feat(GatewayAPI): Add timeouts for httpRoute

helm/oauth2-proxy/Chart.yaml

@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 10.7.0
+version: 10.8.0
 apiVersion: v2
 appVersion: 7.15.3
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -31,12 +31,7 @@ kubeVersion: ">=1.16.0-0"
 annotations:
   artifacthub.io/changes: |
     - kind: added
-      description: Add alpha-config.source and alpha-config.name helpers for centralized alpha config resolution
+      description: Add support for per-rule timeouts (request and backendRequest) on the Gateway API HTTPRoute
       links:
         - name: GitHub PR
-          url: https://github.com/oauth2-proxy/manifests/pull/405
-    - kind: added
-      description: Add deprecation guards for invalid alphaConfig combinations
-      links:
-        - name: GitHub PR
-          url: https://github.com/oauth2-proxy/manifests/pull/405
+          url: https://github.com/oauth2-proxy/manifests/pull/417

helm/oauth2-proxy/README.md

@@ -372,6 +372,9 @@ gatewayApi:
             add:
               - name: X-Auth-Request
                 value: "true"
+      timeouts:
+        request: 10s
+        backendRequest: 5s
   labels:
     app: oauth2-proxy
   annotations:
@@ -381,6 +384,8 @@ gatewayApi:
 If you don't specify custom rules, the chart will create a default rule that matches all paths with `PathPrefix: /` and routes to the oauth2-proxy service.
 If you don't specify a sectionName, the rules will be applied to all listeners of the referenced Gateway.
 
+Each rule can optionally define `timeouts.request` and `timeouts.backendRequest` strings, e.g. `"10s"`, `"500ms"`). See the [HTTPRoute timeouts](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/#timeouts-optional) reference for details.
+
 ### Targeting Rules with Policies via `sectionName`
 
 The optional `name` field on each rule (e.g. `rules[].name: oauth2`) lets policies such as `SecurityPolicy`, `BackendTrafficPolicy`, or any other Gateway API policy that supports `sectionName` target a specific HTTPRoute rule rather than the entire route. Example:

helm/oauth2-proxy/ci/gateway-api-timeouts.yaml

@@ -0,0 +1,16 @@
+# Gateway API configuration with custom HTTPRoute rule timeouts
+gatewayApi:
+  enabled: true
+  gatewayRef:
+    name: example-gateway
+    namespace: gateway-system
+  hostnames:
+  - oauth.example.com
+  rules:
+  - matches:
+    - path:
+        type: PathPrefix
+        value: /oauth2
+    timeouts:
+      request: 30s
+      backendRequest: 10s

helm/oauth2-proxy/templates/httproute.yaml

@@ -52,6 +52,10 @@ spec:
     filters:
     {{- toYaml .filters | nindent 4 }}
     {{- end }}
+    {{- if .timeouts }}
+    timeouts:
+    {{- toYaml .timeouts | nindent 6 }}
+    {{- end }}
   {{- end }}
   {{- else }}
   - matches:

helm/oauth2-proxy/values.yaml

@@ -384,6 +384,12 @@ gatewayApi:
   #   - path:
   #       type: PathPrefix
   #       value: /
+  #   # Request timeouts for this rule (Gateway API Duration strings, e.g. "10s", "500ms")
+  #   # backendRequest must not be greater than request.
+  #   # https://gateway-api.sigs.k8s.io/reference/api-spec/main/spec/#httproutetimeouts
+  #   timeouts:
+  #     request: 10s
+  #     backendRequest: 5s
   rules: []
   # Hostnames to match in the HTTPRoute
   # hostnames: