feat(source): add support for ingress backed GlooEdge Gateway

[cucxabong]

What does it do ?

fix #5908

More

• Yes, this PR title follows Conventional Commits
• Yes, I added unit tests
• Yes, I updated end user documentation accordingly

[k8s-ci-robot]

Welcome @cucxabong!

It looks like this is your first PR to kubernetes-sigs/external-dns 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes-sigs/external-dns has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

[k8s-ci-robot]

Hi @cucxabong. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[AndrewCharlesHay]

lgtm

[ivankatliarchuk]

Was it tested on real cluster? What was your kubernetes manifests and results?

[ivankatliarchuk]

/ok-to-test

[coveralls]

Pull Request Test Coverage Report for Build 19270928825

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 47 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.04%) to 78.648%

---

Files with Coverage Reduction	New Missed Lines	%
gloo_proxy.go	47	74.18%

Totals
Change from base Build 19270502990:	-0.04%
Covered Lines:	15949
Relevant Lines:	20279

---

💛 - Coveralls

[cucxabong]

@ivankatliarchuk yes, I did a test on our sandbox env in dry-run mode and observed the expected behaviour

[mloiseleur]

@cucxabong For the chart update, the Changelog has to be updated in the unreleased section

[ivankatliarchuk]

Could you share similar results for this PR #5085 (comment). Need to make sure it works before we merge, I'll try to smoke test right after as well.

[cucxabong]

Please find more details below. I tried to run with --dry-run option in our EKS clusters.

• Deploy external-dns with Helm. Deployment run with args: -log-level=debug --source=gloo-proxy --domain-filter=external-dns-example.com --provider=aws --dry-run --aws-zone-type=public

• Deploy GlooEdge related resources

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    alb.ingress.kubernetes.io/healthcheck-path: /
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/ssl-redirect: "443"
    alb.ingress.kubernetes.io/success-codes: 200-499
    alb.ingress.kubernetes.io/target-type: ip
    meta.helm.sh/release-name: gloo-proxy
    meta.helm.sh/release-namespace: gloo-system
  finalizers:
  - ingress.k8s.aws/resources
  generation: 1
  labels:
    app: gloo
    app.kubernetes.io/managed-by: Helm
    gateway-proxy-id: external-dns-demo-proxy
    gloo: gateway-proxy
  name: external-dns-demo-proxy
  namespace: gloo-system
spec:
  ingressClassName: alb
....
status:
  loadBalancer:
    ingress:
    - hostname: k8s-gloosyst-1ee31790ed-444154078.us-east-1.elb.amazonaws.com
---
apiVersion: gateway.solo.io/v1
kind: Gateway
metadata:
  labels:
    app: gloo
  name: external-dns-demo-proxy
  namespace: gloo-system
spec:
  bindAddress: '::'
  bindPort: 8080
  httpGateway:
    virtualServiceNamespaces:
    - gloo-system
  proxyNames:
  - external-dns-demo-proxy
  ssl: false
  useProxyProto: false
---
apiVersion: gloo.solo.io/v1
kind: Proxy
metadata:
  labels:
    created_by: gloo-gateway
  name: external-dns-demo-proxy
  namespace: gloo-system
spec:
  listeners:
  - bindAddress: '::'
    bindPort: 8080
    httpListener:
      virtualHosts:
      - domains:
        - example-api.external-dns-example.com
        - example-api.excluded-dns-zone.com
        metadataStatic:
          sources:
          - observedGeneration: "33"
            resourceKind: '*v1.VirtualService'
            resourceRef:
              name: example-api
              namespace: gloo-system
        name: gloo-system.example-api
        routes:
        - matchers:
          - prefix: /
          metadataStatic:
            sources:
            - observedGeneration: "33"
              resourceKind: '*v1.VirtualService'
              resourceRef:
                name: example-api
                namespace: gloo-system
          options:
            extauth:
              customAuth: {}
          routeAction:
            single:
              upstream:
                name: example-api
                namespace: gloo-system
    metadataStatic:
      sources:
      - observedGeneration: "103"
        resourceKind: '*v1.Gateway'
        resourceRef:
          name: external-dns-demo-proxy
          namespace: gloo-system
    name: listener-::-8080
---
apiVersion: v1
kind: Service
metadata:
  annotations:
    meta.helm.sh/release-name: gloo-proxy
    meta.helm.sh/release-namespace: gloo-system
  labels:
    app: gloo
    app.kubernetes.io/managed-by: Helm
    gateway-proxy-id: external-dns-demo-proxy
    gloo: gateway-proxy
  name: external-dns-demo-proxy
  namespace: gloo-system
spec:
  clusterIP: 172.20.190.44
  clusterIPs:
  - 172.20.190.44
  internalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - name: http
    port: 8080
    protocol: TCP
    targetPort: 8080
  selector:
    gateway-proxy: live
    gateway-proxy-id: external-dns-demo-proxy
  sessionAffinity: None
  type: ClusterIP
status:
  loadBalancer: {}

