Skip to content

fix(status): fall back to service externalIPs for Gateway addresses#9209

Merged
zirain merged 3 commits into
envoyproxy:mainfrom
jvlxz:fix/gateway-status-externalips
Jun 14, 2026
Merged

fix(status): fall back to service externalIPs for Gateway addresses#9209
zirain merged 3 commits into
envoyproxy:mainfrom
jvlxz:fix/gateway-status-externalips

Conversation

@jvlxz

@jvlxz jvlxz commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

What this PR does

When the Envoy service is of type LoadBalancer but no load balancer controller assigns an ingress address (e.g. bare-metal clusters without a LB controller), the Gateway status had no addresses and stayed Programmed=False with reason AddressNotAssigned — even when reachable addresses were configured via spec.externalIPs, e.g. through an EnvoyProxy service patch:

envoyService:
  type: LoadBalancer
  patch:
    type: StrategicMerge
    value:
      spec:
        externalIPs:
          - 10.19.0.11

collectLoadBalancerAddresses only read status.loadBalancer.ingress; spec.externalIPs was only honored when addresses were set on the Gateway spec itself.

This PR uses spec.externalIPs as a fallback when the load balancer ingress list is empty. Ingress addresses keep priority when present, so behavior is unchanged for clusters with a working load balancer controller (deliberately a fallback rather than an append, to avoid changing status output — and downstream consumers like external-dns — for existing cloud setups).

Testing

  • Unit tests for both cases: empty ingress → externalIPs reported; ingress present → externalIPs ignored.
  • Verified end-to-end on a kind cluster with the exact configuration from Gateway stays Programmed=False when Envoy Svc externalIPs is set via EnvoyProxy patch #8987 (mergeGateways, DaemonSet, LoadBalancer service with externalIPs patch):
    • without a LB controller: Programmed=True, addresses: [{type: IPAddress, value: 10.19.0.11}] (previously AddressNotAssigned)
    • with a LB controller assigning an ingress IP: only the ingress IP is reported, as before

Fixes #8987

@jvlxz
fix(status): fall back to service externalIPs for Gateway addresses
488519c 
When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes envoyproxy#8987

Signed-off-by: Jules Dutel <[email protected]>
@jvlxz jvlxz requested a review from a team as a code owner June 11, 2026 10:35
@netlify

netlify Bot commented Jun 11, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for cerulean-figolla-1f9435 ready!

Name Link
🔨 Latest commit 8c21232
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/6a2bcea2d16e5e00083246ef
😎 Deploy Preview https://deploy-preview-9209--cerulean-figolla-1f9435.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@jvlxz jvlxz mentioned this pull request Jun 11, 2026
Closed
@codecov

codecov Bot commented Jun 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.90%. Comparing base (6578a6d) to head (8c21232).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #9209   +/-   ##
=======================================
  Coverage   74.89%   74.90%           
=======================================
  Files         252      252           
  Lines       40799    40801    +2     
=======================================
+ Hits        30558    30561    +3     
+ Misses       8158     8157    -1     
  Partials     2083     2083

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@kkk777-7

kkk777-7 commented Jun 12, 2026

Copy link
Copy Markdown
Member

LGTM, thanks!

@kkk777-7

kkk777-7 commented Jun 12, 2026

Copy link
Copy Markdown
Member

/retest

@jukie

jukie commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

/retest

@zirain zirain merged commit f2c0921 into envoyproxy:main Jun 14, 2026
86 of 91 checks passed
cleman95 pushed a commit to cleman95/gateway that referenced this pull request Jun 25, 2026
@jvlxz @cleman95
fix(status): fall back to service externalIPs for Gateway addresses (e…
22df6d5 
…nvoyproxy#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes envoyproxy#8987

Signed-off-by: Jules Dutel <[email protected]>
zac-nixon pushed a commit to zac-nixon/gateway that referenced this pull request Jun 29, 2026
@jvlxz @zac-nixon
fix(status): fall back to service externalIPs for Gateway addresses (e…
42308d9 
…nvoyproxy#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes envoyproxy#8987

Signed-off-by: Jules Dutel <[email protected]>
guydc pushed a commit to guydc/gateway that referenced this pull request Jun 30, 2026
@jvlxz @guydc
fix(status): fall back to service externalIPs for Gateway addresses (e…
d7a9b82 
…nvoyproxy#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes envoyproxy#8987

Signed-off-by: Jules Dutel <[email protected]>
jukie added a commit that referenced this pull request Jul 1, 2026
@jukie @beckcl
@rissson @zhaohuabing @nobbs @arkodg @zirain @apkatsikas @jvlxz @MengjiaLiang @nimishamehta5 @cilindrox @gianniskt
[release-1.8] cherry-pick for v1.8.2 (#9376)
6c2e80d 
* fix rate limit validation on K8s 1.36 (#9166)

fixi: rate limit validation on K8s 1.36

Starting with K8s 1.36 the int range and maximum are validated
against each other, which breaks the BTP tests.

