Skip to content

fix: credential injector init manager#38798

Merged
yanavlasov merged 2 commits intoenvoyproxy:mainfrom
zhaohuabing:fix-credential-injectior
Mar 26, 2025
Merged

fix: credential injector init manager#38798
yanavlasov merged 2 commits intoenvoyproxy:mainfrom
zhaohuabing:fix-credential-injectior

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

@zhaohuabing zhaohuabing commented Mar 19, 2025

fix: envoyproxy/gateway#5496 (comment)

We should use the initManager in the DualInfo because the Credential Injector can be used for both HCM filter and upstream filter. Using the initManger from the ServerFactoryContext for HCM filter causes the secret to be added to the server initManager when it's already in the initialized state.

Change log should not be required as this fixes a bug introduced in a RP that just merged after v1.33.0 .

@yanavlasov

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
@zhaohuabing zhaohuabing marked this pull request as draft March 19, 2025 13:22
@yanavlasov
Copy link
Copy Markdown
Contributor

Looks good. Would you be able to add test as well, please?

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
@zhaohuabing zhaohuabing marked this pull request as ready for review March 20, 2025 08:49
@zhaohuabing
Copy link
Copy Markdown
Member Author

Looks good. Would you be able to add test as well, please?

Done. @yanavlasov

@zhaohuabing
Copy link
Copy Markdown
Member Author

ping

@zhaohuabing
Copy link
Copy Markdown
Member Author

zhaohuabing commented Mar 25, 2025

@yanavlasov yanavlasov merged commit 583132c into envoyproxy:main Mar 26, 2025
24 checks passed
@zhaohuabing zhaohuabing deleted the fix-credential-injectior branch March 26, 2025 01:37
jewertow pushed a commit to jewertow/envoy that referenced this pull request Apr 2, 2025
fix:
envoyproxy/gateway#5496 (comment)

We should use the initManager in the DualInfo because the Credential
Injector can be used for both HCM filter and upstream filter. Using the
initManger from the ServerFactoryContext for HCM filter causes the
secret to be added to the server initManager when it's already in the
initialized state.

Change log should not be required as this fixes a bug introduced in [a
RP](envoyproxy#38398) that just merged
after v1.33.0 .

@yanavlasov

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
agrawroh pushed a commit to agrawroh/envoy that referenced this pull request Apr 9, 2025
fix:
envoyproxy/gateway#5496 (comment)

We should use the initManager in the DualInfo because the Credential
Injector can be used for both HCM filter and upstream filter. Using the
initManger from the ServerFactoryContext for HCM filter causes the
secret to be added to the server initManager when it's already in the
initialized state.

Change log should not be required as this fixes a bug introduced in [a
RP](envoyproxy#38398) that just merged
after v1.33.0 .

@yanavlasov

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants