Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support transparent proxy config in kuma-dp via CLI flags #13339

Open
8 tasks
bartsmykla opened this issue Apr 7, 2025 · 0 comments
Open
8 tasks

Support transparent proxy config in kuma-dp via CLI flags #13339

bartsmykla opened this issue Apr 7, 2025 · 0 comments
Assignees
Labels
kind/feature New feature triage/accepted The issue was reviewed and is complete enough to start working on it
Milestone

Comments

@bartsmykla
Copy link
Contributor

Description

Summary

Extend kuma-dp to support receiving transparent proxy configuration through CLI flags, as described in the MADR Transparent Proxy ConfigMap Handling Outside the Control Plane.

Background

To remove the control plane’s need to manage workload-specific ConfigMaps, the data plane proxy (kuma-dp) must be able to load and merge transparent proxy configuration on its own using a flexible set of CLI options.

Tasks

  • Add support for a new --transparent-proxy-config flag to kuma-dp
  • Accept the following input formats:
    • No value (enables default transparent proxy settings)
    • Comma-separated list of file paths
    • A - to read config from STDIN
  • Allow the flag to be repeated and merge inputs in the order provided
  • Add a --transparent-proxy alias for --transparent-proxy-config
  • Ensure correct merging logic (later values override earlier ones)
  • Implement basic validation of the resulting configuration
  • Add tests for different flag combinations and override behavior
  • Update CLI help text and documentation

Acceptance Criteria

  • kuma-dp accepts transparent proxy config via --transparent-proxy-config and --transparent-proxy flags
  • Supported input formats:
    • No value = enable transparent proxy with default config
    • Comma-separated file paths
    • A - for reading from STDIN
  • Values are merged in the order provided across repeated flags
  • Later values override earlier ones (e.g. STDIN takes precedence if listed last)
  • Alias --transparent-proxy works as a shorthand for default config
  • Configuration is validated and loaded correctly into the proxy
@bartsmykla bartsmykla added kind/feature New feature triage/accepted The issue was reviewed and is complete enough to start working on it labels Apr 7, 2025
@bartsmykla bartsmykla added this to the 2.11.x milestone Apr 7, 2025
@bartsmykla bartsmykla self-assigned this Apr 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature New feature triage/accepted The issue was reviewed and is complete enough to start working on it
Projects
None yet
Development

No branches or pull requests

1 participant