Skip to content

fix: sanitize control plane config dump#7901

Merged
zhaohuabing merged 8 commits intoenvoyproxy:mainfrom
zhaohuabing:mask-console-api
Jan 19, 2026
Merged

fix: sanitize control plane config dump#7901
zhaohuabing merged 8 commits intoenvoyproxy:mainfrom
zhaohuabing:mask-console-api

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

No description provided.

@zhaohuabing zhaohuabing requested a review from a team as a code owner January 9, 2026 03:39
@zhaohuabing zhaohuabing marked this pull request as draft January 9, 2026 03:39
@netlify
Copy link
Copy Markdown

netlify bot commented Jan 9, 2026

Deploy Preview for cerulean-figolla-1f9435 ready!

Name Link
🔨 Latest commit c5627ab
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/696b27484774370008016068
😎 Deploy Preview https://deploy-preview-7901--cerulean-figolla-1f9435.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov
Copy link
Copy Markdown

codecov bot commented Jan 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.84%. Comparing base (d0f72f6) to head (c5627ab).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7901      +/-   ##
==========================================
+ Coverage   72.82%   72.84%   +0.02%     
==========================================
  Files         237      237              
  Lines       35475    35502      +27     
==========================================
+ Hits        25835    25863      +28     
+ Misses       7801     7800       -1     
  Partials     1839     1839              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@zhaohuabing zhaohuabing changed the title chore: mask secrets mask secrets Jan 9, 2026
@zhaohuabing zhaohuabing changed the title mask secrets fix: mask secrets Jan 9, 2026
@zhaohuabing zhaohuabing changed the title fix: mask secrets fix: sanitize control plane config dump Jan 9, 2026
@zhaohuabing zhaohuabing marked this pull request as ready for review January 9, 2026 07:09
@zhaohuabing zhaohuabing force-pushed the mask-console-api branch 4 times, most recently from c73b77a to e59d085 Compare January 9, 2026 07:48
Signed-off-by: Huabing Zhao <[email protected]>
@zhaohuabing zhaohuabing requested review from a team and arkodg January 12, 2026 01:23
@zhaohuabing zhaohuabing merged commit 844be64 into envoyproxy:main Jan 19, 2026
79 of 85 checks passed
@zhaohuabing zhaohuabing deleted the mask-console-api branch January 19, 2026 09:35
zirain pushed a commit to zirain/gateway that referenced this pull request Jan 26, 2026
* mask secrets

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
rudrakhp pushed a commit to rudrakhp/gateway that referenced this pull request Jan 26, 2026
* mask secrets

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>
zirain added a commit that referenced this pull request Jan 26, 2026
* fix: fail fast when unrecoverable discovery errors happens on checking optional CRDs (#7872)

* fail fast when unrecoverable discovery errors happens

Signed-off-by: Huabing Zhao <[email protected]>

* only retry transient errors

Signed-off-by: Huabing Zhao <[email protected]>

* fix potenial dead lock

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

* minor wording

Signed-off-by: Huabing Zhao <[email protected]>

* create discovery client once

Signed-off-by: Huabing Zhao <[email protected]>

* fix lint

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

* remove redundant logging

Signed-off-by: Huabing Zhao <[email protected]>

* add e2e test

Signed-off-by: Huabing Zhao <[email protected]>

* fix test

Signed-off-by: Huabing(Robin) Zhao <[email protected]>

* fix test

Signed-off-by: Huabing(Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix: extproc is discarded with failOpen is enabled for wasm (#7956)

* fix: extproc is discarded with failOpen is enabled for wasm

Signed-off-by: Huabing Zhao <[email protected]>

* add test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* polish code

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* add test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix: sanitize control plane config dump (#7901)

* mask secrets

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix: server run race (#7964)

* add test

Signed-off-by: zirain <[email protected]>

* fix race

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* use Semaphore instead of WaitGroup

Signed-off-by: zirain <[email protected]>

* comments

Signed-off-by: zirain <[email protected]>

* lint

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* callback

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* run hook sequentially

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* rename to cfgMux

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>

* fix: wrong cluster type with mixed FQDN backend and service backend refs (#7994)

* fix: wrong cluster type with mixed FQDN backend and service backend refs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix mirror cluster endpoint type

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* simplify the test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* update comment

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix: merge route match rule with match all route (#8011)

Signed-off-by: zirain <[email protected]>

* fix gen

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* fix for golang 11.24

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* fix watch CRD version

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: zirain <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
rudrakhp added a commit that referenced this pull request Jan 26, 2026
* fix: extproc is discarded with failOpen is enabled for wasm (#7956)

* fix: extproc is discarded with failOpen is enabled for wasm

Signed-off-by: Huabing Zhao <[email protected]>

* add test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* polish code

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* add test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: sanitize control plane config dump (#7901)

* mask secrets

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: server run race (#7964)

* add test

Signed-off-by: zirain <[email protected]>

* fix race

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* use Semaphore instead of WaitGroup

Signed-off-by: zirain <[email protected]>

* comments

Signed-off-by: zirain <[email protected]>

* lint

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* callback

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* run hook sequentially

Signed-off-by: zirain <[email protected]>

* fix lint

Signed-off-by: zirain <[email protected]>

* rename to cfgMux

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: wrong cluster type with mixed FQDN backend and service backend refs (#7994)

* fix: wrong cluster type with mixed FQDN backend and service backend refs

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* fix mirror cluster endpoint type

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* simplify the test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* update comment

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: fail fast when unrecoverable discovery errors happens on checking optional CRDs (#7872)

* fail fast when unrecoverable discovery errors happens

Signed-off-by: Huabing Zhao <[email protected]>

* only retry transient errors

Signed-off-by: Huabing Zhao <[email protected]>

* fix potenial dead lock

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

* minor wording

Signed-off-by: Huabing Zhao <[email protected]>

* create discovery client once

Signed-off-by: Huabing Zhao <[email protected]>

* fix lint

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

* remove redundant logging

Signed-off-by: Huabing Zhao <[email protected]>

* add e2e test

Signed-off-by: Huabing Zhao <[email protected]>

* fix test

Signed-off-by: Huabing(Robin) Zhao <[email protected]>

* fix test

Signed-off-by: Huabing(Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: merge route match rule with match all route (#8011)

Signed-off-by: zirain <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: do not set autoHTTPConfig when used mixed(HTTP + HTTPS) backends (#7950)

* fix: do not set autoHTTPConfig when used mixed backend

Signed-off-by: zirain <[email protected]>

* release notes

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* add e2e

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: backend tls default namespace (#7987)

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix: race in gatewaapi runner (#8037)

* add testcase

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* simply

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>

* [release/v1.6] v1.6.3 release notes (#8054)

Signed-off-by: Rudrakh Panigrahi <[email protected]>

* v1.6.3 version

Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix gen-check

Signed-off-by: Rudrakh Panigrahi <[email protected]>

* fix lint

Signed-off-by: Rudrakh Panigrahi <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Rudrakh Panigrahi <[email protected]>
Signed-off-by: zirain <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: zirain <[email protected]>
SadmiB pushed a commit to SadmiB/gateway that referenced this pull request Jan 30, 2026
* mask secrets

Signed-off-by: Huabing Zhao <[email protected]>

* address comments

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Sadmi Bouhafs <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants