# Contour Community Meeting Notes - Archive 2019-2020

Join the Contour Community Meetings - For details view our site at https://projectcontour.io/community/

[Zoom link](https://zoom.us/j/98840408974?pwd=OW5UcWF3QUUvbDhDSzY2L0Y2YVhoUT09)

You can find the recordings of previous meetings [on YouTube](https://www.youtube.com/playlist?list=PLk2K7YhXu5KtYU1UGEYNC8ApH5gsWihDJ)

Add your request, question or suggestion to [our issue list](https://github.com/projectcontour/contour/issues)

# January 19, 2021

- ## What have we been working on?
- [stevek] local rate limiting PR: https://github.com/projectcontour/contour/pull/3251
- [youngnick] Service APIs design PR: https://github.com/projectcontour/contour/pull/3213
- that led to Multiple Listeners design PR: https://github.com/projectcontour/contour/pull/3263
- [danehans]- Contour Operator Service APIs design: https://github.com/projectcontour/contour-operator/pull/171
-
- ## Process stuff
- Apology about missing some process for Alex
- ## Discussion
- [ccravens] UDP support? Is Contour always and forever just HTTP?

# January 12, 2021

- ## What have we been working on?
- [sunjayBhatia] - dependency updates, other small issues, cipher suites discussion.
- [danehans] Operator Service APIs Implementation Design Spec: https://github.com/projectcontour/contour-operator/pull/171
- Evoloving the Network Publishing API: https://github.com/projectcontour/contour-operator/pull/151
- [stevek]
- internal build stuff
- no-regrets local rate limiting implementation
- [stevesloka] [HTTPProxy Conflict Design](https://github.com/projectcontour/contour/pull/3145)
- ## Discussion
- [danehans] Operator Migration support: https://github.com/projectcontour/contour-operator/issues/141
- [danehans] Maintainer meeting invite to discuss Contour/Operator Service APIs implementtion plan.
- [ccravens] UDP support? Is Contour always and forever just HTTP?

# January 5, 2021

- ## What have we been working on?
- [danehans] contour-operator [PR 171](https://github.com/projectcontour/contour-operator/pull/171)- design doc for adding [Service APIs](https://kubernetes-sigs.github.io/service-apis/) support.
- [stevek]
- rate limiting design edits
- catching up on other design doc reviews
-
- ## Discussion
- [danehans] contour-operator [PR 171](https://github.com/projectcontour/contour-operator/pull/171)
- [danehans] [Network Publishing API](https://github.com/projectcontour/contour-operator/pull/151) for Contour Operator.
- [youngnick] [Service API Design Doc PR for Contour](https://github.com/projectcontour/contour/pull/3213)

- ## Events
- KubeCon EU - Contour maintainer sessions
- Intro - Alex Xu
- Deep dive - Steve Sloka

# December 15, 2020

- ## What have we been working on?
- 1.11.0 Release later this week
- 1.10.1 release?
- Envoy 1.16.x
- https://github.com/projectcontour/contour/pull/3199
- See: https://github.com/envoyproxy/envoy/issues/14400 (Envoy release issue)
- Both releases will be delayed until we have an available Envoy container image, even if that's into next year.
- only 2 non-design PRs outstanding, youngnick will move these into the next milestone

- ## Discussion
- [danehans] [PR 1955](https://github.com/projectcontour/contour/pull/1955)- Security context constraints for deployment/contour and job/contour-certgen.
- [danehans] 1.11.0 release- Understand the release details.
- [danehans] 1.11.0 release- PRs needed:
- https://github.com/projectcontour/contour-operator/pull/162
- https://github.com/projectcontour/contour-operator/pull/163
- [danehans] Operator post-v1.11.0
- Network Publishing API: [PR 151](https://github.com/projectcontour/contour-operator/pull/151)
- Nice to have: https://github.com/projectcontour/contour-operator/pull/149
- [danehans] I'll be OOO 12/18-1/3. Can maintainers keep an eye on contour-operator PRs and Issues? We're starting to get new contributors.
- [danehans] Contour Operator blog post WIP: https://gist.github.com/danehans/647e9dd22d503c0b6192eb2b24cfffb1

# December 8, 2020

- ## What have we been working on?
- Welcome Sunjay & Alex!
- [stevek]
- [RateLimiting Design](https://github.com/projectcontour/contour/pull/3178)
- [stevesloka]
- [Confict Resolution Design](https://github.com/projectcontour/contour/pull/3145)
- [MetaData Design](https://github.com/projectcontour/contour/pull/3146)
- [Envoy Extensions List](https://projectcontour.io/resources/envoy/#envoy-extensions)
- Integrate into Integration Tests?
- Docs Update (Thanks @a-mccarthy!)
- [danehans]
- Has a [v1.11.0](https://github.com/projectcontour/contour/milestone/48) release date been set?

- ## Discussion
- [stevesloka] [Oauth2 Filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/oauth2_filter)

- ## Events
-

# December 1, 2020

- ## What have we been working on?
- [Envoy 1.16.1](https://github.com/projectcontour/contour/pull/3151): [Notes](https://groups.google.com/g/envoy-users/c/cFy3OsX5suc/m/w1AFFonEBQAJ?pli=1)
- [stevek]
- getting CI back to green
- picking up rate limiting design again
- operator reviews
- [danehans]
- operator e2e
- operator docs

- ## Discussion
- [danehans] [Contour Operator](https://github.com/projectcontour/contour-operator) developer on-boarding overview.
- ## Events
- [Cloud Native Kitchen](https://cloud-native-kitchen.heysummit.com/talks/ingress-the-gateway-to-your-apps/)
- Office Hours this Thursday (12/3)!

# November 24, 2020
- ## News

- ## What have we been working on?

- ## Discussion
-
- ## Events

# November 17, 2020
- ## News
- No meeting due to [KubeCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=Google&utm_medium=search_NA&utm_campaign=KC_CNC_NA&gclid=CjwKCAiAtK79BRAIEiwA4OskBj3HxluMFXdogcwbdMRsL2Hi0NFKpj3Gzep3xVWSqnB3Sxo5U9U5TRoCk_AQAvD_BwE)
# November 10, 2020
- ## News
- Contour v1.10.0 :tada:
- https://projectcontour.io/contour_v1100/
- https://github.com/projectcontour/contour/releases/tag/v1.10.0
- https://projectcontour.io/guides/xds-migration/

- ## What have we been working on?

- ## Discussion
- [danehans] Any Contour content for upcoming kubecon?
- [Kubernetes Is Not Just Kubernetes – Ramp Up with These Eight Open Source Projects](https://sched.co/ff22)
- [Build Your Own Envoy Control Plane](https://sched.co/ek9x)
- [Contour, A High Performance Multitenant Ingress Controller for Kubernetes](https://sched.co/ekGX)
- Meet the Maintainer
- [Wednesday, November 18 • 6:00pm - 6:45pm](https://sched.co/fMWo)
- [Thursday November 19, 2020 2:00pm - 2:45pm EST](https://sched.co/fMXL)
- [danehans] Any feedback from EnvoyCon attendees?
- https://github.com/envoyproxy/xds-relay

- ## Events

# October 27, 2020
- ## News

- ## What have we been working on?
- [danehans] [Contour Operator](https://github.com/projectcontour/contour-operator) Update:
- The operator is functional. Give it a test drive with a few simple steps.
- The [v1alpha1 release](https://github.com/projectcontour/contour-operator/milestone/1) is scheduled for 12/4 (coincides with Contour v1.11.0).
- [stevesloka] [xDS Versioning](https://github.com/projectcontour/contour/issues/3047) --> Road to v3
- [stevek] rate limiting
- [[WIP] background doc](https://github.com/projectcontour/contour/pull/3070) - please comment!
- [tsaarni] [WIP: program 503 routes for misconfigured services](https://github.com/projectcontour/contour/pull/3071)

- ## Discussion
- [danehans] How is Issue/PR triage handled? I'm looking to formalize the process for contour-operator.
- [danehans] Any Contour content for upcoming kubecon? (moved to 11/3)
- [danehans] Any feedback from EnvoyCon attendees? (moved to 11/3)

- ## Events
-

- ## Feedback

# October 20, 2020
- ## News

- ## What have we been working on?
-
- [stevek] [multi-arch Docker images](https://github.com/projectcontour/contour/pull/3031) have merged to `main`, supporting `linux/amd64` and `linux/arm64`
- [Docker Hub images](https://hub.docker.com/layers/projectcontour/contour/main/images/sha256-0ebfb7ea007658e00d985362b39495f78e88485f4f445a9ec68fd09885e0ee93?context=explore)
- [danehans] contour-operator is close to being functional for deploying/managing [the example](https://raw.githubusercontent.com/projectcontour/contour/release-1.9/examples/render/contour.yaml). Note: issue 2122 prevents multi-contour/namespace support
- [youngnick] Decision about IngressClass and GatewayClass [#2809](https://github.com/projectcontour/contour/issues/2809)

- ## Discussion
- [danehans] [issue 2122](https://github.com/projectcontour/contour/issues/2122)
- [danehans] https://github.com/GoogleCloudPlatform/gke-networking-recipes/tree/master/gateway

- ## Events
- [today] [Utah K8S Meetup](https://www.meetup.com/Utah-Kubernetes-Meetup/events/jhxnqrybcnbbc/)

- ## Feedback

# October 13, 2020
- ## News
- The [1.9](https://github.com/projectcontour/contour/releases/tag/v1.9.0) release is available
- external auth
- new CORS API
- proxy client certificates
- Contour now requires Kubernetes 1.16, for v1 CRDs

- ## What have we been working on?
- [skriss]
- config file field `request-timeout` will be dropped in Contour 1.10 (replaced by `timeouts.request-timeout` since 1.7) ([PR #3005](https://github.com/projectcontour/contour/pull/3005))
- the default minimum TLS version for `HTTPProxies` & `Ingresses` will change from 1.1 to 1.2 in Contour 1.10 ([PR #3007](https://github.com/projectcontour/contour/pull/3007))
- [stevesloka] [xDS Config Options](https://github.com/projectcontour/contour/pull/3018/files#diff-27b6c90e3edf8e0fbbea6e63ae19a31e91ffdc2596a0aab6db085e49269e9dbeR14)

- ## Discussion

- ## Events
- Envoycon this [Thursday!](https://events.linuxfoundation.org/envoycon/program/schedule/)
- Utah K8S Meetup [next Tuesday](https://www.meetup.com/Utah-Kubernetes-Meetup/events/jhxnqrybcnbbc/)

- ## Feedback

# October 6, 2020
- ## News
-
- The [1.9](https://github.com/projectcontour/contour/releases/tag/v1.9.0) release is available
- external auth
- new CORS API
- proxy client certificates
- Contour now required Kubernetes 1.16

- ## What have we been working on?

- @stevesloka finalizing the release now

- ## Discussion

- Moving to xDS v3 ... hard to see how to avoid duplicating a lot of code, especially in test fixtures
- contour-operator making steady progress
- hopefully a few more Redhat folks may be able to a
- aiming to get to a demo and inital operator release
- initial release scoped for parity with the Contour example deployment YAML
- some mention of discussions with Istio folks around Contour

- ## Events

- ## Feedback

# September 22, 2020
- ## News

- ## What have we been working on?
- [skriss]
- updating example YAML to use `v1` custom resource definitions ([#2916](https://github.com/projectcontour/contour/pull/2916))
- **NOTE**: this bumps the minimum supported Kubernetes version to 1.16.
- reviewing HTTPProxy CORS support PR ([#2890](https://github.com/projectcontour/contour/pull/2890))
- [tsaarni] implementation for client authentication (configuration of envoy client cert) for backend TLS ([#2910](https://github.com/projectcontour/contour/pull/2910))
- [danehans] experimental [contour-operator](https://github.com/projectcontour/contour-operator) development. Several PRs can use reviews.

- ## Discussion
- [danehans] Speaking of CRD v1 and k8s 1.16, do Contour APIs follow the k8s API [deprecation policy](https://kubernetes.io/docs/reference/using-api/deprecation-policy/)?
- see: https://projectcontour.io/resources/deprecation-policy/

- ## Events

- ## Feedback

# September 15, 2020
- ## News
- ## What have we been working on?
- [stevek] validating timeout strings & reporting errors rather than silently disabling the timeout ([#2905](https://github.com/projectcontour/contour/pull/2905) plus a kubebuilder validation to come)
- [jpeach] Initial HTTPProxy external auth support is merged in [#2886](https://github.com/projectcontour/contour/pull/2886)
- [youngnick] Refactoring status for Conditions, no pull yet.
- [stevesloka] go-control-plane xDS Server is merged (still work to go)

- ## Discussion
- [Chad Cravens] Status Update on Header Re-Write
- https://github.com/envoyproxy/envoy/pull/12938
- [Chad Cravens] Default "No Healthy Upstream" Redirect (covered by [#320](https://github.com/projectcontour/contour/issues/320)). Suggestion from the [community](https://twitter.com/benplotnick/status/1230308689703100416)
- [Andrew Zah] Auth Integration Work Q&A
- https://github.com/projectcontour/contour/blob/main/design/external-authorization-design.md
- https://www.envoyproxy.io/docs/envoy/v1.15.0/intro/arch_overview/security/ext_authz_filter#arch-overview-ext-authz
- https://github.com/projectcontour/contour-authserver

- ## Events
- [Contour Office Hours](https://github.com/projectcontour/community/wiki/Office-Hours) this Thursday 1pm EST - 3pm EST
- [Utah Kubernetes Meetup:](https://www.meetup.com/Utah-Kubernetes-Meetup/events/jhxnqrybcnbbc/) Ingress, the Gateway to your Apps (Tuesday, October 20, 2020)
- [Crossing the Streams! Rollout Strategies to Keep Your Users Happy!](https://springone.io/2020/sessions/crossing-the-streams-rollout-strategies-to-keep-your-users-happy)

- ## Feedback

# September 8, 2020
- ## News
- [Contour 1.8.1](https://github.com/projectcontour/contour/releases/tag/v1.8.1) was released with a performance fix for status updates
- ## What have we been working on?
- [stevesloka] go-control-plane xDS Server
- [InFlight PR](https://github.com/projectcontour/contour/pull/2884)
- [Config File](https://github.com/projectcontour/contour/blob/main/examples/contour/01-contour-config.yaml#L9-L10)
- [stevekriss] `internal/dag` refactoring
- ## Discussion
- [Chad Cravens] External Auth Providers, how do they work?
- https://github.com/projectcontour/contour/blob/main/design/external-authorization-design.md
- https://www.envoyproxy.io/docs/envoy/v1.15.0/intro/arch_overview/security/ext_authz_filter#arch-overview-ext-authz
- https://github.com/projectcontour/contour-authserver
- ## Feedback

# September 1, 2020
- ## News
- [Status output performance issue](https://github.com/projectcontour/contour/issues/2857) found by @mattmoor
- [youngnick] I propose we fix it and cut a 1.8.1 point release.
- ## What have we been working on?
- Refactoring work
- [stevek] [DAG builder refactoring part 1](https://github.com/projectcontour/contour/pull/2847)
- Issues
- [stevesloka] [External Name Regression](https://kubernetes.slack.com/archives/C8XRH2R4J/p1598987456244000)
- [zianke] [Add clickable anchor links to the website](https://github.com/projectcontour/contour/pull/2852)
- [jonasrosland] Will look into [CII Badge Silver](https://bestpractices.coreinfrastructure.org/en/projects/4141?criteria_level=1) status

- ## Feedback

# August 25, 2020
- ## News
- (youngnick)Bringing forward 1.8 release: we have a few bigger PRs almost ready to go, we will cut 1.8 before they come in, which will be a few days early on the 28th of August, instead of the 31st.
- ## What have we been working on?
- [stevek] [Guide for using Gatekeeper with Contour](https://github.com/projectcontour/contour/pull/2814)

- ## Feedback
- [stevesloka] Version of Kubernetes users are using. (re: CRD v1)

# August 18, 2020
- ## News
- [Roadmap update PR](https://github.com/projectcontour/community/pull/4). tl;dr we are pushing the roadmap out for two months while we refactor to allow us to deliver the features in a more sustainable way.
- Kubecon Meet the Maintainer Sessions:
- [Wednesday, August 19 • 17:00 - 18:00](https://sched.co/djUk)
- [Thursday, August 20 • 20:00 - 21:00](https://sched.co/djVF)
- [Kubecon Contour BoF](https://sched.co/b6H3) - Thursday, August 20 • 13:00 - 13:35
- Office Hours:
- Overview Page: https://github.com/projectcontour/community/wiki/Office-Hours
- Cal Link: https://calendar.google.com/event?action=TEMPLATE&tmeid=Nm9qN2lrMm1lcnNxc29pMWlyYWoxY2s3YjFfMjAyMDA4MjBUMTcwMDAwWiBzdGV2ZUBzdGV2ZXNsb2thLmNvbQ&tmsrc=steve%40stevesloka.com&scp=ALL

- ## What have we been working on?
- ## Discussion
- Setting up local development environment [Chad Cravens]
- Contour architecture (envoy API, go-control-plane, dag, etc.) [Chad Cravens]
- [Issue 2287](https://github.com/projectcontour/contour/issues/2287), Service APIs implementation [Daneyon Hansen]. How to proceed with the following:
- List of issues that block doing some implementation of the Service APIs behavior.
- List of issues that need to be implemented to actually deliver the [v1apha1](https://docs.google.com/document/d/1BJoxZTbh2bkYQnqVOETm6_7q4hjwGop2pTZDc__5olI/edit) Service APIs behavior.
- [Issue 2187](https://github.com/projectcontour/contour/issues/2187), add an operator for Contour. [Cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) is a k8s-sigs project for managing addons (e.g. CoreDNS) using [operators](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/) [Daneyon Hansen].
- ## Next week
-

# August 11, 2020
- ## News
- ## What have we been working on?
- [stevek] exploring [Gatekeeper](https://github.com/open-policy-agent/gatekeeper) as a validating admission controller
- ## Discussion
- ## Next week
-

# August 4, 2020
- ## News
- Contour CVE - [Ingress data plane (Envoy deployment) is vulnerable to DOS](https://github.com/projectcontour/contour/security/advisories/GHSA-mjp8-x484-pm3r)
- ## What have we been working on?
- Office Hours this Thursday!
- https://github.com/projectcontour/community/wiki/Office-Hours
- New distribution lists
- ## Discussion
- [Renaming master to main once Github adds tooling for that](https://github.com/projectcontour/contour/issues/2744)
- Move to two reviewers per PR
- [Endpoints Slice Support](https://github.com/projectcontour/contour/issues/2696#issuecomment-668667006)
- [ExtensionService](https://github.com/projectcontour/contour/issues/2713#issuecomment-666163929) for Auth support

- ## Next week
- Move to Envoy go-control-plane: Some [discussion](https://github.com/projectcontour/contour/pull/2604#discussion_r463322562) around how to handle Endpoints
- Finalize discussion around changing the number of reviewers for PRs.

# July 28, 2020
- ## What have we been working on?
- Integration tests running on CI jobs
- Add response timeout min/max limits to the config file (https://github.com/projectcontour/contour/pull/2741)
- Migration from Google groups to https://lists.cncf.io/g/cncf-contour-users

# July 21, 2020
- ## What have we been working on?
- [jonas] Contour now has a **Passing** CII Badge: [](https://bestpractices.coreinfrastructure.org/projects/4141)
- [stevek] consistent timeout syntax across HTTPProxy and config file, and internal refactoring
- [slokas] go-control-plane: Tests pass!
- [youngnick] [Adding Conditions to HTTPProxy](https://github.com/projectcontour/contour/blob/master/design/httpproxy-status-conditions.md)
- [robinfoe] OIDC support for external authorization. Proof of Concept Demo!
- [youngnick] [Contour's Landscape, July 2020](https://projectcontour.io/contours-landscape-jul-2020/)
# July 14, 2020
- ## What have we been working on?
- [stevek] finalizing initial set of [configurable timeouts](https://github.com/projectcontour/contour/issues/2225#issuecomment-623235344)
- [slokas] [removed all IngressRoute bits](https://github.com/projectcontour/contour/pull/2655)
- [glerchundi] [TCP Proxy Bugs](https://github.com/projectcontour/contour/pull/2684)
- [jonas] [Contour Office Hours](https://github.com/projectcontour/community/wiki/Office-Hours)

# July 7, 2020
- ## What have we been working on?
- [CNCF TOC Accepts Contour as Incubating Project](https://www.cncf.io/blog/2020/07/07/toc-accepts-contour-as-incubating-project/)
- [CNCF Tweet](https://twitter.com/CloudNativeFdn/status/1280517176420642822)
- Envoy Security Release: [Contour v1.6.1](https://github.com/projectcontour/contour/releases/tag/v1.6.1)
- [Envoy v1.15.0](https://groups.google.com/g/envoy-announce/c/65LdFH5C63M/m/ZGAt786ABAAJ?pli=1)
- Proposals
- [External Auth Design](https://github.com/projectcontour/contour/blob/7c613d1e4d62781427a31f03eb22aeb9de904139/design/external-authorization-design.md)
- [Proxy Status Conditions](https://github.com/projectcontour/contour/blob/92d21df12baccb9198cc288659f91c6558665ddc/design/httpproxy-status-conditions.md)
- [Configurable timeouts](https://github.com/projectcontour/contour/issues/2225#issuecomment-623235344)

# June 23, 2020
- ## What have we been working on?
- Introducing Steve Kriss to the team
- (stevesloka) [Ingress Class](https://kubernetes.io/docs/concepts/services-networking/ingress/#ingress-class) for Kubernetes v1 Ingress Spec: https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/
- (stevesloka) [Replace XDS Server](https://github.com/projectcontour/contour/pull/2604) with go-control-plane
- (skriss) [Bug fix](https://github.com/projectcontour/contour/pull/2600) for issue where some routes would be dropped if they had overlapping header conditions with another route
- (skriss) [Added some more validations](https://github.com/projectcontour/contour/pull/2617) for header conditions (disallow conflicting exact+notexact, contains+notcontains)
- (stevesloka) [Envoy Security Release v1.14.3](https://github.com/projectcontour/contour/issues/2595)
# June 16, 2020
- ## What have we been working on?
- Security releases
- Envoy 1.14.2 has been released with a security fix.
- We will release a 1.5.1 with this upgrade.
- If there are any releases shortly after Contour 1.6 is released, then we will consider releasing a 1.5.2, on a case-by-case basis. If that is you, please ask.
- IngressRoute removal - IngressRoute will be completely removed in Contour 1.6.
- [`ir2proxy`](https://github.com/projectcontour/ir2proxy) is available for your conversion needs. Please log issues if you find them.
- ir2proxy v1.1 was recently released with TCP Proxy support.
- Removing the IngressRoute code will allow us to make updates to the general CRD handling code without needing to support two code paths.
- Interest in Helm Chart, we have contributors interested already, if you are also interested, please contact us in the Slack channel or look at this issues.
- Please check our [roadmap](https://github.com/projectcontour/community/blob/master/ROADMAP.md). This is not set in stone, but is a rough outline. We'll keep it updated as we can.

