Caddy Gateway
github.com
Spec sheet
- Purpose
- Caddy Gateway is a Kubernetes Gateway API implementation that uses Caddy as its web server.Read 7 Oct 2026 · github.com
- Intended users
- Installation instructions assume users already have a Kubernetes cluster configured with components such as networking and DNS.Read 7 Oct 2026 · github.com
- License
- The project is licensed under the Apache License, Version 2.0.Read 7 Oct 2026 · github.com
- Architecture
- The controller watches Gateway API resources, generates Caddy JSON configuration, and sends it to associated Caddy pods.Read 7 Oct 2026 · github.com
- Bring your own Caddy
- The controller requires a Caddy instance, which can run as a Deployment or DaemonSet; users can provide their own deployment.Read 7 Oct 2026 · github.com
- Compatibility requirement
- The project requires Gateway API v1.4.0 CRDs, with some optional experimental CRDs supported.Read 7 Oct 2026 · github.com
- Deployment model
- The controller can manage multiple separate Caddy deployments, and users must provide their own Caddy instance.Read 7 Oct 2026 · github.com
- Dynamic configuration
- The controller uses Caddy’s Admin API to program Caddy dynamically without downtime.Read 7 Oct 2026 · github.com
- Gateway API requirement
- The project requires Gateway API v1.4.0 CRDs to be installed in the cluster.Read 7 Oct 2026 · github.com
- Ingress limitation
- Kubernetes Ingress resources are not supported, and the README says support is not planned.Read 7 Oct 2026 · github.com
- Multiple deployments
- One controller deployment can manage multiple separate Caddy deployments.Read 7 Oct 2026 · github.com
- Project status
- The project describes itself as work in progress.Read 7 Oct 2026 · github.com
- Release assets
- The releases page lists v0.1.0 assets for Linux amd64 and Linux arm64.Read 7 Oct 2026 · github.com
- Release status
- The releases page marks v0.1.0 as the latest release and dates it May 30, 2024.Read 7 Oct 2026 · github.com
- Security guidance
- The README warns that without TLS on Caddy’s Admin API, programmed certificates may be sent insecurely, and recommends strict NetworkPolicies to restrict API access.Read 7 Oct 2026 · github.com
- Supported resources
- The README lists GatewayClass, Gateway, ReferenceGrant, BackendLBPolicy, BackendTLSPolicy, HTTPRoute, GRPCRoute, TLSRoute, TCPRoute, and UDPRoute as supported resources.Read 7 Oct 2026 · github.com
Where Specifiction places it
- Kubernetes Ingress Controllers#17 of 287.2