuration to diagnose any issues in envoy gateway

This tool is named egctl.

Syntax

Use the following syntax to run egctl commands from your terminal window:

egctl [command] [entity] [name] [flags]

where command, name, and flags are:

command: Specifies the operation that you want to perform on one or more resources, for example config, version.

Enterprise Support

Mon, 01 Jan 0001 00:00:00 +0000

Enterprise Support for Envoy Gateway

Envoy Gateway is a sub-project of Envoy, a graduated CNCF project under the Cloud Native Computing Foundation (CNCF), which is a part of the Linux Foundation, a 501(c)(6) nonprofit organization.

Professional Support & Services

While Envoy Gateway is open source and free to use, many organizations benefit from professional support, training, and consulting services to accelerate adoption and ensure production success.

Why Choose Enterprise Support?

🛡️ Production Assurance – Get expert guidance for mission-critical deployments with guaranteed response times and SLAs
🚀 Faster Implementation – Leverage professional services to accelerate your API gateway rollout and avoid common pitfalls
📚 Training & Best Practices – Access comprehensive training programs and learn proven deployment patterns from experts
🔧 Custom Solutions – Get help with complex integrations, custom policies, and advanced use cases

Envoy Gateway Extensions Design

Mon, 01 Jan 0001 00:00:00 +0000

As outlined in the official goals for the Envoy Gateway project, one of the main goals is to “provide a common foundation for vendors to build value-added products without having to re-engineer fundamental interactions”. Development of the Envoy Gateway project has been focused on developing the core features for the project and Kubernetes Gateway API conformance. This system focuses on the “common foundation for vendors” component by introducing a way for vendors to extend Envoy Gateway.

Envoy Gateway Extensions Design

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway Extensions Design

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway Extensions Design

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway Resources

Mon, 01 Jan 0001 00:00:00 +0000

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Overview

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Kubernetes Gateway API Resources

GatewayClass: Defines a class of Gateways with common configuration.
Gateway: Specifies how traffic can enter the cluster.
Routes: HTTPRoute, GRPCRoute, TLSRoute, TCPRoute, UDPRoute: Define routing rules for different types of traffic.

Envoy Gateway (EG) API Resources

EnvoyProxy: Represents the deployment and configuration of the Envoy proxy within a Kubernetes cluster, managing its lifecycle and settings.
EnvoyPatchPolicy, ClientTrafficPolicy, SecurityPolicy, BackendTrafficPolicy, EnvoyExtensionPolicy, BackendTLSPolicy: Additional policies and configurations specific to Envoy Gateway.
Backend: A resource that makes routing to cluster-external backends easier and makes access to external processes via Unix Domain Sockets possible.

Resource	API	Required	Purpose	References	Description
GatewayClass	Gateway API	Yes	Gateway Config	Core	Defines a class of Gateways with common configuration.
Gateway	Gateway API	Yes	Gateway Config	GatewayClass	Specifies how traffic can enter the cluster.
HTTPRoute GRPCRoute TLSRoute TCPRoute UDPRoute	Gateway API	Yes	Routing	Gateway	Define routing rules for different types of traffic. Note:For simplicity these resources are referenced collectively as Route in the References column
Backend	EG API	No	Routing	N/A	Used for routing to cluster-external backends using FQDN or IP. Can also be used when you want to extend Envoy with external processes accessed via Unix Domain Sockets.
ClientTrafficPolicy	EG API	No	Traffic Handling	Gateway	Specifies policies for handling client traffic, including rate limiting, retries, and other client-specific configurations.
BackendTrafficPolicy	EG API	No	Traffic Handling	Gateway Route	Specifies policies for traffic directed towards backend services, including load balancing, health checks, and failover strategies. Note:Most specific configuration wins
SecurityPolicy	EG API	No	Security	Gateway Route	Defines security-related policies such as authentication, authorization, and encryption settings for traffic handled by Envoy Gateway. Note:Most specific configuration wins
BackendTLSPolicy	Gateway API	No	Security	Service	Defines TLS settings for backend connections, including certificate management, TLS version settings, and other security configurations. This policy is applied to Kubernetes Services.
EnvoyProxy	EG API	No	Customize & Extend	GatewayClass Gateway	The EnvoyProxy resource represents the deployment and configuration of the Envoy proxy itself within a Kubernetes cluster, managing its lifecycle and settings. Note:Most specific configuration wins
EnvoyPatchPolicy	EG API	No	Customize & Extend	GatewayClass Gateway	This policy defines custom patches to be applied to Envoy Gateway resources, allowing users to tailor the configuration to their specific needs. Note:Most specific configuration wins
EnvoyExtensionPolicy	EG API	No	Customize & Extend	Gateway Route, Backend	Allows for the configuration of Envoy proxy extensions, enabling custom behavior and functionality. Note:Most specific configuration wins

Envoy Gateway Resources

Mon, 01 Jan 0001 00:00:00 +0000

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Overview

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Kubernetes Gateway API Resources

GatewayClass: Defines a class of Gateways with common configuration.
Gateway: Specifies how traffic can enter the cluster.
Routes: HTTPRoute, GRPCRoute, TLSRoute, TCPRoute, UDPRoute: Define routing rules for different types of traffic.

Envoy Gateway (EG) API Resources

EnvoyProxy: Represents the deployment and configuration of the Envoy proxy within a Kubernetes cluster, managing its lifecycle and settings.
EnvoyPatchPolicy, ClientTrafficPolicy, SecurityPolicy, BackendTrafficPolicy, EnvoyExtensionPolicy, BackendTLSPolicy: Additional policies and configurations specific to Envoy Gateway.
Backend: A resource that makes routing to cluster-external backends easier and makes access to external processes via Unix Domain Sockets possible.

Resource	API	Required	Purpose	References	Description
GatewayClass	Gateway API	Yes	Gateway Config	Core	Defines a class of Gateways with common configuration.
Gateway	Gateway API	Yes	Gateway Config	GatewayClass	Specifies how traffic can enter the cluster.
HTTPRoute GRPCRoute TLSRoute TCPRoute UDPRoute	Gateway API	Yes	Routing	Gateway	Define routing rules for different types of traffic. Note:For simplicity these resources are referenced collectively as Route in the References column
Backend	EG API	No	Routing	N/A	Used for routing to cluster-external backends using FQDN or IP. Can also be used when you want to extend Envoy with external processes accessed via Unix Domain Sockets.
ClientTrafficPolicy	EG API	No	Traffic Handling	Gateway	Specifies policies for handling client traffic, including rate limiting, retries, and other client-specific configurations.
BackendTrafficPolicy	EG API	No	Traffic Handling	Gateway, Route	Specifies policies for traffic directed towards backend services, including load balancing, health checks, and failover strategies. Note:Most specific configuration wins
SecurityPolicy	EG API	No	Security	Gateway, Route	Defines security-related policies such as authentication, authorization, and encryption settings for traffic handled by Envoy Gateway. Note:Most specific configuration wins
BackendTLSPolicy	Gateway API	No	Security	Service	Defines TLS settings for backend connections, including certificate management, TLS version settings, and other security configurations. This policy is applied to Kubernetes Services.
EnvoyProxy	EG API	No	Customize & Extend	GatewayClass, Gateway	The EnvoyProxy resource represents the deployment and configuration of the Envoy proxy itself within a Kubernetes cluster, managing its lifecycle and settings. Note:Most specific configuration wins
EnvoyPatchPolicy	EG API	No	Customize & Extend	GatewayClass, Gateway	This policy defines custom patches to be applied to Envoy Gateway resources, allowing users to tailor the configuration to their specific needs. Note:Most specific configuration wins
EnvoyExtensionPolicy	EG API	No	Customize & Extend	Gateway, Route, Backend	Allows for the configuration of Envoy proxy extensions, enabling custom behavior and functionality. Note:Most specific configuration wins
HTTPRouteFilter	EG API	No	Customize & Extend	HTTPRoute	Allows for the additional request/response processing.

Envoy Gateway Resources

Mon, 01 Jan 0001 00:00:00 +0000

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Overview

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Kubernetes Gateway API Resources

GatewayClass: Defines a class of Gateways with common configuration.
Gateway: Specifies how traffic can enter the cluster.
Routes: HTTPRoute, GRPCRoute, TLSRoute, TCPRoute, UDPRoute: Define routing rules for different types of traffic.

Envoy Gateway (EG) API Resources

EnvoyProxy: Represents the deployment and configuration of the Envoy proxy within a Kubernetes cluster, managing its lifecycle and settings.
EnvoyPatchPolicy, ClientTrafficPolicy, SecurityPolicy, BackendTrafficPolicy, EnvoyExtensionPolicy, BackendTLSPolicy: Additional policies and configurations specific to Envoy Gateway.
Backend: A resource that makes routing to cluster-external backends easier and makes access to external processes via Unix Domain Sockets possible.

Resource	API	Required	Purpose	References	Description
GatewayClass	Gateway API	Yes	Gateway Config	Core	Defines a class of Gateways with common configuration.
Gateway	Gateway API	Yes	Gateway Config	GatewayClass	Specifies how traffic can enter the cluster.
HTTPRoute GRPCRoute TLSRoute TCPRoute UDPRoute	Gateway API	Yes	Routing	Gateway	Define routing rules for different types of traffic. Note:For simplicity these resources are referenced collectively as Route in the References column
Backend	EG API	No	Routing	N/A	Used for routing to cluster-external backends using FQDN or IP. Can also be used when you want to extend Envoy with external processes accessed via Unix Domain Sockets.
ClientTrafficPolicy	EG API	No	Traffic Handling	Gateway	Specifies policies for handling client traffic, including rate limiting, retries, and other client-specific configurations.
BackendTrafficPolicy	EG API	No	Traffic Handling	Gateway, Route	Specifies policies for traffic directed towards backend services, including load balancing, health checks, and failover strategies. Note:Most specific configuration wins
SecurityPolicy	EG API	No	Security	Gateway, Route	Defines security-related policies such as authentication, authorization, and encryption settings for traffic handled by Envoy Gateway. Note:Most specific configuration wins
BackendTLSPolicy	Gateway API	No	Security	Service	Defines TLS settings for backend connections, including certificate management, TLS version settings, and other security configurations. This policy is applied to Kubernetes Services.
EnvoyProxy	EG API	No	Customize & Extend	GatewayClass, Gateway	The EnvoyProxy resource represents the deployment and configuration of the Envoy proxy itself within a Kubernetes cluster, managing its lifecycle and settings. Note:Most specific configuration wins
EnvoyPatchPolicy	EG API	No	Customize & Extend	GatewayClass, Gateway	This policy defines custom patches to be applied to Envoy Gateway resources, allowing users to tailor the configuration to their specific needs. Note:Most specific configuration wins
EnvoyExtensionPolicy	EG API	No	Customize & Extend	Gateway, Route, Backend	Allows for the configuration of Envoy proxy extensions, enabling custom behavior and functionality. Note:Most specific configuration wins
HTTPRouteFilter	EG API	No	Customize & Extend	HTTPRoute	Allows for the additional request/response processing.

Envoy Gateway Resources

Mon, 01 Jan 0001 00:00:00 +0000

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Overview

There are several resources that play a part in enabling you to meet your Kubernetes ingress traffic handling needs. This page provides a brief overview of the resources you’ll be working with.

Kubernetes Gateway API Resources

GatewayClass: Defines a class of Gateways with common configuration.
Gateway: Specifies how traffic can enter the cluster.
Routes: HTTPRoute, GRPCRoute, TLSRoute, TCPRoute, UDPRoute: Define routing rules for different types of traffic.

Envoy Gateway (EG) API Resources

EnvoyProxy: Represents the deployment and configuration of the Envoy proxy within a Kubernetes cluster, managing its lifecycle and settings.
EnvoyPatchPolicy, ClientTrafficPolicy, SecurityPolicy, BackendTrafficPolicy, EnvoyExtensionPolicy, BackendTLSPolicy: Additional policies and configurations specific to Envoy Gateway.
Backend: A resource that makes routing to cluster-external backends easier and makes access to external processes via Unix Domain Sockets possible.

Resource	API	Required	Purpose	References	Description
GatewayClass	Gateway API	Yes	Gateway Config	Core	Defines a class of Gateways with common configuration.
Gateway	Gateway API	Yes	Gateway Config	GatewayClass	Specifies how traffic can enter the cluster.
HTTPRoute GRPCRoute TLSRoute TCPRoute UDPRoute	Gateway API	Yes	Routing	Gateway	Define routing rules for different types of traffic. Note:For simplicity these resources are referenced collectively as Route in the References column
Backend	EG API	No	Routing	N/A	Used for routing to cluster-external backends using FQDN or IP. Can also be used when you want to extend Envoy with external processes accessed via Unix Domain Sockets.
ClientTrafficPolicy	EG API	No	Traffic Handling	Gateway	Specifies policies for handling client traffic, including rate limiting, retries, and other client-specific configurations.
BackendTrafficPolicy	EG API	No	Traffic Handling	Gateway, Route	Specifies policies for traffic directed towards backend services, including load balancing, health checks, and failover strategies. Note:Most specific configuration wins
SecurityPolicy	EG API	No	Security	Gateway, Route	Defines security-related policies such as authentication, authorization, and encryption settings for traffic handled by Envoy Gateway. Note:Most specific configuration wins
BackendTLSPolicy	Gateway API	No	Security	Service	Defines TLS settings for backend connections, including certificate management, TLS version settings, and other security configurations. This policy is applied to Kubernetes Services.
EnvoyProxy	EG API	No	Customize & Extend	GatewayClass, Gateway	The EnvoyProxy resource represents the deployment and configuration of the Envoy proxy itself within a Kubernetes cluster, managing its lifecycle and settings. Note:Most specific configuration wins
EnvoyPatchPolicy	EG API	No	Customize & Extend	GatewayClass, Gateway	This policy defines custom patches to be applied to Envoy Gateway resources, allowing users to tailor the configuration to their specific needs. Note:Most specific configuration wins
EnvoyExtensionPolicy	EG API	No	Customize & Extend	Gateway, Route, Backend	Allows for the configuration of Envoy proxy extensions, enabling custom behavior and functionality. Note:Most specific configuration wins
HTTPRouteFilter	EG API	No	Customize & Extend	HTTPRoute	Allows for the additional request/response processing.

Envoy Patch Policy

Mon, 01 Jan 0001 00:00:00 +0000

This task explains the usage of the EnvoyPatchPolicy API. Note: This API is meant for users extremely familiar with Envoy xDS semantics. Also before considering this API for production use cases, please be aware that this API is unstable and the outcome may change across versions. Use at your own risk.

Introduction

The EnvoyPatchPolicy API allows user to modify the output xDS configuration generated by Envoy Gateway intended for EnvoyProxy, using JSON Patch semantics.

Envoy Patch Policy

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

The EnvoyPatchPolicy API allows user to modify the output xDS configuration generated by Envoy Gateway intended for EnvoyProxy, using JSON Patch semantics.

Envoy Patch Policy

Envoy Gateway already provides two methods of control plane extensibility that can be used to achieve this functionality:

Envoy Patch Policy can be used to patch Listener filters and HTTP Connection Manager filters.
Envoy Extension Manager can be used to programmatically mutate Listener filters and HTTP Connection Manager filters.

These approaches require a high level of Envoy and Envoy Gateway expertise and may create a significant operational burden for users (see Alternatives for more details). For this reason, this document proposes to support Envoy data plane extensibility options as first class citizens of Envoy Gateway.

EnvoyPatchPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design introduces the EnvoyPatchPolicy API allowing users to modify the generated Envoy xDS Configuration that Envoy Gateway generates before sending it to Envoy Proxy.

Envoy Gateway allows users to configure networking and security intent using the upstream Gateway API as well as implementation specific Extension APIs defined in this project to provide a more batteries included experience for application developers.

These APIs are an abstracted version of the underlying Envoy xDS API to provide a better user experience for the application developer, exposing and setting only a subset of the fields for a specific feature, sometimes in a opinionated way (e.g RateLimit)
These APIs do not expose all the features capabilities that Envoy has either because these features are desired but the API is not defined yet or the project cannot support such an extensive list of features. To alleviate this problem, and provide an interim solution for a small section of advanced users who are well versed in Envoy xDS API and its capabilities, this API is being introduced.

Goals

Add an API allowing users to modify the generated xDS Configuration

Non Goals

Support multiple patch mechanisims

Implementation

EnvoyPatchPolicy is a Direct Policy Attachment type API that can be used to extend Gateway API Modifications to the generated xDS configuration can be provided as a JSON Patch which is defined in RFC 6902. This patching mechanism has been adopted in Kubernetes as well as Kustomize to update resource objects.

EnvoyPatchPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design introduces the EnvoyPatchPolicy API allowing users to modify the generated Envoy xDS Configuration that Envoy Gateway generates before sending it to Envoy Proxy.

These APIs are an abstracted version of the underlying Envoy xDS API to provide a better user experience for the application developer, exposing and setting only a subset of the fields for a specific feature, sometimes in a opinionated way (e.g RateLimit)
These APIs do not expose all the features capabilities that Envoy has either because these features are desired but the API is not defined yet or the project cannot support such an extensive list of features. To alleviate this problem, and provide an interim solution for a small section of advanced users who are well versed in Envoy xDS API and its capabilities, this API is being introduced.

Goals

Add an API allowing users to modify the generated xDS Configuration

Non Goals

Support multiple patch mechanisims

Implementation

EnvoyPatchPolicy

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design introduces the EnvoyPatchPolicy API allowing users to modify the generated Envoy xDS Configuration that Envoy Gateway generates before sending it to Envoy Proxy.

These APIs are an abstracted version of the underlying Envoy xDS API to provide a better user experience for the application developer, exposing and setting only a subset of the fields for a specific feature, sometimes in a opinionated way (e.g RateLimit)
These APIs do not expose all the features capabilities that Envoy has either because these features are desired but the API is not defined yet or the project cannot support such an extensive list of features. To alleviate this problem, and provide an interim solution for a small section of advanced users who are well versed in Envoy xDS API and its capabilities, this API is being introduced.

Goals

Add an API allowing users to modify the generated xDS Configuration

Non Goals

Support multiple patch mechanisms

Implementation

Extension APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

AuthenticationFilter

Field	Description
`apiVersion` string	`gateway.envoyproxy.io/v1alpha1`
`kind` string	`AuthenticationFilter`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` AuthenticationFilterSpec	Spec defines the desired state of the AuthenticationFilter type.

AuthenticationFilterSpec

AuthenticationFilterSpec defines the desired state of the AuthenticationFilter type.

Extension APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

AuthenticationFilter

Field	Description
`apiVersion` string	`gateway.envoyproxy.io/v1alpha1`
`kind` string	`AuthenticationFilter`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` AuthenticationFilterSpec	Spec defines the desired state of the AuthenticationFilter type.

AuthenticationFilterSpec

AuthenticationFilterSpec defines the desired state of the AuthenticationFilter type.

Extension APIs

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

AuthenticationFilter

Field	Description
`apiVersion` string	`gateway.envoyproxy.io/v1alpha1`
`kind` string	`AuthenticationFilter`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` AuthenticationFilterSpec	Spec defines the desired state of the AuthenticationFilter type.

AuthenticationFilterSpec

AuthenticationFilterSpec defines the desired state of the AuthenticationFilter type.

Envoy Gateway Extension Server

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Failover

Mon, 01 Jan 0001 00:00:00 +0000

Active-passive failover in an API gateway setup is like having a backup plan in place to keep things running smoothly if something goes wrong. Here’s why it’s valuable:

Staying Online: When the main (or “active”) backend has issues or goes offline, the fallback (or “passive”) backend is ready to step in instantly. This helps keep your API accessible and your services running, so users don’t even notice any interruptions.
Automatic Switch Over: If a problem occurs, the system can automatically switch traffic over to the fallback backend. This avoids needing someone to jump in and fix things manually, which could take time and might even lead to mistakes.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Envoy Gateway introduces a new CRD called BackendTrafficPolicy that allows the user to describe their desired fault scenarios. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fault Injection

Mon, 01 Jan 0001 00:00:00 +0000

Envoy fault injection can be used to inject delays and abort requests to mimic failure scenarios such as service failures and overloads.

Envoy Gateway supports the following fault scenarios:

delay fault: inject a custom fixed delay into the request with a certain probability to simulate delay failures.
abort fault: inject a custom response code into the response with a certain probability to simulate abort failures.

Fuzzing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

This design document introduces Fuzz Testing in Envoy Gateway. Its goal is to detect unexpected crashes, memory leaks, and undefined behaviors in the translation of Gateway API resources and configuration parsing, areas that may not be fully covered by unit tests.

Additionally, OSS-Fuzz provides a continuous fuzzing infrastructure for popular open-source projects. By writing fuzz tests, we can leverage OSS-Fuzz to continuously fuzz Envoy Gateway against a wide range of inputs, improving its resilience and reliability.

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

A Gateway is 1:1 with the lifecycle of the configuration of infrastructure. When a user creates a Gateway, some load balancing infrastructure is provisioned or configured (see below for details) by the GatewayClass controller. Gateway is the resource that triggers actions in this API. Other resources in this API are configuration snippets until a Gateway has been created to link the resources together.

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](../concepts/versioning).

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

Gateway

Mon, 01 Jan 0001 00:00:00 +0000

The `Gateway` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.117.3
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.annotations	object	`{}`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`nil`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.121.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.datadog.containerPort	int	`8126`
opentelemetry-collector.ports.datadog.enabled	bool	`true`
opentelemetry-collector.ports.datadog.hostPort	int	`8126`
opentelemetry-collector.ports.datadog.protocol	string	`"TCP"`
opentelemetry-collector.ports.datadog.servicePort	int	`8126`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.55.0
https://grafana.github.io/helm-charts	alloy	1.5.2
https://grafana.github.io/helm-charts	grafana	10.5.13
https://grafana.github.io/helm-charts	loki	6.51.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.144.0
https://prometheus-community.github.io/helm-charts	prometheus	28.6.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.annotations	object	`{}`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].editable	bool	`true`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.datasources.“datasources.yaml”.datasources[1].editable	bool	`true`
grafana.datasources.“datasources.yaml”.datasources[1].name	string	`"Tempo"`
grafana.datasources.“datasources.yaml”.datasources[1].type	string	`"tempo"`
grafana.datasources.“datasources.yaml”.datasources[1].url	string	`"http://tempo:3100"`
grafana.datasources.“datasources.yaml”.datasources[2].editable	bool	`true`
grafana.datasources.“datasources.yaml”.datasources[2].name	string	`"Loki"`
grafana.datasources.“datasources.yaml”.datasources[2].type	string	`"loki"`
grafana.datasources.“datasources.yaml”.datasources[2].url	string	`"http://loki:3100"`
grafana.enabled	bool	`true`
grafana.env.GF_AUTH_ANONYMOUS_ENABLED	string	`"true"`
grafana.env.GF_AUTH_ANONYMOUS_ORG_ROLE	string	`"Admin"`
grafana.env.GF_AUTH_BASIC_ENABLED	string	`"false"`
grafana.env.GF_SECURITY_ADMIN_PASSWORD	string	`"admin"`
grafana.env.GF_SECURITY_ADMIN_USER	string	`"admin"`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.chunksCache.enabled	bool	`false`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.instance_addr	string	`"${INSTANCE_ADDR}"`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.commonConfig.ring.kvstore.store	string	`"memberlist"`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.limits_config.otlp_config.resource_attributes.attributes_config[0].action	string	`"index_label"`
loki.loki.limits_config.otlp_config.resource_attributes.attributes_config[0].attributes[0]	string	`"exporter"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.loki.useTestSchema	bool	`true`
loki.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.resultsCache.enabled	bool	`false`
loki.singleBinary.extraArgs[0]	string	`"-config.expand-env=true"`
loki.singleBinary.extraEnv[0].name	string	`"INSTANCE_ADDR"`
loki.singleBinary.extraEnv[0].valueFrom.fieldRef.fieldPath	string	`"status.podIP"`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.otlphttp/loki.endpoint	string	`"http://loki.monitoring.svc:3100/otlp"`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`":19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.transform/loki.log_statements[0].context	string	`"log"`
opentelemetry-collector.config.processors.transform/loki.log_statements[0].statements[0]	string	`"set(resource.attributes[\"exporter\"], \"OTLP\")"`
opentelemetry-collector.config.processors.transform/loki.log_statements[0].statements[1]	string	`"set(resource.attributes[\"k8s.namespace.name\"], log.attributes[\"k8s.namespace.name\"])"`
opentelemetry-collector.config.processors.transform/loki.log_statements[0].statements[2]	string	`"delete_key(log.attributes, \"k8s.namespace.name\")"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"otlphttp/loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"transform/loki"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.144.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.datadog.containerPort	int	`8126`
opentelemetry-collector.ports.datadog.enabled	bool	`true`
opentelemetry-collector.ports.datadog.hostPort	int	`8126`
opentelemetry-collector.ports.datadog.protocol	string	`"TCP"`
opentelemetry-collector.ports.datadog.servicePort	int	`8126`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
opentelemetry-collector.presets.kubernetesAttributes.enabled	bool	`true`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.73.1
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.logging.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"0.0.0.0:19001"`
opentelemetry-collector.config.extensions.health_check	object	`{}`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"${env:MY_POD_IP}:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"${env:MY_POD_IP}:4318"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"${env:MY_POD_IP}:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"zipkin"`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.mode	string	`"deployment"`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.108.0
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.mode	string	`"deployment"`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.117.3
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`nil`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.121.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.117.3
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`nil`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.121.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.117.3
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.annotations	object	`{}`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`nil`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.121.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.datadog.containerPort	int	`8126`
opentelemetry-collector.ports.datadog.enabled	bool	`true`
opentelemetry-collector.ports.datadog.hostPort	int	`8126`
opentelemetry-collector.ports.datadog.protocol	string	`"TCP"`
opentelemetry-collector.ports.datadog.servicePort	int	`8126`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Addons Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

An Add-ons Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Requirements

Repository	Name	Version
https://fluent.github.io/helm-charts	fluent-bit	0.30.4
https://grafana.github.io/helm-charts	alloy	0.9.2
https://grafana.github.io/helm-charts	grafana	8.0.0
https://grafana.github.io/helm-charts	loki	4.8.0
https://grafana.github.io/helm-charts	tempo	1.3.1
https://open-telemetry.github.io/opentelemetry-helm-charts	opentelemetry-collector	0.117.3
https://prometheus-community.github.io/helm-charts	prometheus	25.21.0