# June 9, 2020

- ## What have we been working on?
- [m2] We are planning to completely remove IngressRoute from Contour 1.6. Voice your concerns now :)
- [`ir2proxy`](https://github.com/projectcontour/ir2proxy) is available for your conversion needs. Please log issues if you find them.
- ir2proxy v1.1 was recently released with TCP Proxy support.
- Removing the IngressRoute code will allow us to make updates to the general CRD handling code without needing to support two code paths.
- [Roadmap update](https://github.com/projectcontour/community/pull/2)
- [stevesloka] [Security releases](https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/envoy-announce/y4C7hXH6WrU/eRoMZ6WaAgAJ) of Envoy 1.12.4, 1.13.2 and 1.14.2 are now available

# May 26, 2020

- ## What have we been working on?
- (@youngnick) [Updating HTTPProxy addresses](https://github.com/projectcontour/contour/pull/2551)
- (@jpeach) xDS certificate rotation [#2143](https://github.com/projectcontour/contour/issues/2143)
- [Contour Release v1.5](https://github.com/projectcontour/contour/pulls?q=is%3Apr+milestone%3A1.5.0+is%3Aclosed)

# Issue Discussion
- [Image Pull Policy (Examples)](https://github.com/projectcontour/contour/pull/2545)

# May 19, 2020
- ## What have we been working on?
- @youngnick - Address Status Updates for HTTPProxy:
- [#2371](https://github.com/projectcontour/contour/issues/2371)
- At some point, we've introduced a race [#2522](https://github.com/projectcontour/contour/issues/2522)
- @jpeach - xDS certificate rotation. @tsaarni did the underlying work, so plumbing it through the deployment and tooling. Will be easy for operators to replace certgen with cert-manager. Certificate rotation support makes the secret format transition possible.
- [#2538](https://github.com/projectcontour/contour/issues/2538) certgen doesn't have enough RBAC permissions to update secrets
- [#2537](https://github.com/projectcontour/contour/issues/2537) Stop using ImagePullPolicy of Always
- [#2524](https://github.com/projectcontour/contour/issues/2524) Update deployment to use rotatable bootstrap config
- [#2494](https://github.com/projectcontour/contour/issues/2494) Certgen should generate secrets that are compatible with cert-manager
- @stevesloka - "ingress/v1" [`ingressClassName`](https://kubernetes.io/docs/setup/release/notes/#extending-ingress-with-and-replacing-a-deprecated-annotation-with-ingressclass)

- ## Contour 1.5 release
Currently scheduled for the 29th May, PDT.

If you have landed a change that needs to be discussed in the release notes, the draft is available and can be updated now.

- ## Issue discussion
- [#2483](https://github.com/projectcontour/contour/pull/2483) Are we all agreed that we are going to take a Lua dependency for 1.5? (note that taking this dependency does not imply we will give the ability to configure arbitrary Lua filters)

# May 12, 2020
- ## What have we been working on?
- Status Updates
- [Status Design](https://github.com/projectcontour/contour/issues/2495)
- [ExternalDNS](https://github.com/kubernetes-sigs/external-dns/pull/1569)
- [ExternalDNS w/HTTPPRoxy](https://github.com/projectcontour/contour/issues/2499)
- Fallback Cert Updates
- [Design Update](https://github.com/projectcontour/contour/pull/2504)
- [PR #1 Impl](https://github.com/projectcontour/contour/pull/2477)
- Repository Updates
- [API](https://github.com/projectcontour/contour/pull/2511)
- [Examples](https://github.com/projectcontour/contour/pull/2503)
- Envoy bootsrap for xDS cert rotation update
- [PR](https://github.com/projectcontour/contour/pull/2333) updated after round of reviews, added test case

- ## Issue discussion
- Contour YAML Wrangling
- [Kustomize Draft PR](https://github.com/projectcontour/contour/pull/2474)
- [Venki] SNI not being passed through: https://github.com/projectcontour/contour/issues/2517

# May 5, 2020
- ## What have we been working on?
- Bugs in 1.4:
- [2481](https://github.com/projectcontour/contour/issues/2481), fixed in [2482](https://github.com/projectcontour/contour/pull/2482)
- [2483](https://github.com/projectcontour/contour/pull/2483)
- Contributions
- [2480](https://github.com/projectcontour/contour/pull/2480) thanks @savithruml
- New GitHub [label schema](https://projectcontour.io/resources/how-we-work/)
- ## Issue discussion
- [2495](https://github.com/projectcontour/contour/issues/2495) Richer status

- ## Demo/Presentations
- [Kubernetes VMware User Group meeting](https://github.com/kubernetes/community/blob/master/ug-vmware-users/README.md): Contour/Gimbal in on-Premise environments (Thursday 5/7/20 @ 11am PST)

# April 28, 2020
- ## What have we been working on?
- [New release!](https://github.com/projectcontour/contour/releases/tag/v1.4.0)
- [External Auth](https://github.com/projectcontour/contour/issues/2459)
- ## Issue discussion

# April 21, 2020

- ## What have we been working on?
- Fallback Certificate Design [#2428](https://github.com/projectcontour/contour/pull/2428)
- SNI for clusters [#2442](https://github.com/projectcontour/contour/pull/2442)
- Timeout settings [#2225](https://github.com/projectcontour/contour/issues/2225) [#2247](https://github.com/projectcontour/contour/issues/2247)
-
- ## Contour Donation to CNCF
- ## Issue discussion
-

