Skip to content

[release/v1.4] cherry pick v1.4.2#6452

Merged
zhaohuabing merged 16 commits intoenvoyproxy:release/v1.4from
shawnh2:cp-1.4.2
Jul 4, 2025
Merged

[release/v1.4] cherry pick v1.4.2#6452
zhaohuabing merged 16 commits intoenvoyproxy:release/v1.4from
shawnh2:cp-1.4.2

Conversation

@shawnh2
Copy link
Copy Markdown
Contributor

@shawnh2 shawnh2 commented Jul 2, 2025

What type of PR is this?

What this PR does / why we need it:

https://github.com/envoyproxy/gateway/pulls?q=is%3Apr+label%3Acherrypick%2Frelease-v1.4.2+is%3Aclosed

Which issue(s) this PR fixes:

Fixes #

Release Notes: Yes/No

guydc and others added 10 commits July 2, 2025 22:14
envoyproxy#6323)

* fix ext proc validation and trailer management for full duplex streamed mode

Signed-off-by: Guy Daich <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
…#6343)

* add validation of section name

Signed-off-by: kkk777-7 <[email protected]>

* update error status reason

Signed-off-by: kkk777-7 <[email protected]>

* refactor: define as function of validate section name for gateway listener

Signed-off-by: kkk777-7 <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
* fix default accesslog

Signed-off-by: zirain <[email protected]>

* release notes

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
* fix cve

Signed-off-by: zirain <[email protected]>

* lint

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
…y#6421)

* fix: Do not set backendRequestTimeout when Retries are set

Signed-off-by: sudipto baral <[email protected]>

* fix: update comment

Signed-off-by: sudipto baral <[email protected]>

---------

Signed-off-by: sudipto baral <[email protected]>
…nvoyproxy#6379)

* gatewayapi: don't process gloabal resources when acceptedGateways is 0

Signed-off-by: zirain <[email protected]>

* update

Signed-off-by: zirain <[email protected]>

* fix test

Signed-off-by: zirain <[email protected]>

* don't skip gateways

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
@shawnh2
Copy link
Copy Markdown
Contributor Author

shawnh2 commented Jul 2, 2025

wait #6299

shawnh2 added 2 commits July 2, 2025 22:49
Signed-off-by: shawnh2 <[email protected]>
@codecov
Copy link
Copy Markdown

codecov bot commented Jul 2, 2025

Codecov Report

Attention: Patch coverage is 50.78534% with 188 lines in your changes missing coverage. Please review.

Project coverage is 70.40%. Comparing base (76e256d) to head (17b2b00).
Report is 1 commits behind head on release/v1.4.

Files with missing lines Patch % Lines
internal/provider/kubernetes/controller.go 25.57% 150 Missing and 13 partials ⚠️
internal/gatewayapi/backendtlspolicy.go 62.50% 7 Missing and 2 partials ⚠️
internal/provider/kubernetes/indexers.go 72.72% 4 Missing and 2 partials ⚠️
internal/gatewayapi/listener.go 77.27% 4 Missing and 1 partial ⚠️
internal/provider/kubernetes/predicates.go 63.63% 3 Missing and 1 partial ⚠️
internal/gatewayapi/runner/runner.go 0.00% 1 Missing ⚠️

❌ Your patch status has failed because the patch coverage (50.78%) is below the target coverage (60.00%). You can increase the patch coverage or adjust the target coverage.

Additional details and impacted files
@@               Coverage Diff                @@
##           release/v1.4    #6452      +/-   ##
================================================
- Coverage         70.58%   70.40%   -0.18%     
================================================
  Files               217      217              
  Lines             36313    36500     +187     
================================================
+ Hits              25631    25699      +68     
- Misses             9160     9272     +112     
- Partials           1522     1529       +7     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…#6299)

* fix: add isTransientError helper to classify retryable errors

Introduces isTransientError to detect transient Kubernetes errors and
enable proper reconciliation retries.

Signed-off-by: Patryk Rostkowski <[email protected]>

handle errors from processing BackendRefs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

handle errors from processing ConfigMap

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* skip invalid GatewayClass

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* address comment

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* handle all transient errors

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* don't skip failed GCs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Patryk Rostkowski <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit 71ce56f)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
@zhaohuabing zhaohuabing marked this pull request as ready for review July 4, 2025 01:49
@zhaohuabing zhaohuabing requested a review from a team as a code owner July 4, 2025 01:49
rudrakhp and others added 3 commits July 4, 2025 01:57
fix bug in hostname overlap detection

Signed-off-by: Rudrakh Panigrahi <[email protected]>
(cherry picked from commit e78e268)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: zirain <[email protected]>
(cherry picked from commit c0a2ce7)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
…proxy#6309)

* bugfix: BackendTlsPolicy should not reference across namespace

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 9925189)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
@Xunzhuo
Copy link
Copy Markdown
Member

Xunzhuo commented Jul 4, 2025

/retest

@zhaohuabing zhaohuabing merged commit 1d39d72 into envoyproxy:release/v1.4 Jul 4, 2025
37 of 39 checks passed
@shawnh2 shawnh2 deleted the cp-1.4.2 branch July 4, 2025 04:52
shawnh2 added a commit to shawnh2/gateway that referenced this pull request Sep 15, 2025
* fix(translator): ext-proc full duplex streamed trailers and validation (envoyproxy#6323)
* fix ext proc validation and trailer management for full duplex streamed mode

Signed-off-by: Guy Daich <[email protected]>
Signed-off-by: shawnh2 <[email protected]>

* feat: disable automountServiceAccountToken for proxy and ratelimit (envoyproxy#6364)

Signed-off-by: Jeff Davis <[email protected]>

* bugfix: make EnvoyPatchPolicy able to replace telemetry cluster (envoyproxy#6367)

Signed-off-by: zirain <[email protected]>
Signed-off-by: shawnh2 <[email protected]>

* feat: add validation of section name for Gateway listener (envoyproxy#6343)

* add validation of section name

Signed-off-by: kkk777-7 <[email protected]>

* update error status reason

Signed-off-by: kkk777-7 <[email protected]>

* refactor: define as function of validate section name for gateway listener

Signed-off-by: kkk777-7 <[email protected]>
Signed-off-by: shawnh2 <[email protected]>

* fix: add configMap indexers for EEP reconciler (envoyproxy#6369)

Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: use buildEndpointType for access and tracing (envoyproxy#6370)

Signed-off-by: zirain <[email protected]>

* fix: default accesslog not working (envoyproxy#6441)
* fix default accesslog

Signed-off-by: zirain <[email protected]>

* release notes

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: shawnh2 <[email protected]>

* chore: fix cve (envoyproxy#6446)

* fix cve

Signed-off-by: zirain <[email protected]>

* lint

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>

* fix: Do not set backendRequestTimeout when Retries are set (envoyproxy#6421)

* fix: Do not set backendRequestTimeout when Retries are set

Signed-off-by: sudipto baral <[email protected]>

* fix: update comment

Signed-off-by: sudipto baral <[email protected]>

---------

Signed-off-by: sudipto baral <[email protected]>

* gatewayapi: don't append gwcResource if there's invalid GatewayClass (envoyproxy#6379)

* gatewayapi: don't process gloabal resources when acceptedGateways is 0

Signed-off-by: zirain <[email protected]>

* update

Signed-off-by: zirain <[email protected]>

* fix test

Signed-off-by: zirain <[email protected]>

* don't skip gateways

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: shawnh2 <[email protected]>

* fix testdata

Signed-off-by: shawnh2 <[email protected]>

* fix k8s provider controller

Signed-off-by: shawnh2 <[email protected]>

* fix: retry reconcile on transient errors during reconcile  (envoyproxy#6299)

* fix: add isTransientError helper to classify retryable errors

Introduces isTransientError to detect transient Kubernetes errors and
enable proper reconciliation retries.

Signed-off-by: Patryk Rostkowski <[email protected]>

handle errors from processing BackendRefs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

handle errors from processing ConfigMap

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* skip invalid GatewayClass

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* address comment

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* handle all transient errors

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* don't skip failed GCs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Patryk Rostkowski <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit 71ce56f)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix: fix bug in hostname overlap detection (envoyproxy#6332)

fix bug in hostname overlap detection

Signed-off-by: Rudrakh Panigrahi <[email protected]>
(cherry picked from commit e78e268)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix telemetry with host port not working (envoyproxy#6460)

Signed-off-by: zirain <[email protected]>
(cherry picked from commit c0a2ce7)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* bugfix: BackendTlsPolicy should not reference across namespace (envoyproxy#6309)

* bugfix: BackendTlsPolicy should not reference across namespace

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 9925189)
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Guy Daich <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
Signed-off-by: Jeff Davis <[email protected]>
Signed-off-by: zirain <[email protected]>
Signed-off-by: kkk777-7 <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>
Signed-off-by: sudipto baral <[email protected]>
Signed-off-by: Patryk Rostkowski <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Guy Daich <[email protected]>
Co-authored-by: Jeff Davis <[email protected]>
Co-authored-by: zirain <[email protected]>
Co-authored-by: Kota Kimura <[email protected]>
Co-authored-by: Rudrakh Panigrahi <[email protected]>
Co-authored-by: Sudipto Baral <[email protected]>
Co-authored-by: Patryk Rostkowski <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: shawnh2 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants