Http Route

HttpRoute

Defines the high-level intent for routing HTTP(S) traffic.

The engine translates this manifest into service mesh routes or load balancer URL maps, supporting features like path-based routing, header manipulation, and traffic splitting.

Property	Type	Description
apiVersion	string
kind	string
metadata	map
spec	Spec

Target

Property	Type	Description
kind	string
name	string

Spec

Contains the user-defined routing rules for HTTP traffic. Encapsulates rule logic to match, transform, and forward HTTP requests to backend targets.

Property	Type	Description
description	string	This description is optional but will drastically improve the understand of the AI assistant about the structural elements of the organization
rules	list of HttpRouteRule	A list of rules that define how to match and forward HTTP requests. Each rule in this list is translated into a rules block configuring the underlying request routing. The route is associated with an ingress gateway and a hostname derived from the manifest's name.

---

HttpRouteRule

Combines a match condition with an execution action for HTTP traffic.

The fundamental building block of a traffic routing table for google_network_services_http_route.

Property	Type	Description
matches	list of HttpRouteRuleMatch
authentication	list of RouteRuleAuthenticationConfig	Rule Authentication Configuration. Defines the authentication configuration for this rule. If not specified, the rule will be unauthenticated.
authorization	list of ComputedAuthorizationAccessRuleCheck	Rule Authorization Configuration. Defines the authorization configuration for this rule. If not specified, the rule will be open to all users.

---

RouteRuleAuthenticationConfig

Configures authentication exceptions or specifics for a route rule.

Translates into localized Gateway or Load Balancer configurations dictating how auth assertions are evaluated for specific matched paths.

Property	Type	Description
type	string
tenants	list of string	Tenant-specific authentication configuration. A list of IdentityProvider names allowed to access this route. Only applicable if type is IDENTITY_PROVIDER.

---

HttpRouteRuleMatch

Comprehensive matching criteria for an HTTP request.

Forms the crucial conditional backbone of a network services route, steering traffic based on path, headers, or query contents.

Property	Type	Description
ignoreCase	bool
fullPathMatch	string
prefixMatch	string
regexMatch	string
headers	list of HttpRouteRuleMatchHeader
queryParameters	list of QueryParameterMatch

---

ComputedAuthorizationAccessRuleCheck

Represents a computed access check for a route rule.

Maps an expected identity tuple (namespace, relation, object) that the AuthZ extension must validate during the request flow.

Property	Type	Description
namespace	string	This value is a direct reflection of 'spec.authorization.namespace' from a child 'HttpRoute' or 'GrpcRoute' manifest.
relation	string	This value is a direct reflection of 'spec.authorization.relation' from a child 'HttpRoute' or 'GrpcRoute' manifest.
object	string	This value is a direct reflection of 'spec.authorization.object' from a child 'HttpRoute' or 'GrpcRoute' manifest.

---

HttpRouteRuleMatchHeader

Defines a condition to match against HTTP headers.

Creates the evaluating rule within a routeMatch.headers block inside a GCP HttpRoute, aiding in granular traffic splitting.

Property	Type	Description
header	string
invertMatch	bool
exactMatch	string
regexMatch	string
prefixMatch	string
presentMatch	bool
suffixMatch	string
rangeMatch	RangeMatch

---

QueryParameterMatch

Defines a condition to match against HTTP query parameters.

Populates the routeMatch.queryParameters block within a GCP HttpRoute resource.

Property	Type	Description
queryParameter	string
exactMatch	string
regexMatch	string
presentMatch	string

---

RangeMatch

Tests a header value against an integer scale.

Adds a numeric rangeMatch parameter to a header matching rule in the underlying network service map.

Property	Type	Description
start	int64
end	int64