docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

zirain · 2025-08-06T08:47:40Z

Signed-off-by: zirain <zirain2009@gmail.com>

codecov · 2025-08-06T08:56:24Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.08%. Comparing base (958ef7a) to head (876c0e1).
⚠️ Report is 11 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6714      +/-   ##
==========================================
+ Coverage   71.04%   71.08%   +0.04%     
==========================================
  Files         224      224              
  Lines       39615    39615              
==========================================
+ Hits        28144    28161      +17     
+ Misses       9812     9797      -15     
+ Partials     1659     1657       -2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

arkodg · 2025-08-06T23:57:56Z

site/content/en/latest/tasks/security/backend-tls.md

+  name: example-ca
+spec:
+  trustBundle: |
+    [content from ca.crt]


is this valid ? will this command work ?

it need users to handle the indentation correctly, I didn't figure out a easy way.

arkodg · 2025-08-06T23:59:34Z

site/content/en/latest/tasks/security/backend-tls.md


 {{< tabpane text=true >}}
-{{% tab header="Apply from stdin" %}}
+{{% tab header="ConfigMap" %}}


curious why this changed

we need to support both ConfigMap/ClusterTrustBundle.

TBH, that apply from file seems useless.

Signed-off-by: zirain <zirain2009@gmail.com>

* docs: rm latest from install egctl docs (#6700) * we've removed the latest egctl artifacts Relates to #6551 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * chore: fix globalResources in GNM (#6701) Signed-off-by: zirain <zirain2009@gmail.com> * move ordering gateway-api resources to provider (#6695) Signed-off-by: zirain <zirain2009@gmail.com> * Rate Limiter: Enable rate limit for month and year (#6715) * update go control plane rate limiter version Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * enable rate limit for month and year Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * add attribution Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * fix gen Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * remove helm binaries Signed-off-by: Pascal van Leeuwen <pascal@grove.city> --------- Signed-off-by: Pascal van Leeuwen <pascal@grove.city> Co-authored-by: Rico Pahlisch <pahli88@googlemail.com> Signed-off-by: zirain <zirain2009@gmail.com> * docs: rm alpha alert for gateway namespace mode (#6709) Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * allow SNI and Cert SAN mismatch (#6719) Fixes: #6442 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * chore(charts): update metadata for gateway-crds-helm (#6725) * chore(charts): update metadata for gateway-crds-helm Signed-off-by: Maxime Brunet <max@brnt.mx> Signed-off-by: zirain <zirain2009@gmail.com> * chore: Don't render bootstrap local cluster if topologyInjector is disabled (#6718) * Consider topologyInjector when rendering bootstrap Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> * Add logic to provider Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> Signed-off-by: zirain <zirain2009@gmail.com> * remove nit log when Backend API is disabled (#6708) * remove nit log when Backend API is disabled Signed-off-by: zirain <zirain2009@gmail.com> * fix: EnvoyProxy image with digest is rejected (#6720) * fix: EnvoyProxy image with digest is rejected Signed-off-by: zirain <zirain2009@gmail.com> * Revert "feat: add listener metadata (#6639)" (#6727) This reverts commit 20cb68b. Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: enhance extensibility index page (#6728) make it easier to pick the relevant extension type Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: add docs explaining graceful shutdown (#6729) * docs: add docs explaining graceful shutdown fixes: #2686 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: ClusterTrustBundle Support in BackendTLSPolicy (#6714) Signed-off-by: zirain <zirain2009@gmail.com> * chore: bump go 1.24.6 (#6732) Signed-off-by: zirain <zirain2009@gmail.com> * [release-1.5] release-notes for v1.5.0 (#6731) * [release-1.5] release-notes for v1.5.0 Signed-off-by: zirain <zirain2009@gmail.com> * update compatibility matrix Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> Signed-off-by: Pascal van Leeuwen <pascal@grove.city> Signed-off-by: Maxime Brunet <max@brnt.mx> Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com> Co-authored-by: commoddity <47662958+commoddity@users.noreply.github.com> Co-authored-by: Rico Pahlisch <pahli88@googlemail.com> Co-authored-by: Maxime Brunet <max@brnt.mx> Co-authored-by: Isaac <10012479+jukie@users.noreply.github.com>

* docs: rm latest from install egctl docs (envoyproxy#6700) * we've removed the latest egctl artifacts Relates to envoyproxy#6551 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * chore: fix globalResources in GNM (envoyproxy#6701) Signed-off-by: zirain <zirain2009@gmail.com> * move ordering gateway-api resources to provider (envoyproxy#6695) Signed-off-by: zirain <zirain2009@gmail.com> * Rate Limiter: Enable rate limit for month and year (envoyproxy#6715) * update go control plane rate limiter version Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * enable rate limit for month and year Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * add attribution Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * fix gen Signed-off-by: Pascal van Leeuwen <pascal@grove.city> * remove helm binaries Signed-off-by: Pascal van Leeuwen <pascal@grove.city> --------- Signed-off-by: Pascal van Leeuwen <pascal@grove.city> Co-authored-by: Rico Pahlisch <pahli88@googlemail.com> Signed-off-by: zirain <zirain2009@gmail.com> * docs: rm alpha alert for gateway namespace mode (envoyproxy#6709) Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * allow SNI and Cert SAN mismatch (envoyproxy#6719) Fixes: envoyproxy#6442 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * chore(charts): update metadata for gateway-crds-helm (envoyproxy#6725) * chore(charts): update metadata for gateway-crds-helm Signed-off-by: Maxime Brunet <max@brnt.mx> Signed-off-by: zirain <zirain2009@gmail.com> * chore: Don't render bootstrap local cluster if topologyInjector is disabled (envoyproxy#6718) * Consider topologyInjector when rendering bootstrap Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> * Add logic to provider Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> Signed-off-by: zirain <zirain2009@gmail.com> * remove nit log when Backend API is disabled (envoyproxy#6708) * remove nit log when Backend API is disabled Signed-off-by: zirain <zirain2009@gmail.com> * fix: EnvoyProxy image with digest is rejected (envoyproxy#6720) * fix: EnvoyProxy image with digest is rejected Signed-off-by: zirain <zirain2009@gmail.com> * Revert "feat: add listener metadata (envoyproxy#6639)" (envoyproxy#6727) This reverts commit 20cb68b. Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: enhance extensibility index page (envoyproxy#6728) make it easier to pick the relevant extension type Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: add docs explaining graceful shutdown (envoyproxy#6729) * docs: add docs explaining graceful shutdown fixes: envoyproxy#2686 Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> * docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714) Signed-off-by: zirain <zirain2009@gmail.com> * chore: bump go 1.24.6 (envoyproxy#6732) Signed-off-by: zirain <zirain2009@gmail.com> * [release-1.5] release-notes for v1.5.0 (envoyproxy#6731) * [release-1.5] release-notes for v1.5.0 Signed-off-by: zirain <zirain2009@gmail.com> * update compatibility matrix Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: zirain <zirain2009@gmail.com> Signed-off-by: Pascal van Leeuwen <pascal@grove.city> Signed-off-by: Maxime Brunet <max@brnt.mx> Signed-off-by: jukie <10012479+Jukie@users.noreply.github.com> Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com> Co-authored-by: commoddity <47662958+commoddity@users.noreply.github.com> Co-authored-by: Rico Pahlisch <pahli88@googlemail.com> Co-authored-by: Maxime Brunet <max@brnt.mx> Co-authored-by: Isaac <10012479+jukie@users.noreply.github.com> Signed-off-by: zirain <zirain2009@gmail.com>

docs: ClusterTrustBundle Support in BackendTLSPolicy

876c0e1

Signed-off-by: zirain <zirain2009@gmail.com>

zirain requested a review from a team as a code owner August 6, 2025 08:47

arkodg reviewed Aug 6, 2025

View reviewed changes

arkodg approved these changes Aug 7, 2025

View reviewed changes

arkodg requested review from a team August 7, 2025 23:36

arkodg modified the milestones: v1.5.0 Release, Backlog Aug 7, 2025

guydc approved these changes Aug 8, 2025

View reviewed changes

zirain merged commit dad093d into envoyproxy:main Aug 8, 2025
33 checks passed

zirain deleted the docs/backendtlspolicy-clustertrustbundle branch August 8, 2025 00:20

zirain added a commit to zirain/gateway that referenced this pull request Aug 8, 2025

docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714)

2d27027

Signed-off-by: zirain <zirain2009@gmail.com>

zirain added a commit to zirain/gateway that referenced this pull request Aug 8, 2025

docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714)

9921166

Signed-off-by: zirain <zirain2009@gmail.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

Uh oh!

zirain commented Aug 6, 2025

Uh oh!

codecov bot commented Aug 6, 2025 •

edited

Loading

Uh oh!

arkodg Aug 6, 2025

Uh oh!

zirain Aug 7, 2025

Uh oh!

arkodg Aug 6, 2025

Uh oh!

zirain Aug 7, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

Uh oh!

Conversation

zirain commented Aug 6, 2025

Uh oh!

codecov bot commented Aug 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

arkodg Aug 6, 2025

Choose a reason for hiding this comment

Uh oh!

zirain Aug 7, 2025

Choose a reason for hiding this comment

Uh oh!

arkodg Aug 6, 2025

Choose a reason for hiding this comment

Uh oh!

zirain Aug 7, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

codecov bot commented Aug 6, 2025 •

edited

Loading