Values

Key	Type	Default
alloy.alloy.configMap.content	string	"// Write your Alloy config here:\nlogging {\n level = \"info\"\n format = \"logfmt\"\n}\nloki.write \"alloy\" {\n endpoint {\n url = \"http://loki.monitoring.svc:3100/loki/api/v1/push\"\n }\n}\n// discovery.kubernetes allows you to find scrape targets from Kubernetes resources.\n// It watches cluster state and ensures targets are continually synced with what is currently running in your cluster.\ndiscovery.kubernetes \"pod\" {\n role = \"pod\"\n}\n\n// discovery.relabel rewrites the label set of the input targets by applying one or more relabeling rules.\n// If no rules are defined, then the input targets are exported as-is.\ndiscovery.relabel \"pod_logs\" {\n targets = discovery.kubernetes.pod.targets\n\n // Label creation - \"namespace\" field from \"__meta_kubernetes_namespace\"\n rule {\n source_labels = [\"__meta_kubernetes_namespace\"]\n action = \"replace\"\n target_label = \"namespace\"\n }\n\n // Label creation - \"pod\" field from \"__meta_kubernetes_pod_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_name\"]\n action = \"replace\"\n target_label = \"pod\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_container_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"container\"\n }\n\n // Label creation - \"app\" field from \"__meta_kubernetes_pod_label_app_kubernetes_io_name\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_label_app_kubernetes_io_name\"]\n action = \"replace\"\n target_label = \"app\"\n }\n\n // Label creation - \"job\" field from \"__meta_kubernetes_namespace\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_namespace/__meta_kubernetes_pod_container_name\n rule {\n source_labels = [\"__meta_kubernetes_namespace\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"job\"\n separator = \"/\"\n replacement = \"$1\"\n }\n\n // Label creation - \"container\" field from \"__meta_kubernetes_pod_uid\" and \"__meta_kubernetes_pod_container_name\"\n // Concatenate values __meta_kubernetes_pod_uid/__meta_kubernetes_pod_container_name.log\n rule {\n source_labels = [\"__meta_kubernetes_pod_uid\", \"__meta_kubernetes_pod_container_name\"]\n action = \"replace\"\n target_label = \"__path__\"\n separator = \"/\"\n replacement = \"/var/log/pods/$1/.log\"\n }\n\n // Label creation - \"container_runtime\" field from \"__meta_kubernetes_pod_container_id\"\n rule {\n source_labels = [\"__meta_kubernetes_pod_container_id\"]\n action = \"replace\"\n target_label = \"container_runtime\"\n regex = \"^(\\\\S+):\\\\/\\\\/.+$\"\n replacement = \"$1\"\n }\n}\n\n// loki.source.kubernetes tails logs from Kubernetes containers using the Kubernetes API.\nloki.source.kubernetes \"pod_logs\" {\n targets = discovery.relabel.pod_logs.output\n forward_to = [loki.process.pod_logs.receiver]\n}\n// loki.process receives log entries from other Loki components, applies one or more processing stages,\n// and forwards the results to the list of receivers in the component’s arguments.\nloki.process \"pod_logs\" {\n stage.static_labels {\n values = {\n cluster = \"envoy-gateway\",\n }\n }\n\n forward_to = [loki.write.alloy.receiver]\n}"
alloy.enabled	bool	`false`
alloy.fullnameOverride	string	`"alloy"`
dashboard.annotations	object	`{}`
dashboard.labels	object	`{}`
fluent-bit.config.filters	string	`"[FILTER]\n Name kubernetes\n Match kube.\n Merge_Log On\n Keep_Log Off\n K8S-Logging.Parser On\n K8S-Logging.Exclude On\n\n[FILTER]\n Name grep\n Match kube.\n Regex $kubernetes['container_name'] ^envoy$\n\n[FILTER]\n Name parser\n Match kube.*\n Key_Name log\n Parser envoy\n Reserve_Data True\n"`
fluent-bit.config.inputs	string	`"[INPUT]\n Name tail\n Path /var/log/containers/.log\n multiline.parser docker, cri\n Tag kube.\n Mem_Buf_Limit 5MB\n Skip_Long_Lines On\n"`
fluent-bit.config.outputs	string	`"[OUTPUT]\n Name loki\n Match kube.*\n Host loki.monitoring.svc.cluster.local\n Port 3100\n Labels job=fluentbit, app=$kubernetes['labels']['app'], k8s_namespace_name=$kubernetes['namespace_name'], k8s_pod_name=$kubernetes['pod_name'], k8s_container_name=$kubernetes['container_name']\n"`
fluent-bit.config.service	string	`"[SERVICE]\n Daemon Off\n Flush {{ .Values.flush }}\n Log_Level {{ .Values.logLevel }}\n Parsers_File parsers.conf\n Parsers_File custom_parsers.conf\n HTTP_Server On\n HTTP_Listen 0.0.0.0\n HTTP_Port {{ .Values.metricsPort }}\n Health_Check On\n"`
fluent-bit.enabled	bool	`true`
fluent-bit.fullnameOverride	string	`"fluent-bit"`
fluent-bit.image.repository	string	`"fluent/fluent-bit"`
fluent-bit.podAnnotations.“fluentbit.io/exclude”	string	`"true"`
fluent-bit.podAnnotations.“prometheus.io/path”	string	`"/api/v1/metrics/prometheus"`
fluent-bit.podAnnotations.“prometheus.io/port”	string	`"2020"`
fluent-bit.podAnnotations.“prometheus.io/scrape”	string	`"true"`
fluent-bit.testFramework.enabled	bool	`false`
grafana.adminPassword	string	`"admin"`
grafana.dashboardProviders.“dashboardproviders.yaml”.apiVersion	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].disableDeletion	bool	`false`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].editable	bool	`true`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].folder	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].name	string	`"envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].options.path	string	`"/var/lib/grafana/dashboards/envoy-gateway"`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].orgId	int	`1`
grafana.dashboardProviders.“dashboardproviders.yaml”.providers[0].type	string	`"file"`
grafana.dashboardsConfigMaps.envoy-gateway	string	`"grafana-dashboards"`
grafana.datasources.“datasources.yaml”.apiVersion	int	`1`
grafana.datasources.“datasources.yaml”.datasources[0].name	string	`"Prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].type	string	`"prometheus"`
grafana.datasources.“datasources.yaml”.datasources[0].url	string	`"http://prometheus"`
grafana.enabled	bool	`true`
grafana.fullnameOverride	string	`"grafana"`
grafana.service.type	string	`"LoadBalancer"`
grafana.testFramework.enabled	bool	`false`
loki.backend.replicas	int	`0`
loki.deploymentMode	string	`"SingleBinary"`
loki.enabled	bool	`true`
loki.fullnameOverride	string	`"loki"`
loki.gateway.enabled	bool	`false`
loki.loki.auth_enabled	bool	`false`
loki.loki.commonConfig.replication_factor	int	`1`
loki.loki.compactorAddress	string	`"loki"`
loki.loki.memberlist	string	`"loki-memberlist"`
loki.loki.rulerConfig.storage.type	string	`"local"`
loki.loki.storage.type	string	`"filesystem"`
loki.monitoring.lokiCanary.enabled	bool	`false`
loki.monitoring.selfMonitoring.enabled	bool	`false`
loki.monitoring.selfMonitoring.grafanaAgent.installOperator	bool	`false`
loki.read.replicas	int	`0`
loki.singleBinary.replicas	int	`1`
loki.test.enabled	bool	`false`
loki.write.replicas	int	`0`
opentelemetry-collector.config.exporters.debug.verbosity	string	`"detailed"`
opentelemetry-collector.config.exporters.loki.endpoint	string	`"http://loki.monitoring.svc:3100/loki/api/v1/push"`
opentelemetry-collector.config.exporters.otlp.endpoint	string	`"tempo.monitoring.svc:4317"`
opentelemetry-collector.config.exporters.otlp.tls.insecure	bool	`true`
opentelemetry-collector.config.exporters.prometheus.endpoint	string	`"[${env:MY_POD_IP}]:19001"`
opentelemetry-collector.config.extensions.health_check.endpoint	string	`"[${env:MY_POD_IP}]:13133"`
opentelemetry-collector.config.processors.attributes.actions[0].action	string	`"insert"`
opentelemetry-collector.config.processors.attributes.actions[0].key	string	`"loki.attribute.labels"`
opentelemetry-collector.config.processors.attributes.actions[0].value	string	`"k8s.pod.name, k8s.namespace.name"`
opentelemetry-collector.config.receivers.datadog.endpoint	string	`"[${env:MY_POD_IP}]:8126"`
opentelemetry-collector.config.receivers.envoyals.endpoint	string	`"[${env:MY_POD_IP}]:9000"`
opentelemetry-collector.config.receivers.jaeger.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:14250"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_compact.endpoint	string	`"[${env:MY_POD_IP}]:6831"`
opentelemetry-collector.config.receivers.jaeger.protocols.thrift_http.endpoint	string	`"[${env:MY_POD_IP}]:14268"`
opentelemetry-collector.config.receivers.otlp.protocols.grpc.endpoint	string	`"[${env:MY_POD_IP}]:4317"`
opentelemetry-collector.config.receivers.otlp.protocols.http.endpoint	string	`"[${env:MY_POD_IP}]:4318"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].job_name	string	`"opentelemetry-collector"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].scrape_interval	string	`"10s"`
opentelemetry-collector.config.receivers.prometheus.config.scrape_configs[0].static_configs[0].targets[0]	string	`"[${env:MY_POD_IP}]:8888"`
opentelemetry-collector.config.receivers.zipkin.endpoint	string	`"[${env:MY_POD_IP}]:9411"`
opentelemetry-collector.config.service.extensions[0]	string	`"health_check"`
opentelemetry-collector.config.service.pipelines.logs.exporters[0]	string	`"loki"`
opentelemetry-collector.config.service.pipelines.logs.processors[0]	string	`"attributes"`
opentelemetry-collector.config.service.pipelines.logs.receivers[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.logs.receivers[1]	string	`"envoyals"`
opentelemetry-collector.config.service.pipelines.metrics.exporters[0]	string	`"prometheus"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.metrics.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.exporters[0]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[0]	string	`"datadog"`
opentelemetry-collector.config.service.pipelines.traces.receivers[1]	string	`"otlp"`
opentelemetry-collector.config.service.pipelines.traces.receivers[2]	string	`"zipkin"`
opentelemetry-collector.config.service.telemetry.metrics.address	string	`nil`
opentelemetry-collector.config.service.telemetry.metrics.level	string	`"none"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.host	string	`"localhost"`
opentelemetry-collector.config.service.telemetry.metrics.readers[0].pull.exporter.prometheus.port	int	`8888`
opentelemetry-collector.enabled	bool	`false`
opentelemetry-collector.fullnameOverride	string	`"otel-collector"`
opentelemetry-collector.image.repository	string	`"otel/opentelemetry-collector-contrib"`
opentelemetry-collector.image.tag	string	`"0.121.0"`
opentelemetry-collector.mode	string	`"deployment"`
opentelemetry-collector.ports.datadog.containerPort	int	`8126`
opentelemetry-collector.ports.datadog.enabled	bool	`true`
opentelemetry-collector.ports.datadog.hostPort	int	`8126`
opentelemetry-collector.ports.datadog.protocol	string	`"TCP"`
opentelemetry-collector.ports.datadog.servicePort	int	`8126`
opentelemetry-collector.ports.envoy-als.appProtocol	string	`"grpc"`
opentelemetry-collector.ports.envoy-als.containerPort	int	`9000`
opentelemetry-collector.ports.envoy-als.enabled	bool	`true`
opentelemetry-collector.ports.envoy-als.hostPort	int	`9000`
opentelemetry-collector.ports.envoy-als.protocol	string	`"TCP"`
opentelemetry-collector.ports.envoy-als.servicePort	int	`9000`
prometheus.alertmanager.enabled	bool	`false`
prometheus.enabled	bool	`true`
prometheus.kube-state-metrics.customResourceState.config.kind	string	`"CustomResourceStateMetrics"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.kind	string	`"Gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metricNamePrefix	string	`"gatewayapi_gateway"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.info.labelsFromPath.gatewayclass_name[1]	string	`"gatewayClassName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].help	string	`"Gateway information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[0]	string	`"allowedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[1]	string	`"namespaces"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.allowed_routes_namespaces_from[2]	string	`"from"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.hostname[0]	string	`"hostname"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.protocol[0]	string	`"protocol"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[0]	string	`"tls"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.labelsFromPath.tls_mode[1]	string	`"mode"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.info.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].help	string	`"Gateway listener information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[4].name	string	`"listener_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[5].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.labelsFromPath.listener_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.path[1]	string	`"listeners"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.gauge.valueFrom[0]	string	`"attachedRoutes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].help	string	`"Number of attached routes for a listener"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[6].name	string	`"status_listener_attached_routes"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.labelsFromPath.value[0]	string	`"value"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.info.path[1]	string	`"addresses"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].help	string	`"Gateway address types and values"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[0].metrics[7].name	string	`"status_address_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.kind	string	`"GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metricNamePrefix	string	`"gatewayapi_gatewayclass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.info.labelsFromPath.controller_name[1]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].help	string	`"GatewayClass information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[0].name	string	`"info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[1].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[2].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[3].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.labelsFromPath.type[0]	string	`"type"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.path[1]	string	`"conditions"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.gauge.valueFrom[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].help	string	`"status condition"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[4].name	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.labelsFromPath.features	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.info.path[1]	string	`"supportedFeatures"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].help	string	`"List of supported features for the GatewayClass"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[1].metrics[5].name	string	`"status_supported_features"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.kind	string	`"HTTPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metricNamePrefix	string	`"gatewayapi_httproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].help	string	`"Parent references that the httproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].help	string	`"Parent references that the httproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[2].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.kind	string	`"GRPCRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].groupVersionKind.version	string	`"v1"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metricNamePrefix	string	`"gatewayapi_grpcroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].help	string	`"Parent references that the grpcroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].help	string	`"Parent references that the grpcroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[3].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.kind	string	`"TCPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metricNamePrefix	string	`"gatewayapi_tcproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].help	string	`"Parent references that the tcproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].help	string	`"Parent references that the tcproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[4].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.kind	string	`"TLSRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metricNamePrefix	string	`"gatewayapi_tlsroute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.labelsFromPath.hostname	list	`[]`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.info.path[1]	string	`"hostnames"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].help	string	`"Hostname information"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[3].name	string	`"hostname_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].help	string	`"Parent references that the tlsroute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[4].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].help	string	`"Parent references that the tlsroute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[5].metrics[5].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.kind	string	`"UDPRoute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].groupVersionKind.version	string	`"v1alpha2"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metricNamePrefix	string	`"gatewayapi_udproute"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_port[0]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.labelsFromPath.parent_section_name[0]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.info.path[1]	string	`"parentRefs"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].help	string	`"Parent references that the udproute wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[3].name	string	`"parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.controller_name[0]	string	`"controllerName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_group[1]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_kind[1]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_port[1]	string	`"port"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[0]	string	`"parentRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.labelsFromPath.parent_section_name[1]	string	`"sectionName"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[0]	string	`"status"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.info.path[1]	string	`"parents"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].help	string	`"Parent references that the udproute is attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[6].metrics[4].name	string	`"status_parent_info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.group	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.kind	string	`"BackendTLSPolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].groupVersionKind.version	string	`"v1alpha3"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.name[1]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].labelsFromPath.namespace[1]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metricNamePrefix	string	`"gatewayapi_backendtlspolicy"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.labelsFromPath.*[0]	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.info.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].help	string	`"Kubernetes labels converted to Prometheus labels."`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[0].name	string	`"labels"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.gauge.path[1]	string	`"creationTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].help	string	`"created timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[1].name	string	`"created"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[0]	string	`"metadata"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.gauge.path[1]	string	`"deletionTimestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].each.type	string	`"Gauge"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].help	string	`"deletion timestamp"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[2].name	string	`"deleted"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_group[0]	string	`"group"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_kind[0]	string	`"kind"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_name[0]	string	`"name"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.labelsFromPath.target_namespace[0]	string	`"namespace"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[0]	string	`"spec"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.info.path[1]	string	`"targetRef"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].each.type	string	`"Info"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].help	string	`"Target references that the backendtlspolicy wants to be attached to"`
prometheus.kube-state-metrics.customResourceState.config.spec.resources[7].metrics[3].name	string	`"target_info"`
prometheus.kube-state-metrics.customResourceState.enabled	bool	`true`
prometheus.kube-state-metrics.enabled	bool	`false`
prometheus.kube-state-metrics.rbac.extraRules[0].apiGroups[0]	string	`"gateway.networking.k8s.io"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[0]	string	`"gateways"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[1]	string	`"gatewayclasses"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[2]	string	`"httproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[3]	string	`"grpcroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[4]	string	`"tcproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[5]	string	`"tlsroutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[6]	string	`"udproutes"`
prometheus.kube-state-metrics.rbac.extraRules[0].resources[7]	string	`"backendtlspolicies"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[0]	string	`"list"`
prometheus.kube-state-metrics.rbac.extraRules[0].verbs[1]	string	`"watch"`
prometheus.prometheus-node-exporter.enabled	bool	`false`
prometheus.prometheus-pushgateway.enabled	bool	`false`
prometheus.server.fullnameOverride	string	`"prometheus"`
prometheus.server.global.scrape_interval	string	`"15s"`
prometheus.server.image.repository	string	`"prom/prometheus"`
prometheus.server.persistentVolume.enabled	bool	`false`
prometheus.server.readinessProbeInitialDelay	int	`0`
prometheus.server.securityContext	object	`{}`
prometheus.server.service.type	string	`"LoadBalancer"`
tempo.enabled	bool	`true`
tempo.fullnameOverride	string	`"tempo"`
tempo.service.type	string	`"LoadBalancer"`

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. The currently supported addresses are:

External IPs

Installation

Install Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.5.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

External IPs

Using the addresses in Gateway.Spec.Addresses as the External IPs of Envoy Proxy Service, this will require the address to be of type IPAddress.

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. The currently supported addresses are:

External IPs

Installation

Install Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.6.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

External IPs

Using the addresses in Gateway.Spec.Addresses as the External IPs of Envoy Proxy Service, this will require the address to be of type IPAddress.

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest.

External IPs

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Address

Mon, 01 Jan 0001 00:00:00 +0000

The Gateway API provides an optional Addresses field through which Envoy Gateway can set addresses for Envoy Proxy Service. Depending on the Service Type, the addresses of gateway can be used as:

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway API Extensions

Mon, 01 Jan 0001 00:00:00 +0000

Packages

gateway.envoyproxy.io/v1alpha1

gateway.envoyproxy.io/v1alpha1

Package v1alpha1 contains API schema definitions for the gateway.envoyproxy.io API group.

Resource Types

ALPNProtocol

Underlying type: string

ALPNProtocol specifies the protocol to be negotiated using ALPN

Appears in:

Value	Description
`http/1.0`	HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN
`http/1.1`	HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN
`h2`	HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN

ALSEnvoyProxyAccessLog

Gateway API Metadata

Mon, 01 Jan 0001 00:00:00 +0000

Background

Envoy Gateway translates Gateway API resources to Envoy XDS resources. In this translation process, Envoy Gateway annotates XDS resources with additional metadata from their origin Gateway API resources.

Gateway API Metadata includes:

K8s Resource Kinds, Names and Namespaces.
K8s Resource Annotations with the gateway.envoyproxy.io/ prefix.
K8s Resource SectionNames (when applicable, e.g. for Route rules and Listeners).

K8s Resource Kinds, Names and Namespaces.
K8s Resource Annotations with the gateway.envoyproxy.io/ prefix.
K8s Resource SectionNames (when applicable, e.g. for Route rules and Listeners).

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v1.6.3/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.0.0-latest -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/latest/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

egctl x status gateway -v

Run the following commands to install the metrics stack, with the Gateway API State Metrics configuration, on your kubernetes cluster:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.3.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v1.3.3/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.4.6 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v1.4.6/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.5.8 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v1.5.8/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v1.6.3/quickstart.yaml -n default

Verify Connectivity:
Get the External IP of the Gateway:

Gateway API Support

Mon, 01 Jan 0001 00:00:00 +0000

As mentioned in the system design document, Envoy Gateway’s managed data plane is configured dynamically through Kubernetes resources, primarily Gateway API objects. Envoy Gateway supports configuration using the following Gateway API resources.

GatewayClass

GatewayClass

Gateway Crds Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

A Helm chart for Envoy Gateway CRDs

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
crds.envoyGateway.enabled	bool	`false`
crds.gatewayAPI.channel	string	`"experimental"`
crds.gatewayAPI.enabled	bool	`false`

Gateway Crds Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

A Helm chart for Envoy Gateway CRDs

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
crds.envoyGateway.enabled	bool	`false`
crds.gatewayAPI.channel	string	`"experimental"`
crds.gatewayAPI.enabled	bool	`false`

Gateway Crds Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

A Helm chart for Kubernetes

Values

Key	Type	Default
crds.envoyGateway.enabled	bool	`false`
crds.gatewayAPI.channel	string	`"experimental"`
crds.gatewayAPI.enabled	bool	`false`

Gateway Crds Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

A Helm chart for Envoy Gateway CRDs

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
crds.envoyGateway.enabled	bool	`false`
crds.gatewayAPI.channel	string	`"experimental"`
crds.gatewayAPI.enabled	bool	`false`

Gateway Crds Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

A Helm chart for Envoy Gateway CRDs

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
crds.envoyGateway.enabled	bool	`false`
crds.gatewayAPI.channel	string	`"experimental"`
crds.gatewayAPI.enabled	bool	`false`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway	object	`{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}`	EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.
createNamespace	bool	`false`
deployment.annotations	object	`{}`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.imagePullSecrets	list	`[]`	Global override for image pull secrets
global.imageRegistry	string	`""`	Global override for image registry
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
hpa.behavior	object	`{}`
hpa.enabled	bool	`false`
hpa.maxReplicas	int	`1`
hpa.metrics	list	`[]`
hpa.minReplicas	int	`1`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`
service.trafficDistribution	string	`""`
service.type	string	`"ClusterIP"`
topologyInjector.annotations	object	`{}`
topologyInjector.enabled	bool	`true`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway	object	`{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}`	EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.
createNamespace	bool	`false`
deployment.annotations	object	`{}`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.imagePullSecrets	list	`[]`	Global override for image pull secrets
global.imageRegistry	string	`""`	Global override for image registry
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
hpa.behavior	object	`{}`
hpa.enabled	bool	`false`
hpa.maxReplicas	int	`1`
hpa.metrics	list	`[]`
hpa.minReplicas	int	`1`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`
service.trafficDistribution	string	`""`
service.type	string	`"ClusterIP"`	Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20
topologyInjector.annotations	object	`{}`
topologyInjector.enabled	bool	`true`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"annotations":{},"resources":{},"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.cpu	string	`"500m"`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.replicas	int	`1`
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"nodeSelector":{},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway	object	`{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}`	EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.imagePullSecrets	list	`[]`	Global override for image pull secrets
global.imageRegistry	string	`""`	Global override for image registry
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:3e085e5b"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
hpa.behavior	object	`{}`
hpa.enabled	bool	`false`
hpa.maxReplicas	int	`1`
hpa.metrics	list	`[]`
hpa.minReplicas	int	`1`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`
service.trafficDistribution	string	`""`
topologyInjector.annotations	object	`{}`
topologyInjector.enabled	bool	`true`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway	object	`{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}`	EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.
createNamespace	bool	`false`
deployment.annotations	object	`{}`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.imagePullSecrets	list	`[]`	Global override for image pull secrets
global.imageRegistry	string	`""`	Global override for image registry
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
hpa.behavior	object	`{}`
hpa.enabled	bool	`false`
hpa.maxReplicas	int	`1`
hpa.metrics	list	`[]`
hpa.minReplicas	int	`1`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`
service.trafficDistribution	string	`""`
topologyInjector.annotations	object	`{}`
topologyInjector.enabled	bool	`true`

Gateway Helm Chart

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default	Description
certgen	object	`{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}`	Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.
config.envoyGateway	object	`{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}`	EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.
createNamespace	bool	`false`
deployment.annotations	object	`{}`
deployment.envoyGateway.image.repository	string	`""`
deployment.envoyGateway.image.tag	string	`""`
deployment.envoyGateway.imagePullPolicy	string	`""`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.envoyGateway.securityContext.allowPrivilegeEscalation	bool	`false`
deployment.envoyGateway.securityContext.capabilities.drop[0]	string	`"ALL"`
deployment.envoyGateway.securityContext.privileged	bool	`false`
deployment.envoyGateway.securityContext.runAsGroup	int	`65532`
deployment.envoyGateway.securityContext.runAsNonRoot	bool	`true`
deployment.envoyGateway.securityContext.runAsUser	int	`65532`
deployment.envoyGateway.securityContext.seccompProfile.type	string	`"RuntimeDefault"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations.“prometheus.io/port”	string	`"19001"`
deployment.pod.annotations.“prometheus.io/scrape”	string	`"true"`
deployment.pod.labels	object	`{}`
deployment.pod.nodeSelector	object	`{}`
deployment.pod.tolerations	list	`[]`
deployment.pod.topologySpreadConstraints	list	`[]`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.ports[2].name	string	`"wasm"`
deployment.ports[2].port	int	`18002`
deployment.ports[2].targetPort	int	`18002`
deployment.ports[3].name	string	`"metrics"`
deployment.ports[3].port	int	`19001`
deployment.ports[3].targetPort	int	`19001`
deployment.priorityClassName	string	`nil`
deployment.replicas	int	`1`
global.imagePullSecrets	list	`[]`	Global override for image pull secrets
global.imageRegistry	string	`""`	Global override for image registry
global.images.envoyGateway.image	string	`nil`
global.images.envoyGateway.pullPolicy	string	`nil`
global.images.envoyGateway.pullSecrets	list	`[]`
global.images.ratelimit.image	string	`"docker.io/envoyproxy/ratelimit:master"`
global.images.ratelimit.pullPolicy	string	`"IfNotPresent"`
global.images.ratelimit.pullSecrets	list	`[]`
hpa.behavior	object	`{}`
hpa.enabled	bool	`false`
hpa.maxReplicas	int	`1`
hpa.metrics	list	`[]`
hpa.minReplicas	int	`1`
kubernetesClusterDomain	string	`"cluster.local"`
podDisruptionBudget.minAvailable	int	`0`
service.annotations	object	`{}`
service.trafficDistribution	string	`""`
service.type	string	`"ClusterIP"`
topologyInjector.annotations	object	`{}`
topologyInjector.enabled	bool	`true`

Gateway Namespace Mode

Mon, 01 Jan 0001 00:00:00 +0000

Overview

In standard deployment mode, Envoy Gateway creates all data plane resources in the controller namespace (typically envoy-gateway-system).

The motivation behind this was to operate with minimum permissions needed to be given for Envoy Gateway controller, as the control plane and data plane was deployed in the same namespace.

Gateway Namespace Mode changes this behavior by placing Envoy Proxy data plane resources like Deployments, Services and ServiceAccounts in each Gateway’s namespace, which provides stronger isolation and multi-tenancy compared to the Controller Namespace mode, as it isolates Envoy proxy data plane across different tenants. This distributed architecture requires additional RBAC permissions for the Envoy Gateway controller to manage Kubernetes resources across multiple namespaces.

Gateway Namespace Mode

Mon, 01 Jan 0001 00:00:00 +0000

Overview

In standard deployment mode, Envoy Gateway creates all data plane resources in the controller namespace (typically envoy-gateway-system).

The motivation behind this was to operate with minimum permissions needed to be given for Envoy Gateway controller, as the control plane and data plane was deployed in the same namespace.

Gateway Namespace Mode

Mon, 01 Jan 0001 00:00:00 +0000

Notice

Gateway Namespace Mode is currently an alpha feature. We recommend against using it in production workloads until it reaches beta status.

For status updates or to provide feedback, please follow our GitHub issues.

Overview

In standard deployment mode, Envoy Gateway creates all data plane resources in the controller namespace (typically envoy-gateway-system).

The motivation behind this was to operate with minimum permissions needed to be given for Envoy Gateway controller, as the control plane and data plane was deployed in the same namespace.

Gateway Namespace Mode

Mon, 01 Jan 0001 00:00:00 +0000

Overview

In standard deployment mode, Envoy Gateway creates all data plane resources in the controller namespace (typically envoy-gateway-system).

The motivation behind this was to operate with minimum permissions needed to be given for Envoy Gateway controller, as the control plane and data plane was deployed in the same namespace.

Gateway Namespace Mode

Mon, 01 Jan 0001 00:00:00 +0000

Overview

In standard deployment mode, Envoy Gateway creates all data plane resources in the controller namespace (typically envoy-gateway-system).

The motivation behind this was to operate with minimum permissions needed to be given for Envoy Gateway controller, as the control plane and data plane was deployed in the same namespace.

Gateway Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config gateway control-plane observability, includes metrics.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config gateway control-plane observability, includes metrics.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Gateway Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config gateway control-plane observability, includes metrics.

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Envoy Gateway provides an add-ons Helm Chart, which includes all the needing components for observability. By default, the OpenTelemetry Collector is disabled.

Gateway Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config gateway control-plane observability, includes metrics.

Prerequisites

Install Envoy Gateway

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Install Add-ons

Install the Gateway API CRDs and Envoy Gateway using Helm:

gateway-helm

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
certgen.job.annotations	object	`{}`
certgen.job.ttlSecondsAfterFinished	int	`0`
certgen.rbac.annotations	object	`{}`
certgen.rbac.labels	object	`{}`
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.cert.expiryDays	int	`365`
deployment.envoyGateway.image.repository	string	`"${ImageRepository}"`
deployment.envoyGateway.image.tag	string	`"${ImageTag}"`
deployment.envoyGateway.imagePullPolicy	string	`"Always"`
deployment.envoyGateway.resources.limits.cpu	string	`"500m"`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.pod.annotations	object	`{}`
deployment.pod.labels	object	`{}`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.replicas	int	`1`
envoyGatewayMetricsService.ports[0].name	string	`"http"`
envoyGatewayMetricsService.ports[0].port	int	`19001`
envoyGatewayMetricsService.ports[0].protocol	string	`"TCP"`
envoyGatewayMetricsService.ports[0].targetPort	int	`19001`
kubernetesClusterDomain	string	`"cluster.local"`

gateway-helm

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
certgen.job.annotations	object	`{}`
certgen.job.resources	object	`{}`
certgen.job.ttlSecondsAfterFinished	int	`0`
certgen.rbac.annotations	object	`{}`
certgen.rbac.labels	object	`{}`
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`"${ImageRepository}"`
deployment.envoyGateway.image.tag	string	`"${ImageTag}"`
deployment.envoyGateway.imagePullPolicy	string	`"Always"`
deployment.envoyGateway.imagePullSecrets	list	`[]`
deployment.envoyGateway.resources.limits.cpu	string	`"500m"`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.pod.affinity	object	`{}`
deployment.pod.annotations	object	`{}`
deployment.pod.labels	object	`{}`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.replicas	int	`1`
envoyGatewayMetricsService.port	int	`19001`
kubernetesClusterDomain	string	`"cluster.local"`

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

We expect that one or more GatewayClasses will be created by the infrastructure provider for the user. It allows decoupling of which mechanism (e.g. controller) implements the Gateways from the user. For instance, an infrastructure provider may create two GatewayClasses named internet and private to reflect Gateways that define Internet-facing vs private, internal applications.

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](../concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

GatewayClass

Mon, 01 Jan 0001 00:00:00 +0000

The `GatewayClass` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GatewayClass is cluster-scoped resource defined by the infrastructure provider. This resource represents a class of Gateways that can be instantiated.

Note: GatewayClass serves the same function as the networking.IngressClass resource.

kind: GatewayClass
metadata:
 name: cluster-gateway
spec:
 controllerName: "example.net/gateway-controller"

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Global Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Graceful Shutdown and Hitless Upgrades

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway enables zero-downtime deployments through graceful connection draining during pod termination.

Overview

The shutdown manager sidecar coordinates graceful connection draining during pod termination, providing:

Zero-downtime rolling updates
Configurable drain timeouts
Automatic health check failure to remove pods from load balancer rotation

Shutdown Process

Kubernetes sends SIGTERM to the pod
Shutdown manager fails health checks via /healthcheck/fail
- This causes Kubernetes readiness probes to fail
- External load balancers and services stop routing new traffic to the pod
- Existing connections continue to be served while draining
Connection monitoring begins, polling server.total_connections
Process exits when connections reach zero or drain timeout is exceeded

Configuration

Graceful shutdown behavior includes default values that can be overridden using the EnvoyProxy resource. The EnvoyProxy resource can be referenced in two ways:

Graceful Shutdown and Hitless Upgrades

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway enables zero-downtime deployments through graceful connection draining during pod termination.

Overview

The shutdown manager sidecar coordinates graceful connection draining during pod termination, providing:

Zero-downtime rolling updates
Configurable drain timeouts
Automatic health check failure to remove pods from load balancer rotation

Shutdown Process

Kubernetes sends SIGTERM to the pod
Shutdown manager fails health checks via /healthcheck/fail
- This causes Kubernetes readiness probes to fail
- External load balancers and services stop routing new traffic to the pod
- Existing connections continue to be served while draining
Connection monitoring begins, polling server.total_connections
Process exits when connections reach zero or drain timeout is exceeded

Configuration

Graceful shutdown behavior includes default values that can be overridden using the EnvoyProxy resource. The EnvoyProxy resource can be referenced in two ways:

Graceful Shutdown and Hitless Upgrades

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway enables zero-downtime deployments through graceful connection draining during pod termination.

Overview

The shutdown manager sidecar coordinates graceful connection draining during pod termination, providing:

Zero-downtime rolling updates
Configurable drain timeouts
Automatic health check failure to remove pods from load balancer rotation

Shutdown Process

Kubernetes sends SIGTERM to the pod
Shutdown manager fails health checks via /healthcheck/fail
- This causes Kubernetes readiness probes to fail
- External load balancers and services stop routing new traffic to the pod
- Existing connections continue to be served while draining
Connection monitoring begins, polling server.total_connections
Process exits when connections reach zero or drain timeout is exceeded

Configuration

Graceful shutdown behavior includes default values that can be overridden using the EnvoyProxy resource. The EnvoyProxy resource can be referenced in two ways:

Graceful Shutdown and Hitless Upgrades

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway enables zero-downtime deployments through graceful connection draining during pod termination.

Overview

The shutdown manager sidecar coordinates graceful connection draining during pod termination, providing:

Zero-downtime rolling updates
Configurable drain timeouts
Automatic health check failure to remove pods from load balancer rotation

Shutdown Process

Kubernetes sends SIGTERM to the pod
Shutdown manager fails health checks via /healthcheck/fail
- This causes Kubernetes readiness probes to fail
- External load balancers and services stop routing new traffic to the pod
- Existing connections continue to be served while draining
Connection monitoring begins, polling server.total_connections
Process exits when connections reach zero or drain timeout is exceeded

Configuration

Graceful shutdown behavior includes default values that can be overridden using the EnvoyProxy resource. The EnvoyProxy resource can be referenced in two ways:

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

The GRPCRoute resource allows users to configure gRPC routing by matching HTTP/2 traffic and forwarding it to backend gRPC servers. To learn more about gRPC routing, refer to the Gateway API documentation.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway:

kubectl apply -f https://github.com/envoyproxy/gateway/releases/download/v0.3.0/install.yaml

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Installation

Install the gRPC routing example resources:

kubectl apply -f https://raw.githubusercontent.com/envoyproxy/gateway/v0.3.0/examples/kubernetes/grpc-routing.yaml

The manifest installs a GatewayClass, Gateway, a Deployment, a Service, and a GRPCRoute resource. The GatewayClass is a cluster-scoped resource that represents a class of Gateways that can be instantiated.

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.4.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Installation

Install the gRPC routing example resources:

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.5.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Installation

Install the gRPC routing example resources:

GRPC Routing

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Install Envoy Gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.6.0 -n envoy-gateway-system --create-namespace

Wait for Envoy Gateway to become available:

kubectl wait --timeout=5m -n envoy-gateway-system deployment/envoy-gateway --for=condition=Available

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Installation

Install the Gateway API CRDs and Envoy Gateway using Helm:

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](../concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

GRPCRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `GRPCRoute` resource is GA and has been part of the Standard Channel since
`v1.1.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

GRPCRoute is a Gateway API type for specifying routing behavior of gRPC requests from a Gateway listener to an API object, i.e. Service.

Background

While it is possible to route gRPC with HTTPRoutes or via custom, out-of-tree CRDs, in the long run, this leads to a fragmented ecosystem.

Helm Chart Values

Mon, 01 Jan 0001 00:00:00 +0000

The Helm chart for Envoy Gateway

Homepage: https://gateway.envoyproxy.io/

Maintainers

Name	Email	Url
envoy-gateway-steering-committee		https://github.com/envoyproxy/gateway/blob/main/GOVERNANCE.md
envoy-gateway-maintainers		https://github.com/envoyproxy/gateway/blob/main/CODEOWNERS

Source Code

https://github.com/envoyproxy/gateway

Values

Key	Type	Default
config.envoyGateway.gateway.controllerName	string	`"gateway.envoyproxy.io/gatewayclass-controller"`
config.envoyGateway.logging.level.default	string	`"info"`
config.envoyGateway.provider.type	string	`"Kubernetes"`
createNamespace	bool	`false`
deployment.envoyGateway.image.repository	string	`"${ImageRepository}"`
deployment.envoyGateway.image.tag	string	`"${ImageTag}"`
deployment.envoyGateway.imagePullPolicy	string	`"Always"`
deployment.envoyGateway.resources.limits.cpu	string	`"500m"`
deployment.envoyGateway.resources.limits.memory	string	`"1024Mi"`
deployment.envoyGateway.resources.requests.cpu	string	`"100m"`
deployment.envoyGateway.resources.requests.memory	string	`"256Mi"`
deployment.kubeRbacProxy.image.repository	string	`"gcr.io/kubebuilder/kube-rbac-proxy"`
deployment.kubeRbacProxy.image.tag	string	`"v0.11.0"`
deployment.kubeRbacProxy.resources.limits.cpu	string	`"500m"`
deployment.kubeRbacProxy.resources.limits.memory	string	`"128Mi"`
deployment.kubeRbacProxy.resources.requests.cpu	string	`"5m"`
deployment.kubeRbacProxy.resources.requests.memory	string	`"64Mi"`
deployment.pod.annotations	object	`{}`
deployment.pod.labels	object	`{}`
deployment.ports[0].name	string	`"grpc"`
deployment.ports[0].port	int	`18000`
deployment.ports[0].targetPort	int	`18000`
deployment.ports[1].name	string	`"ratelimit"`
deployment.ports[1].port	int	`18001`
deployment.ports[1].targetPort	int	`18001`
deployment.replicas	int	`1`
envoyGatewayMetricsService.ports[0].name	string	`"https"`
envoyGatewayMetricsService.ports[0].port	int	`8443`
envoyGatewayMetricsService.ports[0].protocol	string	`"TCP"`
envoyGatewayMetricsService.ports[0].targetPort	string	`"https"`
kubernetesClusterDomain	string	`"cluster.local"`

HTTP CONNECT Tunnels

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

HTTP Response Headers

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP Timeouts

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRouteTimeouts supports two kinds of timeouts:

request: Request specifies the maximum duration for a gateway to respond to an HTTP request.
backendRequest: BackendRequest specifies a timeout for an individual request from the gateway to a backend.

Note: The Request duration must be >= BackendRequest duration

HTTP URL Rewrite

Mon, 01 Jan 0001 00:00:00 +0000

HTTPURLRewriteFilter defines a filter that modifies a request during forwarding. At most one of these filters may be used on a Route rule. This MUST NOT be used on the same Route rule as a HTTPRequestRedirect filter.

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP URL Rewrite

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

TLS Certificates

Generate the certificates and keys used by the Gateway to terminate client TLS connections.

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

TLS Certificates

Generate the certificates and keys used by the Gateway to terminate client TLS connections.

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTP3

Mon, 01 Jan 0001 00:00:00 +0000

This task will help you get started using HTTP3 using EG. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](../concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute

Mon, 01 Jan 0001 00:00:00 +0000

The `HTTPRoute` resource is GA and has been part of the Standard Channel since
`v0.5.0`. For more information on release channels, refer to our [versioning
guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

HTTPRoute is a Gateway API type for specifying routing behavior of HTTP requests from a Gateway listener to an API object, i.e. Service.

Spec

The specification of an HTTPRoute consists of:

ParentRefs- Define which Gateways this Route wants to be attached to.
Hostnames (optional)- Define a list of hostnames to use for matching the Host header of HTTP requests.
Rules- Define a list of rules to perform actions against matching HTTP requests. Each rule consists of matches, filters (optional), backendRefs (optional), timeouts (optional), and name (optional) fields.

The following illustrates an HTTPRoute that sends all traffic to one Service:

HTTPRoute Request Mirroring

Mon, 01 Jan 0001 00:00:00 +0000

The HTTPRoute resource allows one or more backendRefs to be provided. Requests will be routed to these upstreams. It is possible to divide the traffic between these backends using Traffic Splitting, but it is also possible to mirror requests to another Service instead. Request mirroring is accomplished using Gateway API’s HTTPRequestMirrorFilter on the HTTPRoute.

Collect configuration from envoy proxy and gateway
Analyse system configuration to diagnose any issues in envoy gateway

This tool is named egctl.

Syntax

Use the following syntax to run egctl commands from your terminal window:

egctl [command] [entity] [name] [flags]

where command, name, and flags are:

command: Specifies the operation that you want to perform on one or more resources, for example config, version.

This task provides instructions for configuring JSON Web Token (JWT) authentication. JWT authentication checks if an incoming request has a valid JWT before routing the request to a backend service. Currently, Envoy Gateway only supports validating a JWT from an HTTP header, e.g. Authorization: Bearer <token>.

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure JWT authentication. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

JWT Authentication

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure JWT authentication. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource.

JWT Authentication

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Load balancing distributes incoming requests across multiple backend services to improve availability, responsiveness, and scalability. Instead of directing all traffic to a single backend, which can cause slowdowns or outages, load balancing spreads the load across multiple instances, helping your applications stay fast and reliable under pressure.

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Envoy Gateway supports several load balancing strategies that determine how traffic is distributed across backend services. These strategies are configured using the BackendTrafficPolicy resource and can be applied to Gateway, HTTPRoute, or GRPCRoute resources either by directly referencing them using the targetRefs field or by dynamically selecting them using the targetSelectors field, which matches resources based on Kubernetes labels.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Additionally, Envoy Gateway supports Endpoint Override functionality that allows endpoint selection based on headers or metadata, which can be used with any of the above load balancing policies as a fallback.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Envoy Gateway introduces a new CRD called BackendTrafficPolicy that allows the user to describe their desired load balancing polices. This instantiated resource can be linked to a Gateway, HTTPRoute or GRPCRoute resource. If loadBalancer is not specified in BackendTrafficPolicy, the default load balancing policy is Least Request.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Use load balancing to:

Handle high traffic by distributing it across multiple service instances
Keep services available even if one or more backends go down
Improve response time by routing to less busy or closer backends

Load Balancing in Envoy Gateway

Load Balancing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy load balancing is a way of distributing traffic between multiple hosts within a single upstream cluster in order to effectively make use of available resources.

Envoy Gateway supports the following load balancing policies:

Round Robin: a simple policy in which each available upstream host is selected in round robin order.
Random: load balancer selects a random available host.
Least Request: load balancer uses different algorithms depending on whether hosts have the same or different weights.
Consistent Hash: load balancer implements consistent hashing to upstream hosts.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Local Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports two types of rate limiting: Global rate limiting and Local rate limiting.

Lua Extensions

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for extending Envoy Gateway with Lua extensions.

Lua extensions allow you to extend the functionality of Envoy Gateway by running custom code against HTTP requests and responses, without modifying the Envoy Gateway binary. These comparatively light-weight extensions are written in the Lua scripting language using APIs defined here.

Envoy Gateway allows the user to configure Lua extensions using the EnvoyExtensionPolicy CRD. This instantiated resource can be linked to a Gateway or HTTPRoute resource. If linked to both, the resource linked to the route takes precedence over those linked to Gateway.

Lua Extensions

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for extending Envoy Gateway with Lua extensions.

Lua Extensions

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for extending Envoy Gateway with Lua extensions.

Lua Extensions

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for extending Envoy Gateway with Lua extensions.

Lua Extensions

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for extending Envoy Gateway with Lua extensions.

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@arkodg
@cnvergence
@guydc
@jukie
@kkk777-7
@rudrakhp
@shawnh2
@Xunzhuo
@zhaohuabing
@zirain

Emeritus Maintainers

@alexgervais
@Alice-Lilith
@danehans
@LukeShu
@qicz
@skriss
@youngnick

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@Alice-Lilith
@arkodg
@Xunzhuo
@zirain
@qicz

Emeritus Maintainers

@danehans
@alexgervais
@skriss
@youngnick

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@Alice-Lilith
@arkodg
@Xunzhuo
@zirain
@qicz

Emeritus Maintainers

@danehans
@alexgervais
@skriss
@youngnick

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@Alice-Lilith
@arkodg
@Xunzhuo
@zirain
@qicz

Emeritus Maintainers

@danehans
@alexgervais
@skriss
@youngnick

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@Alice-Lilith
@arkodg
@Xunzhuo
@zirain
@qicz

Emeritus Maintainers

@danehans
@alexgervais
@skriss
@youngnick

Maintainers

Mon, 01 Jan 0001 00:00:00 +0000

The following maintainers, listed in alphabetical order, own everything

@Alice-Lilith
@arkodg
@Xunzhuo
@zirain
@qicz

Emeritus Maintainers

@danehans
@alexgervais
@skriss
@youngnick

Metadata in XDS resources

Mon, 01 Jan 0001 00:00:00 +0000

Overview

In Envoy, static metadata can be configured on various resources: listener, virtual host, route and cluster.

Static metadata can be used for various purposes:

Observability: enrichment of access logs and traces with metadata formatters and custom tags.
Processing: provide configuration context to filters in a certain scope (e.g. vhost, route, etc.).

Introduction

Migrating from Ingress to Envoy Gateway involves converting existing Ingress resources into resources compatible with Envoy Gateway. Two tools are available to help with this migration:

ingress2gateway

The official ingress2gateway tool (maintained by Kubernetes SIG-Network) transforms Ingress resources into Gateway API resources.

ingress2eg

The ingress2eg tool is an unofficial proof-of-concept forked from ingress2gateway with additional capabilities:

NGINX Annotation Support: Converts NGINX-specific annotations (16+ feature categories including session affinity, authentication, rate limiting, CORS, canary deployments, etc.)
Envoy Gateway CRD Output: Generates not only Gateway API resources (Gateway, HTTPRoute) but also Envoy Gateway specific CRDs (BackendTrafficPolicy, SecurityPolicy, etc.)

We aim to get this feature merged upstream in ingress2gateway as well.

Migrating from Ingress Resources

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

Migrating from Ingress to Envoy Gateway involves converting existing Ingress resources into resources compatible with Envoy Gateway. Two tools are available to help with this migration:

ingress2gateway

The official ingress2gateway tool (maintained by Kubernetes SIG-Network) transforms Ingress resources into Gateway API resources.

ingress2eg

The ingress2eg tool is an unofficial proof-of-concept forked from ingress2gateway with additional capabilities:

NGINX Annotation Support: Converts NGINX-specific annotations (16+ feature categories including session affinity, authentication, rate limiting, CORS, canary deployments, etc.)
Envoy Gateway CRD Output: Generates not only Gateway API resources (Gateway, HTTPRoute) but also Envoy Gateway specific CRDs (BackendTrafficPolicy, SecurityPolicy, etc.)

We aim to get this feature merged upstream in ingress2gateway as well.

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

The Multicluster Service API ServiceImport object can be used as part of the GatewayAPI backendRef for configuring routes. For more information about multicluster service API follow sig documentation.

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Multicluster Service Routing

Mon, 01 Jan 0001 00:00:00 +0000

We will use Submariner project for setting up the multicluster environment for exporting the service to be routed from peer clusters.

Setting KIND clusters and installing Submariner.

We will be using KIND clusters to demonstrate this example.

git clone https://github.com/submariner-io/submariner-operator
cd submariner-operator
make clusters

Note: remain in submariner-operator directory for the rest of the steps in this section

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Mutual TLS: External Clients to the Gateway

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how mutual TLS can be achieved between external clients and the Gateway. This task uses a self-signed CA, so it should be used for testing and demonstration purposes only.

Prerequisites

OpenSSL to generate TLS assets.

Installation

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Observability: Accesslog

Overview

Envoy provide robust platform for metrics, Envoy support three different kinds of stats: counter, gauges, histograms.

Envoy enables prometheus format output via the /stats/prometheus admin endpoint.

Envoy support different kinds of sinks, but EG will only support Open Telemetry sink.

Envoy Gateway leverages Gateway API for configuring managed Envoy proxies. Gateway API defines core, extended, and implementation-specific API support levels for implementers such as Envoy Gateway to expose features. Since metrics is not covered by Core or Extended APIs, EG should provide an easy to config metrics per EnvoyProxy.

Observability: Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Envoy supports extensible tracing to different sinks, Zipkin, OpenTelemetry etc. Overview of Envoy tracing can be found here.

Envoy Gateway leverages Gateway API for configuring managed Envoy proxies. Gateway API defines core, extended, and implementation-specific API support levels for implementers such as Envoy Gateway to expose features. Since tracing is not covered by Core or Extended APIs, EG should provide an easy to config tracing per EnvoyProxy.

Only OpenTelemetry sink can be configured currently, you can use OpenTelemetry Collector to export to other tracing backends.

Observability: Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Envoy supports extensible tracing to different sinks, Zipkin, OpenTelemetry etc. Overview of Envoy tracing can be found here.

Envoy Gateway leverages Gateway API for configuring managed Envoy proxies. Gateway API defines core, extended, and implementation-specific API support levels for implementers such as Envoy Gateway to expose features. Since tracing is not covered by Core or Extended APIs, EG should provide an easy to config tracing per EnvoyProxy.

Only OpenTelemetry sink can be configured currently, you can use OpenTelemetry Collector to export to other tracing backends.

OIDC Authentication

Mon, 01 Jan 0001 00:00:00 +0000

This task provides instructions for configuring OpenID Connect (OIDC) authentication. OpenID Connect (OIDC) is an authentication standard built on top of OAuth 2.0. It enables EG to rely on authentication that is performed by an OpenID Connect Provider (OP) to verify the identity of a user.