# April 14, 2020
- ## What have we been working on?
- Upgrade Envoy go-control-plane [#2432](https://github.com/projectcontour/contour/pull/2432) @stevesloka
- Upgrade Envoy v1.14.1 [#2434](https://github.com/projectcontour/contour/pull/2434) @stevesloka
- Improve diagnostics for Secrets errors [#2422](https://github.com/projectcontour/contour/pull/2422) @jpeach
- Updates to annotations docs for new ingress-class behaviour [#2420](https://github.com/projectcontour/contour/pull/2420) @youngnick
- External client certificate authentication feature concluded [#2390](https://github.com/projectcontour/contour/pull/2390) [#2410](https://github.com/projectcontour/contour/pull/2410) [#2250](https://github.com/projectcontour/contour/pull/2250) @tsaarni
- Work in progress: support for Envoy xDS certificate rotation by bootstrap config change [#2333](https://github.com/projectcontour/contour/pull/2333) @tsaarni
- ## Contour donation to CNCF update
- ## Issue discussion
- The separation of metrics and health serving has been merged and will be available in Contour 1.4, due for release in two weeks time.

# April 7, 2020

- ## What have we been working on?
- Nick as new tech lead
- [Contour 1.3.0](https://github.com/projectcontour/contour/releases/tag/v1.3.0)
- What's up for 1.4.0?
- ## Contour Donation to CNCF
- ## Issue discussion
- [403 - Ingress status](https://github.com/projectcontour/contour/issues/403)
-

# March 17, 2020

- ## What have we been working on?
- @davecheney Ingress status updates
- @tsaarni and @jpeach TLS Certificate and SNI changes
- TLS does *not* do authentication or authorization
- There is a difficulty when you add authentication or authorization
- There is work behind the scenes to ensure that when we add client certificate authentication it does not have a security problem.
- @michmike CNCF donation update
- Building the collateral for the governance and other details
- @michmike will coordinate getting the calendaring sorted out.
- ## Issue discussion
- https://github.com/projectcontour/contour/issues/2323
- Ingress annotations
- https://github.com/projectcontour/contour/issues/2325
- External services
- https://github.com/projectcontour/contour/issues/1269
-

# March 10, 2020
- ## What have we been working on?
- e2e testing suite coming soon from @jpeach
- @stevesloka working on some changes to how clusters are built
- knative
- healthchecks w/multiple upstreams
- rate limiting work in upstream envoy
- https://github.com/envoyproxy/ratelimit
- docs work!
- Great place to help contribute! (https://projectcontour.io/docs/v1.2.1/httpproxy/)
- @stevesloka looking into some Gimbal work around connecting clusters
- upstream multi-cluster proposal: https://docs.google.com/document/d/1hFtp8X7dzVS-JbfA5xuPvI_DNISctEbJSorFnY-nz6o/edit#heading=h.u7jfy9wqpd2b
- @tsaarni working with external client cert auth and trial of using cert-manager for xDS cert rotation
- https://github.com/projectcontour/contour/pull/2250
- https://github.com/projectcontour/contour/compare/master...Nordix:cert-manager (just a PoC at this point - requires fork of Envoy and Contour)
- ## Other business
- @stevesloka on Bret Fischer show Thursday, 1pm EST (https://www.youtube.com/channel/UC0NErq0RhP51iXx64ZmyVfg)
- [jonas] Fixing the community page with updated times after DST change
- @tsaarni Potential new feature: secure backend connection with client certificate for Envoy https://docs.google.com/presentation/d/1i37kHBcLfGLO8et77gS7gDWqwDLfqTC52WWC44OrfxI/edit?usp=sharing

# March 3, 2020
- ## What have we been working on?
- Contour releases
- [Contour 1.2.0 released](https://github.com/projectcontour/contour/releases/tag/v1.2.0)
- hot-reload of certificates for Contour, thanks @tsaarni
- Envoy shutdown manager, thanks @stevesloka
- [blog post](https://projectcontour.io/hot-reload-certificates-safely-rollout-envoy-contour-1.2/)
- [Contour 1.2.1 released](https://github.com/projectcontour/contour/releases/tag/v1.2.1)
- upgrade Envoy to 1.13.1 to fix CVE, no code changes
- [Envoy 1.13.1 announcment](https://groups.google.com/forum/#!topic/envoy-announce/sVqmxy0un2s)
- @m2
- [**CNCF donation**](https://github.com/cncf/toc/pull/330)
- No updates, sig-networking is reviewing the proposal
- Next step is @m2 completing a form for sig-networking
- @youngnick
- [service-apis](https://github.com/kubernetes-sigs/service-apis) "support" is in master. Only logging for now.
- Contour watches for new objects and logs their presence
- Tracking spec evolution upstream; will use for an experimental test bed
- Public board bug triage
- [#2264](https://github.com/projectcontour/contour/issues/2264)
- Original connect timeout value is arbitrary
- OK to tune, but want to be based on evidence
- @youngnick to follow up with reporter to gather more information
- [#1691](https://github.com/projectcontour/contour/issues/1691)
- Needs decision on whether to accept this as an issue

# February 18, 2020
- ## What have we been working on?
- Contour releases
- Contour 1.2.0 due this friday
- Envoy 1.13.0 support
- Upgrade to client-go 1.17, It does have [compatibility implications](https://github.com/kubernetes/client-go#versioning)
- service.protocol schema validation
- tcpproxy healthcheck support
- certgen job YAML improvements
- Contour automatically reloads SSL certificate for xDS
- [shortlog](https://gist.github.com/jpeach/90e88aaa7cb6333539cf1484818b9d5e) of changes since v1.1.0
- @m2
- [**CNCF donation**](https://github.com/cncf/toc/pull/330)
- @youngnick
- [Ingress V1 graduation PR](https://github.com/kubernetes/kubernetes/pull/88041)
- IngressV2 types investigation [repo](https://github.com/kubernetes-sigs/service-apis)
- Contour switched to dynamic client for CRD types
- experimental support for Service APIs type will land early in the Contour 1.3 cycle.
- ## Other business
- automatic XDS/gRPC certificate rotation, [background material](https://docs.google.com/presentation/d/14sNKaRLqlyGbDVXcCzTH_MOT-LNmj8nJu_0IPYCptYI/edit?usp=sharing)
- @tsaarni, how's it going?
- Support for Contour to reload its certificate is merged: https://github.com/projectcontour/contour/pull/2198.
- Documentation is still not covered https://github.com/projectcontour/contour/issues/2229.
- Design proposal for Envoy https://github.com/envoyproxy/envoy/issues/9359: it now seems clear what kind of solution is acceptable to enable the proposal in the "background material" slide.
- @stevesloka
- Contour Code Overview: https://twitter.com/projectcontour/status/1229793584175513600

- ## What's coming up?
- Contour 1.2.1 coming March 3rd for Envoy CVE, ([1.2.1 milestone](https://github.com/projectcontour/contour/milestone/37))

# January 21, 2020
- ## What have we been working on?
- **Contour 1.1 released**
- Envoy 1.12.2
- Prefix rewrite support
- Documentation PR [#1974](https://github.com/projectcontour/contour/pull/1974)
- Bunch of fixes to tcpproxy validation
- Lots of weird edge cases fixed.
- Host (and other header) rewrites
- @tsaarni
- automatic XDS/gRPC certificate rotation, [background material](https://docs.google.com/presentation/d/14sNKaRLqlyGbDVXcCzTH_MOT-LNmj8nJu_0IPYCptYI/edit?usp=sharing)
- @m2
- [**CNCF donation**](https://github.com/cncf/toc/pull/330)
- @youngnick
- IngressV2 types investigation [repo](https://github.com/kubernetes-sigs/service-apis)
- Requires either:
- moving to [controller-runtime](https://github.com/kubernetes-sigs/service-apis), which is what the sample repo uses, or
- building custom code that uses the dynamic client (which the controller-runtime does as well), or
- autogenerating Informer code from the service-apis types
- I recommend the first.
- I've done a proof-of-concept that Contour can work with that framework, available in the [reconcile-style](https://github.com/youngnick/contour/tree/reconcile-style) branch in my repo.
- This requires upgrading client-go to 1.17 (controller-runtime requirement).
- We are currently using client-go which supports kubernetes-1.15.4, we really should upgrade anyway. It does have [compatibility implications](https://github.com/kubernetes/client-go#versioning)
- [Design PR](https://github.com/projectcontour/contour/pull/2120) covering some of this is available.
- [Matt Moore] Knative/Serving integration in [0.12 release](https://github.com/knative/serving/releases/tag/v0.12.0)

- ## What's coming up?
- Contour 1.2
- Envoy 1.13

# December 4, 2019
- ## What have we been working on?
- **Contour 1.0 released on November 1!**
- Contour 1.0.1 due 10/Dec
- Contains Envoy 1.12.2, see [announcement](https://groups.google.com/d/msg/envoy-announce/Z4_JwSksPpY/aUGfjc86BwAJ)
- Contour 1.1.0
- Envoy 1.12.2
- Prefix rewrite support
- Documentation PR [#1974](https://github.com/projectcontour/contour/pull/1974)
- Bunch of fixes to tcpproxy validation
- Lots of weird edge cases fixed.
- Conversations had at KubeCon?
- [steve] A lot of discussions about what Contour is, as it was new to many
- [nick] Conversations on how to make Envoy an edge proxy
- [nick] Discussions on IngressRoute v2 with contributors from Kong, NGINX, Google etc - will be a subproject within SIG-Network
- [CNCF SIG Network](https://github.com/cncf/sig-network) - Dave is involved, but nothing has happened yet
- IngressRoute -> HTTPProxy conversation tool in progress: https://github.com/projectcontour/ir2proxy
- Helm Chart for Contour 1.0 - Peter Grant
- Example from Harbor on how to do it: https://github.com/goharbor/harbor-helm

# November 26, 2019
- KubeCon US :tada:

# October 15, 2019

- ## Welcome to new team member, James Peach!
- ## What have we been working on?
- Contour 1.0.0-rc.1 released last week
- HTTPProxy CRD now v1
- Only additive changes going forth
- CRD changes
- `spec.routes.services.heathcheck` move to `spec.route.healthCheckPolicy`
- `spec.routes.services.strategy` moved to `spec.routes.loadBalancerPolicy`
- `spec.routes.prefixRewrite` removed. Replacement coming in rc.2
- may come back new & improved
- some webapps don't handle equivalent url's (e.g., example.com/site/ and example.com/site//) and we don't want to move forward with this feature being somewhat half-baked.
- Github Issue: https://github.com/projectcontour/contour/issues/899
- https://github.com/projectcontour/contour/blob/master/docs/ingressroute-to-httpproxy.md
- Supported release policy
- https://github.com/projectcontour/contour/blob/master/docs/support.md
- Steve Sloka did a great webinar in the CNCF webinar series, it's now up on our [Resources page](https://projectcontour.io/resources/)
- [Direct Video Link](https://youtu.be/764YUk-wSa0)

- ## What's coming up?
- Documentation moving to projectcontour.io.
- We want the site to be more useful. User-facing will move to `site/` subdir; developer docs (version-specific) will stay in `docs/`. Moving to "how do I?" docs instead of reference docs.
- Contour 1.0.0-rc.2 on the 25th of October
- Please try rc.1, tell us what you like and what you don't like.
- Contour 1.0 scheduled for early November.
- We're on track for being code complete on the 1st but the actual 1.0 tagging and champagne may happen later.
- Contour 1.1 ETA
- Once Contour 1.0 ships the release the minor release cadence will slow down.
- We can tell users can't keep up.
- Possibly a 1.0.x patch release Nov/Dec 2019.
- We're not planning a Contour 1.1 release in 2019. More likely first few months in 2020.
- KubeCon NA 2019: Come hang out with us!
- [EnvoyCon](https://envoycon2019.sched.com/event/UxvT/envoys-using-10gb-of-memory-and-its-all-my-fault)
- [KubeCon](https://kccncna19.sched.com/event/Uadj/take-envoy-beyond-a-k8s-service-mesh-to-legacy-bare-metal-and-vms-more-steve-sloka-steven-wong-vmware)
- VMware Booth
- ## How can you get involved?
- [NEW! Guides section of the website](https://projectcontour.io/guides)
- **If you have a deployment recipe or Contour howto we'd love to give you an author credit.**
- Join us in Slack (Kubernetes - [#contour](https://kubernetes.slack.com/messages/contour)) and help answer fellow users' questions!

- ## Contributor shoutouts!
- (stay tuned)

- ## Community comments/questions:
- nginx Ingress objects don't transparently convert to Contour due to missing "default cert" string
- community member Michael P will add more info to a GitHub issue.
- "migrating from other ingress controllers" would be a fantastic contribution to the guides.
- will use the same hackmd for every community meeting, and link to it from the community page. bookmark it!

# September 24, 2019

- ## What have we been working on?
- GitHub repository move, Contour is now hosted at github.com/projectcontour/contour
- [Announcement](https://projectcontour.io/projectcontour)
- Image repository hosting moved to Docker Hub.
- Contour 1.0.0-beta.1 and later will be published to Docker Hub only
- Contour 0.15.x will continue to be mirrored on gcr.io/heptio-images for the next few months but will eventually go away when that account is turned down.
- Contour 1.0.0-beta.1 coming this Friday.
- IngressRoute is deprecated. It will be removed after the Contour 1.0 release in November.
- HTTPProxy is our replacement.
- _DEMO TIME_ @stevesloka
- [HTTPProxy documentation](https://github.com/projectcontour/contour/blob/master/docs/httpproxy.md) (draft)
- [IngressRoute to HTTPProxy upgrade guide](https://github.com/projectcontour/contour/blob/master/docs/ingressroute-to-httpproxy.md) (draft)
- [Contour 0.15.0 to 1.0.0-beta.1 upgrade guide](https://github.com/projectcontour/contour/blob/master/docs/upgrading.md#upgrading-contour-015-to-100-beta1) (draft)
- n.b. Contour 0.15.x remains the `:latest` stable release.
- ## What's coming up?
- Contour 1.0.0-beta.1 this Friday.
- [Release notes](https://github.com/projectcontour/contour/pull/1522/files) (draft)
- First release candidate mid October.
- Second release candidate late October.
- See you all at KubeCon US for the 1.0 release party. 🎉
- ## How can you get involved?
- Please give us feedback about HTTPProxy.
- Bug reports warmly received.
- [Help wanted](https://github.com/projectcontour/contour/labels/help%20wanted) and [Good first issue](https://github.com/projectcontour/contour/labels/good%20first%20issue) issues.
- Join us in Slack (Kubernetes - [#contour](https://kubernetes.slack.com/messages/contour)) and help answer fellow users' questions!

- ## Community questions:
-

# August 27, 2019

- ## Envoy 1.11.1
- Multiple CVEs in Envoy. Everyone _must_ upgrade to 1.11.1. This means Contour 0.14.2 or 0.15.0
- https://groups.google.com/forum/#!topic/envoy-announce/ZLchtraPYVk
- ## What have we been working on?
- Leader election
- mTLS or `--insecure`, choose your path
- Config file
- `disablePermitInsecure`
- `tls.minimumProtocolVersion`
- ## What's coming up?
- Development freeze now in effect (a few tickets grandfathered in)
- Split deployment becoming the default.
- ## How can you get involved?
- Good first issues for the 1.0.0 milestone: https://github.com/heptio/contour/issues?q=is%3Aopen+is%3Aissue+label%3A%22help+wanted%22+milestone%3A1.0.0-beta.1+label%3A%22good+first+issue%22

- Tell us how you're using Contour, https://github.com/heptio/contour/issues/1269
- Join us in slack (Kubernetes - [#contour](https://kubernetes.slack.com/messages/contour)) and help answer fellow users' questions!

- ## Contributor shoutouts!
-

- ## Community questions:
-

# July 16, 2019

- ## What have we been working on?
- [Kind-ly running Contour](https://projectcontour.io/kindly-running-contour/)
- Secure communication between Contour and Envoy
- ## What's coming up?
- 0.14 will be released on the 19th of July
- ## How can you get involved?
- Join us in slack (Kubernetes - [#contour](https://kubernetes.slack.com/messages/contour)) and help answer fellow users' questions!

- ## Contributor shoutouts!
-

- ## Community questions:
-

# June 18, 2019

- ## What have we been working on?
- New website launched - https://projectcontour.io/
- [Contour v0.12.1 patch](https://github.com/heptio/contour/releases/tag/v0.12.1) released May 21
- [Contour v0.12](https://github.com/heptio/contour/releases/tag/v0.12.0) released May 9
- [Contour v0.13 **beta**](https://github.com/heptio/contour/releases/tag/v0.13.0-beta.1) released last week
- The road to Contour 1.0
- Migrating away from Heptio namespace
- Implementing separate Envoy and Contour installs, instead of them being in one pod
- ## What's coming up?
- [Contour v0.13](https://github.com/heptio/contour/milestone/20) (ETA June 20)
- Next Community Meeting (July 16 - 3rd Tuesday of the month)
- ## How can you get involved?
- Join us in Slack (Kubernetes - [#contour](https://kubernetes.slack.com/messages/contour)) and help answer fellow users' questions!
- Follow us on Twitter - [@projectcontour](https://twitter.com/projectcontour)

- ## Contributor shoutouts!
-

- ## Community questions:
-