Feature Proposal: 3rd Party API Gateway(Traefik Proxy) Validation Support

[kubevious]

Scope

We want to make usage of 3rd party API Gateways easier and safer. Kubevious is already equipped with a Gateway View where Ingresses, Services, and Applications are correlated and presented in a Domain -> URL -> Ingress -> Service -> Service Port -> Container Port -> Application path. We want to extend Gateway support capability and add support to popular API Gateways such as Traefik, Kong, Istio, Ambassador, Skipper, etc.

Kubevious already validates Service selectors in Ingresses, and Pod and Port selectors in Services. We also want to validate 3rd party API Gateways to detect errors early and aid with troubleshooting. That could require the correlation of 3rd party CRDs and other runtime sources to build a more clear understanding of what's going on in the cluster, application, and the API Gateway.

Requirements

• API Gateway to be supported: Traefik Proxy
• Parse and integrate IngressRoute, TraefikService, Middleware, and TLSOptions
• Objects to be parsed under the Gateway View

Validation Logic

• Detect missing Service and TraefikService
• Detect missing Ports
• Detect missing Middleware
• Detect missing TLSOptions
• Detect unused TraefikService
• Detect unused Middleware
• Detect unused TLSOptions

Validator documentation: https://kubevious.io/docs/built-in-validators/traefik-proxy/

DRI

@rubenhak

Current State

Traefik Proxy native support is already available in version 1.0.7.

Progress

• ✅ Draft idea description
• ✅ Gather initial interest from the community.
• ✅ Define high-level requirements
• ✅ Form a working group and elect a DRI
• ✅ Clarify implementation specifics
• ✅ Fun part - coding
• ✅ Beta
• ✅ Released

Appendixes

Kubevious Gateway View

A glimpse of what Kubevious does for K8s Ingresses. We want to do the same (and more) for 3rd party API Gateways.

Legend

✅ - Complete
👉 - Current / active stage

[kubevious]

Support for Traefik Proxy viewer and validators added to Kubevious. Released in v1.0.10. Learn more about Kubernetes API Gateway View and Traefik Proxy Configuration Validation.