Envoy Gateway introduces a new CRD called SecurityPolicy that allows the user to configure OIDC authentication. This instantiated resource can be linked to a Gateway and HTTPRoute resource.

OPA Sidecar with Unix Domain Socket

Mon, 01 Jan 0001 00:00:00 +0000

This task demonstrates how to deploy an Open Policy Agent (OPA) sidecar inside Envoy Proxy pods created by Envoy Gateway, with Envoy Proxy communicating with OPA over a Unix Domain Socket.

The setup provides these advantages over running OPA as its own Kubernetes service:

Using a sidecar ensures that the OPA is always on the same worker node as Envoy Proxy. This reduces latency and simplifies access control.
Using a Unix Domain Socket avoids TCP/TLS overhead while improving security by avoiding network exposure and reduces latency.

This production-ready approach uses Envoy Gateway’s extension APIs to configure Envoy Proxy’s external authorization and standard Kubernetes API objects to configure OPA’s Envoy External Authorization gRPC plugin.

Open Source Ecosystem

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway OSS Ecosystem 🌐

Envoy Gateway powers modern API gateway solutions while embracing the collaborative spirit of open source. This section highlights projects that extend, integrate with, or leverage Envoy Gateway’s capabilities.

Why Add Your Project?

By listing your open source project here, you help:

🌱 Boost Visibility - Showcase how your project interacts with Envoy Gateway to thousands of cloud-native developers
🤝 Encourage Collaboration - Attract contributors and foster interoperability within the ecosystem

Performance Benchmark Report Explorer

Mon, 01 Jan 0001 00:00:00 +0000

Performance Benchmark Report Explorer

Explore benchmark results from Envoy Gateway Releleases. The test code is open source and available for you to run and contribute to.

Proxy Access Logs

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy access logs.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Proxy Access Logs

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy access logs.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

Proxy Access Logs

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy access logs.

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Envoy Gateway provides an add-ons Helm Chart, which includes all the needing components for observability. By default, the OpenTelemetry Collector is disabled.

Proxy Access Logs

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy access logs.

Prerequisites

Install Envoy Gateway

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Install Add-ons

Install the Gateway API CRDs and Envoy Gateway using Helm:

Proxy Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy metrics.

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Envoy Gateway provides an add-ons Helm Chart, which includes all the needing components for observability. By default, the OpenTelemetry Collector is disabled.

Proxy Metrics

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway offers observability for both the Control Plane and the underlying Envoy Proxy instances. This task shows you how to configure proxy metrics.

Prerequisites

Install Envoy Gateway

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Install Add-ons

Install the Gateway API CRDs and Envoy Gateway using Helm:

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.0.0-latest -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Envoy Gateway provides an add-ons Helm Chart, which includes all the needing components for observability. By default, the OpenTelemetry Collector is disabled.

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Install Add-ons

Envoy Gateway provides an add-ons Helm chart to simplify the installation of observability components.
The documentation for the add-ons chart can be found here.

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.3.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.4.6 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.5.8 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Proxy Tracing

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the ControlPlane and the underlying EnvoyProxy instances. This task show you how to config proxy tracing.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

Rate limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Envoy Gateway supports Global rate limiting, where the rate limit is common across all the instances of Envoy proxies where its applied i.e. if the data plane has 2 replicas of Envoy running, and the rate limit is 10 requests/second, this limit is common and will be hit if 5 requests pass through the first replica and 5 requests pass through the second replica within the same second.

Rate limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Rate Limit

Mon, 01 Jan 0001 00:00:00 +0000

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why you may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Rate Limit Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why a user may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Scope Types

The rate limit type here describes the scope of rate limits.

Rate Limit Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why a user may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Scope Types

The rate limit type here describes the scope of rate limits.

Rate Limit Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why a user may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Scope Types

The rate limit type here describes the scope of rate limits.

Rate Limit Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why a user may want to implements Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Scope Types

The rate limit type here describes the scope of rate limits.

Rate Limit Design

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limit is a feature that allows the user to limit the number of incoming requests to a predefined value based on attributes within the traffic flow.

Here are some reasons why a user may want to implement Rate limits

To prevent malicious activity such as DDoS attacks.
To prevent applications and its resources (such as a database) from getting overloaded.
To create API limits based on user entitlements.

Scope Types

The rate limit type here describes the scope of rate limits.

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Rate limiting is a technique for controlling the number of incoming requests over a defined period. It can be used to control usage for business purposes, like agreed usage quotas, or to ensure the stability of a system, preventing overload and protecting the system from, e.g., Denial of Service attacks.

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

Rate Limiting

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Use Cases

Rate limiting is commonly used to:

Prevent Overload: Protect internal systems like databases from excessive traffic.
Enhance Security: Block or limit abusive behavior such as brute-force attempts or DDoS attacks.
Ensure Fair Usage: Enforce quotas and prevent resource hogging by individual clients.
Implement Entitlements: Define API usage limits based on user identity or role.

Rate Limiting in Envoy Gateway

Envoy Gateway supports two types of rate limiting:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.0.0-latest -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Envoy Gateway provides an add-ons Helm Chart, which includes all the needing components for observability. By default, the OpenTelemetry Collector is disabled.

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps from the Quickstart task to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Verify the Gateway status:

kubectl get gateway/eg -o yaml

egctl x status gateway -v

Install Add-ons

Envoy Gateway provides an add-ons Helm chart to simplify the installation of observability components.
The documentation for the add-ons chart can be found here.

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.3.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.4.6 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.5.8 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

RateLimit Observability

Mon, 01 Jan 0001 00:00:00 +0000

Envoy Gateway provides observability for the RateLimit instances. This guide show you how to config RateLimit observability, includes traces.

Prerequisites

Install Envoy Gateway

Follow the steps below to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Expand for instructions

Install the Gateway API CRDs and Envoy Gateway using Helm:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v1.6.3 -n envoy-gateway-system --create-namespace

Install the GatewayClass, Gateway, HTTPRoute and example app:

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

A ReferenceGrant can be used to enable cross namespace references within Gateway API. In particular, Routes may forward traffic to backends in other namespaces, or Gateways may refer to Secrets in another namespace.

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the 
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](../concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

ReferenceGrant

Mon, 01 Jan 0001 00:00:00 +0000

The `ReferenceGrant` resource is Beta and part of the
Standard Channel since `v0.6.0`. For more information on release
channels, refer to our [versioning guide](https://gateway-api.sigs.k8s.io/concepts/versioning).

This resource was originally named "ReferencePolicy". It was renamed
to "ReferenceGrant" to avoid any confusion with policy attachment.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Release Process

Mon, 01 Jan 0001 00:00:00 +0000

This document guides maintainers through the process of creating an Envoy Gateway release.

Release Candidate

The following steps should be used for creating a release candidate.

Prerequisites

Permissions to push to the Envoy Gateway repository.

Set environment variables for use in subsequent steps:

export MAJOR_VERSION=0
export MINOR_VERSION=3
export RELEASE_CANDIDATE_NUMBER=1
export GITHUB_REMOTE=origin

Clone the repo, checkout the main branch, ensure it’s up-to-date, and your local branch is clean.

Request Authentication

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Routing outside Kubernetes

Mon, 01 Jan 0001 00:00:00 +0000

Routing to endpoints outside the Kubernetes cluster where Envoy Gateway and its corresponding Envoy Proxy fleet is running is a common use case. This can be achieved by:

defining FQDN addresses in a EndpointSlice (covered in this document)
defining a Backend resource, as described in the Backend Task.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Routing outside Kubernetes

Mon, 01 Jan 0001 00:00:00 +0000

Routing to endpoints outside the Kubernetes cluster where Envoy Gateway and its corresponding Envoy Proxy fleet is running is a common use case. This can be achieved by defining FQDN addresses in a EndpointSlice.

Installation

defining FQDN addresses in a EndpointSlice (covered in this document)
defining a Backend resource, as described in the Backend Task.

Installation

Follow the steps from the Quickstart to install Envoy Gateway and the example manifest. Before proceeding, you should be able to query the example backend using HTTP.

Running Envoy Gateway locally

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Today, Envoy Gateway runs only on Kubernetes. This is an ideal solution when the applications are running in Kubernetes. However there might be cases when the applications are running on the host which would require Envoy Gateway to run locally.

Goals

Define an API to allow Envoy Gateway to retrieve configuration while running locally.
Define an API to allow Envoy Gateway to deploy the managed Envoy Proxy fleet on the host machine.

Non Goals

Support multiple ways to retrieve configuration while running locally.
Support multiple ways to deploy the Envoy Proxy fleet locally on the host.

API

The provider field within the EnvoyGateway configuration only supports Kubernetes today which provides two features - the ability to retrieve resources from the Kubernetes API Server as well as deploy the managed Envoy Proxy fleet on Kubernetes.
This document proposes adding a new top level provider type called Custom with two fields called resource and infrastructure to allow the user to configure the sub providers for providing resource configuration and an infrastructure to deploy the Envoy Proxy data plane in.
A File resource provider will be introduced to enable retrieving configuration locally by reading from the configuration from a file.
A Host infrastructure provider will be introduced to allow Envoy Gateway to spawn a Envoy Proxy child process on the host.

Here is an example configuration

Running Envoy Gateway locally

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Goals

Define an API to allow Envoy Gateway to retrieve configuration while running locally.
Define an API to allow Envoy Gateway to deploy the managed Envoy Proxy fleet on the host machine.

Non Goals

Support multiple ways to retrieve configuration while running locally.
Support multiple ways to deploy the Envoy Proxy fleet locally on the host.

API

The provider field within the EnvoyGateway configuration only supports Kubernetes today which provides two features - the ability to retrieve resources from the Kubernetes API Server as well as deploy the managed Envoy Proxy fleet on Kubernetes.
This document proposes adding a new top level provider type called Custom with two fields called resource and infrastructure to allow the user to configure the sub providers for providing resource configuration and an infrastructure to deploy the Envoy Proxy data plane in.
A File resource provider will be introduced to enable retrieving configuration locally by reading from the configuration from a file.
A Host infrastructure provider will be introduced to allow Envoy Gateway to spawn a Envoy Proxy child process on the host.

Here is an example configuration

Running Envoy Gateway locally

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Goals

Define an API to allow Envoy Gateway to retrieve configuration while running locally.
Define an API to allow Envoy Gateway to deploy the managed Envoy Proxy fleet on the host machine.

Non Goals

Support multiple ways to retrieve configuration while running locally.
Support multiple ways to deploy the Envoy Proxy fleet locally on the host.

API

The provider field within the EnvoyGateway configuration only supports Kubernetes today which provides two features - the ability to retrieve resources from the Kubernetes API Server as well as deploy the managed Envoy Proxy fleet on Kubernetes.
This document proposes adding a new top level provider type called Custom with two fields called resource and infrastructure to allow the user to configure the sub providers for providing resource configuration and an infrastructure to deploy the Envoy Proxy data plane in.
A File resource provider will be introduced to enable retrieving configuration locally by reading from the configuration from a file.
A Host infrastructure provider will be introduced to allow Envoy Gateway to spawn a Envoy Proxy child process on the host.

Here is an example configuration