{"id":19690425,"url":"https://github.com/vedadiyan/iceberg","last_synced_at":"2025-08-17T13:34:42.283Z","repository":{"id":223435501,"uuid":"754921072","full_name":"Vedadiyan/iceberg","owner":"Vedadiyan","description":"A Kubernetes Sidecar Solution","archived":false,"fork":false,"pushed_at":"2024-05-23T08:11:49.000Z","size":3954,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-05-23T09:29:05.666Z","etag":null,"topics":["kubrnetes","sidecar","sidecar-proxy"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Vedadiyan.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-02-09T02:52:29.000Z","updated_at":"2024-05-23T09:29:05.705Z","dependencies_parsed_at":"2024-04-25T03:41:53.945Z","dependency_job_id":"1f08dcfe-514a-42d0-b5b1-2126461b79cd","html_url":"https://github.com/Vedadiyan/iceberg","commit_stats":null,"previous_names":["vedadiyan/iceberg"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vedadiyan%2Ficeberg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vedadiyan%2Ficeberg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vedadiyan%2Ficeberg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vedadiyan%2Ficeberg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Vedadiyan","download_url":"https://codeload.github.com/Vedadiyan/iceberg/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240996844,"owners_count":19891051,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["kubrnetes","sidecar","sidecar-proxy"],"created_at":"2024-11-11T19:05:31.418Z","updated_at":"2025-02-27T08:56:58.893Z","avatar_url":"https://github.com/Vedadiyan.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"![Go Version](https://img.shields.io/badge/Go-%3E%3D%201.20-%23007d9c)\n[![Go report](https://goreportcard.com/badge/github.com/vedadiyan/iceberg)](https://goreportcard.com/report/github.com/vedadiyan/iceberg)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg width=\"250px\" src=\"https://cdn-icons-png.flaticon.com/512/6362/6362931.png\" /\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cb align=\"center\"\u003eIceberg (K8s Sidecar Solution)\u003c/b\u003e\n\u003c/p\u003e\n\n\n# iceberg\niceberg is a Kubernetes sidecar proxy that can intercept and filter traffic between the main application container and clients. It provides a flexible way to handle cross-cutting concerns like security, monitoring, and more.\n\n## Features\n- Deploy as sidecar container alongside main app container\n- Listen on HTTP/HTTPS or Websocket as frontend\n- Proxy requests to main app as backend\n- Define filter chains to transform requests and responses\n\nSupport filters using different protocols:\n- HTTP/HTTPS\n- gRPC (SUPPORT DROPPED)\n- NATS\n- Websocket (In Development)\n\nFilters for:\n- Intercepting requests\n- Post-processing responses\n- Parallel processing without side effects (e.g. logging)\n- Exchange headers and body between filter and main traffic\n- Ignore exchange mechanism for parallel filters\n\n## Configuration\niceberg is configured via a YAML file specified in the `ICEBERG_CONFIG` environment variable.\n\n### Example configuration:\n\n    apiVersion: apps/v1\n    metadata:\n      name: test\n    spec:\n      listen: ''\n      resources:\n        main-api:\n          frontend: ''\n          backend: ''\n          method: ''\n          use:\n            cache:\n              addr: 'jetstream://[[default_nats]]/bucket_name'\n              ttl: 30s\n              key: 'test_${:route_value}_${?query_param}_${body}_${method}'\n            cors: default\n          filters:\n            - name: request-log\n              addr: 'jetstream://[default_nats]/abc'\n              level: request\n              timeout: 30s\n              onError: default\n              async: false\n              await: []\n              exchange:\n                headers:\n                  - X-Test-Header\n                body: true\n              next:\n                - name: test\n                  addr: 'nats://[default_nats]/test'\n                  onError: default\n                  timeout: 30s\n                  async: true\n                  await: []\n                - name: test2\n                  addr: 'nats://[default_nats]/test2'\n                  timeout: 30s\n                  onError: default\n                  async: false\n                  await:\n                    - test\n\nTo specify a host via environment variable, use [[envvar]] syntax.\n\n## Deployment\n\nDeploy iceberg sidecar container in pod alongside main app container. Main container ports should not be exposed directly.\n\nExample pod spec:\n\n    spec:\n        containers:\n            - name: main-app\n            # main app image\n            - name: iceberg \n            image: iceberg\n            env:\n                - name: ICEBERG_CONFIG\n                value: |\n                    # iceberg config here\n            ports:\n                - containerPort: 8081\n        \nThis exposes the iceberg proxy on port 8081 to handle all incoming traffic to the pod. Main app container is accessed internally as the backend.\n\n## Usage\n\nWith iceberg deployed as sidecar, all traffic to the pod will be proxied through iceberg and filtered based on configured chains.\n\nAdd filter chains to:\n- Validate requests\n- Enrich requests with data from other services\n- Scrub response data\n- Log/monitor requests without side effects\n\nAnd more!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvedadiyan%2Ficeberg","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvedadiyan%2Ficeberg","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvedadiyan%2Ficeberg/lists"}