[release/v1.7] Cherry-pick for v1.7.3 by cnvergence · Pull Request #8869 · envoyproxy/gateway

cnvergence · 2026-04-27T17:43:36Z

What type of PR is this?

https://github.com/envoyproxy/gateway/pulls?q=is%3Apr+author%3Arudrakhp+is%3Aclosed+label%3Acherrypick%2Frelease-v1.7.3

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Release Notes: Yes/No

Signed-off-by: Huabing (Robin) Zhao <[email protected]> (cherry picked from commit 4768ca7)

) Signed-off-by: Rudrakh Panigrahi <[email protected]> (cherry picked from commit 3f70a89)

…voyproxy#8699) * force HTTP1 for upstream connections for WS and WSS backends Signed-off-by: Huabing (Robin) Zhao <[email protected]> * use different clusters for mixed upstream protocols Signed-off-by: Huabing (Robin) Zhao <[email protected]> * update Signed-off-by: Huabing (Robin) Zhao <[email protected]> * fix lint Signed-off-by: Huabing (Robin) Zhao <[email protected]> --------- Signed-off-by: Huabing (Robin) Zhao <[email protected]> (cherry picked from commit 7633125)

* fix: reason with multiple errors rejected validation Signed-off-by: zirain <[email protected]> * release notes Signed-off-by: zirain <[email protected]> * fix lint Signed-off-by: zirain <[email protected]> --------- Signed-off-by: zirain <[email protected]> (cherry picked from commit 7811d86)

…yproxy#8785) * feat: Allow configuring envoy proxy defaults via helm chart This commit is a continuation of the previous work to support supplying default proxy settings added in envoyproxy#7698 and adds three new chart values under `global.images.envoyProxy`: | Value | Type | Default | Description | |----------------------------------------|--------|------|---------------------------------------------------------------------| | `global.images.envoyProxy.image` | string | `""` | Full image name (`registry/repo:tag`) for the Envoy Proxy container | | `global.images.envoyProxy.pullPolicy` | string | `""` | Image pull policy | | `global.images.envoyProxy.pullSecrets` | list | `[]` | Image pull secrets | When any of these are set, the chart generates an `envoyProxy:` block inside the `EnvoyGateway` ConfigMap, wiring into the existing `EnvoyGatewaySpec.envoyProxy` field (added in envoyproxy#7698). The global `imageRegistry` override takes highest precedence, consistent with other chart components. Full EnvoyProxy defaults (replicas, resources, etc.) can be provided via `config.envoyGateway.envoyProxy`; the image values are merged on top. Closes envoyproxy#4764. Signed-off-by: Michael Sommerville <[email protected]> (cherry picked from commit 8570285)

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 092cc67e6b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-04-27T17:47:58Z

+{{- if .Values.global.images.envoyProxy.image }}
+  {{- $container := dict "image" (include "eg.envoyProxy.image" .) }}
+  {{- if .Values.global.images.envoyProxy.pullPolicy }}
+    {{- $_ := set $container "imagePullPolicy" .Values.global.images.envoyProxy.pullPolicy }}


Honor envoyProxy pull policy without image override

The Envoy Proxy override block is nested under if .Values.global.images.envoyProxy.image, which means setting only global.images.envoyProxy.pullPolicy (and similarly pull secrets) produces no envoyProxy.provider.kubernetes.envoyDeployment patch. In practice, these documented values are silently ignored unless users also set an image, so chart users cannot change pull behavior independently.

Useful? React with 👍 / 👎.

codecov · 2026-04-27T17:53:01Z

Codecov Report

❌ Patch coverage is 98.04878% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 73.91%. Comparing base (4d41cab) to head (6bf15d1).

Files with missing lines	Patch %	Lines
internal/gatewayapi/extensionserverpolicy.go	87.50%	1 Missing and 1 partial ⚠️
internal/ir/xds.go	84.61%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@               Coverage Diff                @@
##           release/v1.7    #8869      +/-   ##
================================================
+ Coverage         73.83%   73.91%   +0.07%     
================================================
  Files               241      241              
  Lines             36803    36939     +136     
================================================
+ Hits              27175    27304     +129     
- Misses             7723     7728       +5     
- Partials           1905     1907       +2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Signed-off-by: Karol Szwaj <[email protected]>

zhaohuabing · 2026-04-28T04:47:59Z

/retest

cnvergence · 2026-04-28T08:05:13Z

Waiting for #8854

…8929) * fix: respect backend endpoint hostname for health checks - Keep BackendTrafficPolicy HTTP health check hostnames as explicit cluster-level hosts, and leave route-derived host fallback to xDS cluster translation. - Preserve Backend endpoint hostnames as per-endpoint overrides via Endpoint.HealthCheckConfig.hostname, ahead of the route fallback. - Update gatewayapi/xDS fixtures, release notes, and generated API docs/CRDs for the host selection order. - go test ./internal/ir - go test ./internal/xds/translator - go test ./internal/gatewayapi -run TestTranslate/backendtrafficpolicy - go test ./internal/gatewayapi -run TestTranslate/(clienttrafficpolicy-http-health-check|envoyextensionpolicy-with-extproc-with-retries|envoyextensionpolicy-with-extproc-with-traffic-features|envoyproxy-accesslog-with-traffic|envoyproxy-tracing-backend-uds|envoyproxy-tracing-backend|securitypolicy-with-jwt-backendcluster|securitypolicy-with-jwt-backendsettings) - make generate - make manifests - git diff --check Signed-off-by: Arko Dasgupta <[email protected]> Co-authored-by: Codex <[email protected]> * fix gen Signed-off-by: zirain <[email protected]> --------- Signed-off-by: Arko Dasgupta <[email protected]> Signed-off-by: zirain <[email protected]> Co-authored-by: Codex <[email protected]> Co-authored-by: zirain <[email protected]>

Signed-off-by: Karol Szwaj <[email protected]>

cnvergence · 2026-05-08T14:58:37Z

We have decided to cherry-pick this PR as well #8929

Signed-off-by: Karol Szwaj <[email protected]>

cnvergence · 2026-05-08T17:13:49Z

/retest

arko-oai · 2026-05-08T17:57:17Z

why is 092cc67 in this commit

…rt (envoyproxy#8785)" This reverts commit 092cc67. Signed-off-by: Karol Szwaj <[email protected]>

cnvergence · 2026-05-08T18:33:31Z

We have misunderstood and claimed it is a fix to the helm chart, not a new addition.
I have reverted this commit 😉

… → 1.7.3) (#432) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/envoyproxy/gateway-helm](https://gateway.envoyproxy.io/) ([source](https://github.com/envoyproxy/gateway)) | patch | `1.7.2` → `1.7.3` | --- ### Release Notes <details> <summary>envoyproxy/gateway (docker.io/envoyproxy/gateway-helm)</summary> ### [`v1.7.3`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.3) [Compare Source](envoyproxy/gateway@v1.7.3...v1.7.3) ##### Release Announcement Check out the [v1.7.3 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.7.3.html) to learn more about the release. ##### What's Changed - \[release/v1.7] bump grpc and otel by [@cnvergence](https://github.com/cnvergence) in [#8846](envoyproxy/gateway#8846) - \[release-1.7] bump golang by [@zirain](https://github.com/zirain) in [#8944](envoyproxy/gateway#8944) - \[release/v1.7] Cherry-pick for v1.7.3 by [@cnvergence](https://github.com/cnvergence) in [#8869](envoyproxy/gateway#8869) - \[release/v1.7] update release notes by [@cnvergence](https://github.com/cnvergence) in [#8946](envoyproxy/gateway#8946) **Full Changelog**: <envoyproxy/gateway@v1.7.2...v1.7.3> ### [`v1.7.3`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.3) [Compare Source](envoyproxy/gateway@v1.7.2...v1.7.3) ##### Release Announcement Check out the [v1.7.3 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.7.3.html) to learn more about the release. ##### What's Changed - \[release/v1.7] bump grpc and otel by [@cnvergence](https://github.com/cnvergence) in [#8846](envoyproxy/gateway#8846) - \[release-1.7] bump golang by [@zirain](https://github.com/zirain) in [#8944](envoyproxy/gateway#8944) - \[release/v1.7] Cherry-pick for v1.7.3 by [@cnvergence](https://github.com/cnvergence) in [#8869](envoyproxy/gateway#8869) - \[release/v1.7] update release notes by [@cnvergence](https://github.com/cnvergence) in [#8946](envoyproxy/gateway#8946) **Full Changelog**: <envoyproxy/gateway@v1.7.2...v1.7.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/432