• ExternalDNS logs

external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Refreshing zones list cache","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Considering zone: /hostedzone/Z022760OD8DZQNWIO (domain: external-dns-example.com.)","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"dedupSource: collecting endpoints and removing duplicates","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"multiSource: collecting endpoints from 1 child sources and removing duplicates","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo: Find external-dns-demo-proxy proxy","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"gateway":"external-dns-demo-proxy","level":"warning","msg":"Gloo: Proxy service type not supported","service":{"metadata":{"name":"external-dns-demo-proxy","namespace":"gloo-system","uid":"ab954ce1-3042-454f-a650-615253ab95c5","resourceVersion":"1092588789","creationTimestamp":"2025-10-23T12:18:43Z","labels":{"app":"gloo","app.kubernetes.io/managed-by":"Helm","gateway-proxy-id":"external-dns-demo-proxy","gloo":"gateway-proxy"},"annotations":{"meta.helm.sh/release-name":"gloo-proxy","meta.helm.sh/release-namespace":"gloo-system"},"managedFields":[{"manager":"helm","operation":"Update","apiVersion":"v1","time":"2025-10-23T12:18:43Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:meta.helm.sh/release-name":{},"f:meta.helm.sh/release-namespace":{}},"f:labels":{".":{},"f:app":{},"f:app.kubernetes.io/managed-by":{},"f:gateway-proxy-id":{},"f:gloo":{}}},"f:spec":{"f:internalTrafficPolicy":{},"f:ports":{".":{},"k:{\"port\":8080,\"protocol\":\"TCP\"}":{".":{},"f:name":{},"f:port":{},"f:protocol":{},"f:targetPort":{}}},"f:selector":{},"f:sessionAffinity":{},"f:type":{}}}}]},"spec":{"ports":[{"name":"http","protocol":"TCP","port":8080,"targetPort":8080}],"selector":{"gateway-proxy":"live","gateway-proxy-id":"external-dns-demo-proxy"},"clusterIP":"172.20.190.44","clusterIPs":["172.20.190.44"],"type":"ClusterIP","sessionAffinity":"None","ipFamilies":["IPv4"],"ipFamilyPolicy":"SingleStack","internalTrafficPolicy":"Cluster"},"status":{"loadBalancer":{}}},"time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo[external-dns-demo-proxy]: Find 0 target(s) ()","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo[external-dns-demo-proxy]: Generate 0 endpoint(s)","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Refreshing zones list cache","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Considering zone: /hostedzone/Z022760OD8DZQNWIO (domain: external-dns-example.com.)","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Applying provider record filter for domains: [external-dns-example.com. .external-dns-example.com.]","time":"2025-10-25T19:55:09Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"All records are already up to date","time":"2025-10-25T19:55:09Z"}

• Adding external-dns.alpha.kubernetes.io/ingress=external-dns-demo-proxy to Gateway object

apiVersion: gateway.solo.io/v1
kind: Gateway
metadata:
  annotations:
    external-dns.alpha.kubernetes.io/ingress: external-dns-demo-proxy
....

• Observing external-dns Pods's logs

external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Refreshing zones list cache","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Considering zone: /hostedzone/Z022760OD8DZQNWIO (domain: external-dns-example.com.)","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"dedupSource: collecting endpoints and removing duplicates","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"multiSource: collecting endpoints from 1 child sources and removing duplicates","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo: Find external-dns-demo-proxy proxy","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo[external-dns-demo-proxy]: Find 1 target(s) (k8s-gloosyst-1ee31790ed-444154078.us-east-1.elb.amazonaws.com)","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Gloo[external-dns-demo-proxy]: Generate 2 endpoint(s)","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Modifying endpoint: example-api.external-dns-example.com 0 IN CNAME  k8s-gloosyst-1ee31790ed-444154078.us-east-1.elb.amazonaws.com [], setting alias=true","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Modifying endpoint: example-api.excluded-dns-zone.com 0 IN CNAME  k8s-gloosyst-1ee31790ed-444154078.us-east-1.elb.amazonaws.com [], setting alias=true","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Refreshing zones list cache","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Considering zone: /hostedzone/Z022760OD8DZQNWIO (domain: external-dns-example.com.)","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Applying provider record filter for domains: [external-dns-example.com. .external-dns-example.com.]","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"ignoring record example-api.excluded-dns-zone.com that does not match domain filter","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"ignoring record example-api.excluded-dns-zone.com that does not match domain filter","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Refreshing zones list cache","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Considering zone: /hostedzone/Z022760OD8DZQNWIO (domain: external-dns-example.com.)","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Adding example-api.external-dns-example.com. to zone external-dns-example.com. [Id: /hostedzone/Z022760OD8DZQNWIO]","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Adding example-api.external-dns-example.com. to zone external-dns-example.com. [Id: /hostedzone/Z022760OD8DZQNWIO]","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Adding cname-example-api.external-dns-example.com. to zone external-dns-example.com. [Id: /hostedzone/Z022760OD8DZQNWIO]","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Adding aaaa-example-api.external-dns-example.com. to zone external-dns-example.com. [Id: /hostedzone/Z022760OD8DZQNWIO]","time":"2025-10-25T19:59:11Z"}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Desired change: CREATE aaaa-example-api.external-dns-example.com TXT","profile":"default","time":"2025-10-25T19:59:11Z","zoneID":"/hostedzone/Z022760OD8DZQNWIO","zoneName":"external-dns-example.com."}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Desired change: CREATE cname-example-api.external-dns-example.com TXT","profile":"default","time":"2025-10-25T19:59:11Z","zoneID":"/hostedzone/Z022760OD8DZQNWIO","zoneName":"external-dns-example.com."}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Desired change: CREATE example-api.external-dns-example.com A","profile":"default","time":"2025-10-25T19:59:11Z","zoneID":"/hostedzone/Z022760OD8DZQNWIO","zoneName":"external-dns-example.com."}
external-dns-548c84f74f-6tbwp external-dns {"level":"info","msg":"Desired change: CREATE example-api.external-dns-example.com AAAA","profile":"default","time":"2025-10-25T19:59:11Z","zoneID":"/hostedzone/Z022760OD8DZQNWIO","zoneName":"external-dns-example.com."}
external-dns-548c84f74f-6tbwp external-dns {"level":"debug","msg":"Dry run mode, skipping change submission","profile":"default","time":"2025-10-25T19:59:11Z","zoneID":"/hostedzone/Z022760OD8DZQNWIO","zoneName":"external-dns-example.com."}

[ivankatliarchuk]

/lgtm

[mloiseleur]

Overall lgtm. Only minor nitpicks on logs and we should be good to go.

[mloiseleur]

/lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mloiseleur

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [mloiseleur]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment