Skip to content

Conversation

@zirain
Copy link
Member

@zirain zirain commented Aug 4, 2025

fixes: #6659

@zirain zirain requested a review from a team as a code owner August 4, 2025 07:30
Signed-off-by: zirain <zirain2009@gmail.com>
@codecov
Copy link

codecov bot commented Aug 4, 2025

Codecov Report

❌ Patch coverage is 0% with 8 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (main@7e22545). Learn more about missing BASE report.
⚠️ Report is 27 commits behind head on main.

Files with missing lines Patch % Lines
internal/provider/kubernetes/controller.go 0.00% 8 Missing ⚠️
Additional details and impacted files
@@           Coverage Diff           @@
##             main    #6692   +/-   ##
=======================================
  Coverage        ?   71.33%           
=======================================
  Files           ?      224           
  Lines           ?    39558           
  Branches        ?        0           
=======================================
  Hits            ?    28218           
  Misses          ?     9699           
  Partials        ?     1641           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

arkodg
arkodg previously approved these changes Aug 4, 2025
Copy link
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM thanks

@arkodg arkodg requested review from a team August 4, 2025 17:13
@arkodg arkodg added this to the v1.5.0 Release milestone Aug 4, 2025
@arkodg arkodg requested review from a team August 4, 2025 18:00
guydc
guydc previously approved these changes Aug 4, 2025
Signed-off-by: zirain <zirain2009@gmail.com>
@zirain zirain dismissed stale reviews from guydc and arkodg via 9bb4823 August 4, 2025 23:30
@zirain zirain requested review from arkodg and guydc August 4, 2025 23:30
@arkodg arkodg requested review from a team August 4, 2025 23:36
@zirain zirain enabled auto-merge (squash) August 5, 2025 00:18
@arkodg arkodg disabled auto-merge August 5, 2025 00:26
@arkodg arkodg merged commit 88de980 into envoyproxy:main Aug 5, 2025
27 of 30 checks passed
zirain added a commit to zirain/gateway that referenced this pull request Aug 5, 2025
envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>
zirain added a commit to zirain/gateway that referenced this pull request Aug 5, 2025
envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>
zirain added a commit to zirain/gateway that referenced this pull request Aug 5, 2025
envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>
@zirain zirain deleted the ep-invalid-tls branch August 5, 2025 00:57
zirain added a commit that referenced this pull request Aug 5, 2025
* chore: cleanups from #6597 (#6647)

Cleanup

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: set order for grpc_web and grpc_stats filters (#6626)

* set order for grpc_web and grpc_stats filters

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: nil pointer when InsecureSkipVerify is true (#6652)

* fix nil pointer when InsecureSkipVerify is true

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* add test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* delete cacert for the xds translator test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: allow imageRepository contains port (#6658) (#6660)

(cherry picked from commit c988ec5)

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Co-authored-by: 聪 <congwu@alauda.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: improve policy concepts section (#6663)

better explain
* targets
* precedence
* merge types

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: observability pre req not required in admin console page (#6662)

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: xds name scheme v2 (#6656)

* name scheme v2

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

name scheme v2

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: highlight wait step (#6665)

* docs: highlight wait step

Signed-off-by: zirain <zirain2009@gmail.com>

* update

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>

* fix: populate status for custom backendRef not found (#6670)

Signed-off-by: bitliu <bitliu@tencent.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: xds name schema v2 (#6638)

* rename route config

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* rename HCM statPrefix

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* rename virtual host

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* fix test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* minor change

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: expand Gateway Namespace Mode doc on client/server auth (#6616)

* Expand Gateway Namespace Mode doc on client/server auth

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* Add additional explanation to the overview

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

---------

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* increase earlyRequestHeaders from 16 to 64 (#6673)

* created a new definition of HTTPFilterHeader that supports 64 items
for `set`, `add`, and `remove`

* sanitizing request headers from untrusted downstream traffic is a
  common use case and 16 items may not be adequate enough at times.
  This action needs to be performed route processing for cases
  and the HTTPRoute filters cannot be used

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: skipping TLS verification (#6653)

* docs for skipping TLS verification

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove btlsp for skiptlsverify

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove public

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* feat: add listener metadata (#6639)

* add listener metadata

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove sort

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: Fix BTP ZoneAware translation (#6668)

* Fix BTP ZoneAware translation

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>

* Add e2e

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>

---------

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: unhide zoneaware api for docs (#6683)

unhide api docs

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* watchable: use Store directly instead of HandleStore wrapper (#6680)

* watchable: use Store directly instead of HandleStore wrapper

GC is unable to collect the temporary references created in
`HandleStore`

Relates to #6406

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* fix test

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

---------

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: Update Zone Aware Routing for BackendTrafficPolicy configuration example (#6667)

Update zone aware routing docs

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* combine the xds-translator and xds-server runner into one (#6586)

* combine the xds-translator and xds-server into one xds runner

* primarily to reduce memory and convergence time

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* build(deps): bump the gomod group across 1 directory with 6 updates (#6691)

* build(deps): bump the gomod group across 1 directory with 6 updates

Bumps the gomod group with 4 updates in the / directory: [github.com/miekg/dns](https://github.com/miekg/dns), [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang), [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) and [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go).

Updates `github.com/miekg/dns` from 1.1.67 to 1.1.68
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](miekg/dns@v1.1.67...v1.1.68)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.0)

Updates `github.com/quic-go/quic-go` from 0.52.0 to 0.54.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.52.0...v0.54.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.7.0...v1.7.1)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250728155136-f173205681a0
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250728155136-f173205681a0
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20250728155136-f173205681a0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250728155136-f173205681a0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix gen

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: zirain <zirain2009@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: zirain <zirain2009@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: controller panic when reloading config (#6688)

* fix controller panic when reloading config

Signed-off-by: zirain <zirain2009@gmail.com>

* use gwapiv1.Duration instead of metav1.Duration (#6664)

* use gwapiv1.Duration instead of metav1.Duration

fixes: #4746

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* add charts

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* go back to metav1 in IR to make YAML tests happy

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: don't block deployment creating when missing secret in EnvoyProxy (#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>

* [release/v1.5] release notes for rc.2 (#6697)

* [release/v1.5] release notes for rc.2

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>
Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: bitliu <bitliu@tencent.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Isaac <10012479+jukie@users.noreply.github.com>
Co-authored-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: 聪 <congwu@alauda.io>
Co-authored-by: Xunzhuo <bitliu@tencent.com>
Co-authored-by: Karol Szwaj <karol.szwaj@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
zirain added a commit to zirain/gateway that referenced this pull request Aug 11, 2025
envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>
zirain added a commit to zirain/gateway that referenced this pull request Aug 11, 2025
envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>
arkodg added a commit that referenced this pull request Aug 11, 2025
* fix: don't block deployment creating when missing secret in EnvoyProxy (#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>

* sort httpFilters on name if priority order is same (#6600)

* sort httpFilters on name if priority order is same

ensures stability across translations, mitigating listener drains
https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/listeners/listener_filters#filter-chain-only-update

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: add missing HTTP filters for HTTP3 listener (#6584)

* fix: add missing HTTP filters for HTTP3 listener

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: use per-route configuration for session persistence to avoid listener drain (#6580)

use per-route configuration for session persistence to avoid listener darin

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* Fix EEP CEL Validations around FullDuplexStreamed and FailOpen (#6560)

* Fix EEP CEL Validations around FullDuplexStreamed and FailOpen

Fixes: #6559

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>
Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
shawnh2 pushed a commit to shawnh2/gateway that referenced this pull request Sep 15, 2025
* fix: don't block deployment creating when missing secret in EnvoyProxy (envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>

* sort httpFilters on name if priority order is same (envoyproxy#6600)

* sort httpFilters on name if priority order is same

ensures stability across translations, mitigating listener drains
https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/listeners/listener_filters#filter-chain-only-update

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: add missing HTTP filters for HTTP3 listener (envoyproxy#6584)

* fix: add missing HTTP filters for HTTP3 listener

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: use per-route configuration for session persistence to avoid listener drain (envoyproxy#6580)

use per-route configuration for session persistence to avoid listener darin

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* Fix EEP CEL Validations around FullDuplexStreamed and FailOpen (envoyproxy#6560)

* Fix EEP CEL Validations around FullDuplexStreamed and FailOpen

Fixes: envoyproxy#6559

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>
Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: shawnh2 <shawnhxh@outlook.com>
zirain added a commit to zirain/gateway that referenced this pull request Sep 16, 2025
* chore: cleanups from envoyproxy#6597 (envoyproxy#6647)

Cleanup

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: set order for grpc_web and grpc_stats filters (envoyproxy#6626)

* set order for grpc_web and grpc_stats filters

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: nil pointer when InsecureSkipVerify is true (envoyproxy#6652)

* fix nil pointer when InsecureSkipVerify is true

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* add test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* delete cacert for the xds translator test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: allow imageRepository contains port (envoyproxy#6658) (envoyproxy#6660)

(cherry picked from commit c988ec5)

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Co-authored-by: 聪 <congwu@alauda.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: improve policy concepts section (envoyproxy#6663)

better explain
* targets
* precedence
* merge types

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: observability pre req not required in admin console page (envoyproxy#6662)

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: xds name scheme v2 (envoyproxy#6656)

* name scheme v2

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

name scheme v2

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: highlight wait step (envoyproxy#6665)

* docs: highlight wait step

Signed-off-by: zirain <zirain2009@gmail.com>

* update

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>

* fix: populate status for custom backendRef not found (envoyproxy#6670)

Signed-off-by: bitliu <bitliu@tencent.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: xds name schema v2 (envoyproxy#6638)

* rename route config

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* rename HCM statPrefix

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* rename virtual host

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* fix test

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* minor change

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: expand Gateway Namespace Mode doc on client/server auth (envoyproxy#6616)

* Expand Gateway Namespace Mode doc on client/server auth

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* Add additional explanation to the overview

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

---------

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* increase earlyRequestHeaders from 16 to 64 (envoyproxy#6673)

* created a new definition of HTTPFilterHeader that supports 64 items
for `set`, `add`, and `remove`

* sanitizing request headers from untrusted downstream traffic is a
  common use case and 16 items may not be adequate enough at times.
  This action needs to be performed route processing for cases
  and the HTTPRoute filters cannot be used

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: skipping TLS verification (envoyproxy#6653)

* docs for skipping TLS verification

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove btlsp for skiptlsverify

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* address comment

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove public

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* feat: add listener metadata (envoyproxy#6639)

* add listener metadata

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

* remove sort

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: Fix BTP ZoneAware translation (envoyproxy#6668)

* Fix BTP ZoneAware translation

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>

* Add e2e

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>

---------

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: unhide zoneaware api for docs (envoyproxy#6683)

unhide api docs

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* watchable: use Store directly instead of HandleStore wrapper (envoyproxy#6680)

* watchable: use Store directly instead of HandleStore wrapper

GC is unable to collect the temporary references created in
`HandleStore`

Relates to envoyproxy#6406

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* fix test

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

---------

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* docs: Update Zone Aware Routing for BackendTrafficPolicy configuration example (envoyproxy#6667)

Update zone aware routing docs

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* combine the xds-translator and xds-server runner into one (envoyproxy#6586)

* combine the xds-translator and xds-server into one xds runner

* primarily to reduce memory and convergence time

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* build(deps): bump the gomod group across 1 directory with 6 updates (envoyproxy#6691)

* build(deps): bump the gomod group across 1 directory with 6 updates

Bumps the gomod group with 4 updates in the / directory: [github.com/miekg/dns](https://github.com/miekg/dns), [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang), [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) and [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go).

Updates `github.com/miekg/dns` from 1.1.67 to 1.1.68
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](miekg/dns@v1.1.67...v1.1.68)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.0)

Updates `github.com/quic-go/quic-go` from 0.52.0 to 0.54.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.52.0...v0.54.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.7.0...v1.7.1)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250728155136-f173205681a0
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250728155136-f173205681a0
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20250728155136-f173205681a0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250728155136-f173205681a0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix gen

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: zirain <zirain2009@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: zirain <zirain2009@gmail.com>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: controller panic when reloading config (envoyproxy#6688)

* fix controller panic when reloading config

Signed-off-by: zirain <zirain2009@gmail.com>

* use gwapiv1.Duration instead of metav1.Duration (envoyproxy#6664)

* use gwapiv1.Duration instead of metav1.Duration

fixes: envoyproxy#4746

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* add charts

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* go back to metav1 in IR to make YAML tests happy

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: zirain <zirain2009@gmail.com>

* fix: don't block deployment creating when missing secret in EnvoyProxy (envoyproxy#6692)

* fix: don't block deployment creating when missing secret in EnvoyProxy

Signed-off-by: zirain <zirain2009@gmail.com>

* [release/v1.5] release notes for rc.2 (envoyproxy#6697)

* [release/v1.5] release notes for rc.2

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>
Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: bitliu <bitliu@tencent.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Isaac <10012479+jukie@users.noreply.github.com>
Co-authored-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: 聪 <congwu@alauda.io>
Co-authored-by: Xunzhuo <bitliu@tencent.com>
Co-authored-by: Karol Szwaj <karol.szwaj@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: zirain <zirain2009@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Missing Secret in backendTLS causes EG to not create Envoy GW when defined in Gateway CR

3 participants