zhaohuabing and others added 5 commits April 27, 2026 17:26

fix json report (envoyproxy#8614)

ce20343

Signed-off-by: Huabing (Robin) Zhao <[email protected]> (cherry picked from commit 4768ca7)

fix: deep copy status in translator layer to avoid race (envoyproxy#8778

0633444

) Signed-off-by: Rudrakh Panigrahi <[email protected]> (cherry picked from commit 3f70a89)

cnvergence requested a review from a team as a code owner April 27, 2026 17:43

cnvergence changed the title ~~Cherry pick v.1.7.3~~ [release/v1.7] Cherry-pick for v1.7.3 Apr 27, 2026

chatgpt-codex-connector Bot reviewed Apr 27, 2026

View reviewed changes

rudrakhp previously approved these changes Apr 27, 2026

View reviewed changes

add rn and version bump

d4cf16e

Signed-off-by: Karol Szwaj <[email protected]>

cnvergence dismissed rudrakhp’s stale review via d4cf16e April 27, 2026 19:00

zhaohuabing previously approved these changes Apr 28, 2026

View reviewed changes

jukie previously approved these changes Apr 29, 2026

View reviewed changes

cnvergence dismissed stale reviews from jukie and zhaohuabing via 46d8b75 May 8, 2026 14:46

arkodg and others added 2 commits May 8, 2026 16:48

update release notes

f6f04d3

Signed-off-by: Karol Szwaj <[email protected]>

cnvergence force-pushed the cherry-pick-v.1.7.3 branch from 46d8b75 to f6f04d3 Compare May 8, 2026 14:48

fix gen-check

3af8e0b

Signed-off-by: Karol Szwaj <[email protected]>

arkodg previously approved these changes May 8, 2026

View reviewed changes

Revert "feat(chart): Allow configuring envoy proxy image via helm cha…

6bf15d1

…rt (envoyproxy#8785)" This reverts commit 092cc67. Signed-off-by: Karol Szwaj <[email protected]>

cnvergence dismissed arkodg’s stale review via 6bf15d1 May 8, 2026 18:29

arkodg approved these changes May 8, 2026

View reviewed changes

cnvergence merged commit 1aa5008 into envoyproxy:release/v1.7 May 9, 2026
22 of 26 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[release/v1.7] Cherry-pick for v1.7.3#8869

[release/v1.7] Cherry-pick for v1.7.3#8869
cnvergence merged 10 commits into
envoyproxy:release/v1.7from
cnvergence:cherry-pick-v.1.7.3

cnvergence commented Apr 27, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Apr 27, 2026

Uh oh!

codecov Bot commented Apr 27, 2026 •

edited

Loading

Uh oh!

zhaohuabing commented Apr 28, 2026

Uh oh!

cnvergence commented Apr 28, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

arko-oai commented May 8, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

cnvergence commented Apr 27, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Apr 27, 2026

Choose a reason for hiding this comment

Uh oh!

codecov Bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

zhaohuabing commented Apr 28, 2026

Uh oh!

cnvergence commented Apr 28, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

arko-oai commented May 8, 2026

Uh oh!

cnvergence commented May 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

codecov Bot commented Apr 27, 2026 •

edited

Loading