This can be fixed validating the field as uint32.

Signed-off-by: Clemens Beck <[email protected]>
Co-authored-by: Clemens Beck <[email protected]>
(cherry picked from commit a21fd29)
Signed-off-by: jukie <[email protected]>

* fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges (#9050)

* fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges and loadBalancerIP

Signed-off-by: Marc 'risson' Schmitt <[email protected]>
(cherry picked from commit 3c1d7b9)
Signed-off-by: jukie <[email protected]>

* fix: allow Backend TLS  to disable ALPN with an empty list (#9162)

* Fixed Backend TLS  to disable upstream ALPN instead of inheriting EnvoyProxy BackendTLS defaults.

Signed-off-by: Huabing Zhao <[email protected]>

* add test case for envoyproxy without tls

Signed-off-by: Huabing Zhao <[email protected]>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

---------

Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
(cherry picked from commit 21eb101)
Signed-off-by: jukie <[email protected]>

* fix(gatewayapi): sort api key auth credentials (#9042)

* fix(gatewayapi): sort api key auth credentials

Signed-off-by: Alexej Disterhoft <[email protected]>

* docs(release-notes): add api key auth fix note

Signed-off-by: Alexej Disterhoft <[email protected]>

---------

Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: zirain <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: zirain <[email protected]>
(cherry picked from commit b96a2d3)
Signed-off-by: jukie <[email protected]>

* fix(status): separate listener programmed state from HTTPRoute Accepted condition (#9129)

* fix(status): separate listener programmed state from HTTPRoute Accepted condition
  Remove the NoReadyListeners block that set Accepted: False on routes when
  no listeners were programmed. Route acceptance reflects binding validity;
  listener programmed state is already tracked by the listener's own conditions.

Signed-off-by: apkatsikas <[email protected]>

* fix(status): separate listener programmed state from TCPRoute/UDPRoute Accepted condition
  Routes with a valid binding to an unprogrammed listener now correctly reach
  Accepted=True regardless of listener readiness. Moves accepted=true and
  IncrementAttachedRoutes before the IsReady check so the Accepted condition
  reflects binding validity only, consistent with the HTTPRoute fix and the
  Gateway API spec.

Signed-off-by: apkatsikas <[email protected]>
(cherry picked from commit e9c3ac5)
Signed-off-by: jukie <[email protected]>

* fix: reject  ExternalName Service as a route backend (#9190)

fix: reject  Service as a route backend

Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit ee16b3f)
Signed-off-by: jukie <[email protected]>

* fix(status): fall back to service externalIPs for Gateway addresses (#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes #8987

Signed-off-by: Jules Dutel <[email protected]>
(cherry picked from commit f2c0921)
Signed-off-by: jukie <[email protected]>

* fix: don't duplicate ValidatingAdmissionPolicy in install.yaml (#9182)

* Fix duplicate VAP in install.yaml

Signed-off-by: jukie <[email protected]>

* Add regression check and release notes

Signed-off-by: jukie <[email protected]>

---------

Signed-off-by: jukie <[email protected]>
(cherry picked from commit 332081c)
Signed-off-by: jukie <[email protected]>

* fix(listenerset): implement hostname conflict listener precedence (#9192)

* fix(listenerset): implement hostname conflict listener precedence

- In Gateway, multiple listeners with the same hostname all get marked
  Conflicted (no winner). In ListenerSet, a Gateway-owned listener
  wins over ListenerSet listeners; among ListenerSet listeners the first
  in processing order wins.

- Conflicted ListenerSet listeners now get Accepted=False and
  Programmed=False with the conflict reason (HostnameConflict or
  ProtocolConflict), matching the Gateway API conformance expectation.

- AttachedListenerSets on the Gateway status is now incremented only for
  ListenerSets that have at least one accepted listener, aligning with
  the spec definition of "successfully attached".

Signed-off-by: zirain <[email protected]>

* ListenerSet conflict

Signed-off-by: zirain <[email protected]>

* fix and improve message

Signed-off-by: zirain <[email protected]>

* better display gateway listener

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 9271654)
Signed-off-by: jukie <[email protected]>

* fix: correct the config hot reload validation order (#9214)

Co-authored-by: Nimisha Mehta <[email protected]>
(cherry picked from commit 7e4492d)
Signed-off-by: jukie <[email protected]>

* feat(helm): add CRDs dependency toggle (#8850)

* feat(helm): add CRDs dependency toggle

Allow skipping installation of the `crds` dependency on the gateway-helm
chart by providing a conditional `crds.enabled` variable. This boolean
defaults to `true` and toggles the inclusion of the dependency on the
parent chart.

ref: #8560
Signed-off-by: Gaston Festari <[email protected]>

* docs: update Helm installation steps

Use the `crds.enabled` variable in the examples instead of the
`--skip-crds` flag.

Update crds.enabled variable description.

Co-authored-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Gaston Festari <[email protected]>

---------

Signed-off-by: Gaston Festari <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit 62e01ce)
Signed-off-by: jukie <[email protected]>

* fix: validate API Key auth ExtractFrom (#9250)

* fix: validate API Key auth ExtractFrom

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* add test

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* update

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* update

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* update

Signed-off-by: Huabing (Robin) Zhao <[email protected]>

---------

Signed-off-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit 50b1339)
Signed-off-by: jukie <[email protected]>

* fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum (#9224)

* fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum
The constant held "Disabled" but the CRD enum specifies "Off", causing
xRateLimitHeaders: "Off" to silently fall through the translator switch
and always emit X-RateLimit headers.

Fixes #9223

Signed-off-by: gianniskt <[email protected]>

* fix: XRateLimitHeadersOptionDisabled constant value must match CRD enum
The constant held "Disabled" but the CRD enum specifies "Off", causing
xRateLimitHeaders: "Off" to silently fall through the translator switch
and always emit X-RateLimit headers.

Fixes #9223

Signed-off-by: gianniskt <[email protected]>

* fix: add release note for XRateLimitHeadersOptionDisabled fix

Signed-off-by: gianniskt <[email protected]>

---------

Signed-off-by: gianniskt <[email protected]>
Signed-off-by: Ioannis Koutroumpis <[email protected]>
(cherry picked from commit 43c9d8e)
Signed-off-by: jukie <[email protected]>

* fix(ratelimit): shared global ratelimit with cost not working (#9245)

* fix(ratelimit): shared global ratelimit with cost not working

Signed-off-by: zirain <[email protected]>

* fix

Signed-off-by: zirain <[email protected]>

* fix mixed shared rule

Signed-off-by: zirain <[email protected]>

* add e2e

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 7997791)
Signed-off-by: jukie <[email protected]>

* fix(gatewayapi): http retry without backoff (#9238)

* fix http retry without backoff

Signed-off-by: zirain <[email protected]>

* release notes

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 4872e53)
Signed-off-by: jukie <[email protected]>

* fix: panic with empty deploy (#9365)

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 42a0c2c)
Signed-off-by: jukie <[email protected]>

* chore: restore current.yaml after cherry-picks

The cherry-picked bug-fix commits appended their release-note entries to
release-notes/current.yaml. Those notes are already finalized in
release-notes/v1.8.2.yaml, so restore current.yaml to its prior state to
avoid duplicating them in the next release cycle.

Signed-off-by: jukie <[email protected]>

* [release-1.8] bump ratelimit image to 1e50889b

Bump the Envoy Ratelimit image from ff287602 to 1e50889b in source and
the gateway-helm chart, and note the bump under security updates in the
v1.8.2 release notes.

Signed-off-by: jukie <[email protected]>

* testdata

Signed-off-by: jukie <[email protected]>

* fix: use int64 format for ratelimit Requests field (#9377)

Signed-off-by: jukie <[email protected]>

---------

Signed-off-by: Clemens Beck <[email protected]>
Signed-off-by: jukie <[email protected]>
Signed-off-by: Marc 'risson' Schmitt <[email protected]>
Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: zirain <[email protected]>
Signed-off-by: apkatsikas <[email protected]>
Signed-off-by: Jules Dutel <[email protected]>
Signed-off-by: Gaston Festari <[email protected]>
Signed-off-by: gianniskt <[email protected]>
Signed-off-by: Ioannis Koutroumpis <[email protected]>
Co-authored-by: Clemens Beck <[email protected]>
Co-authored-by: Clemens Beck <[email protected]>
Co-authored-by: Marc 'risson' Schmitt <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Co-authored-by: Alexej Disterhoft <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: zirain <[email protected]>
Co-authored-by: Andrew Katsikas <[email protected]>
Co-authored-by: jvlxz <[email protected]>
Co-authored-by: Mengjia Liang <[email protected]>
Co-authored-by: Nimisha Mehta <[email protected]>
Co-authored-by: Gaston Festari <[email protected]>
Co-authored-by: Ioannis Koutroumpis <[email protected]>
cnvergence pushed a commit to cnvergence/gateway that referenced this pull request Jul 7, 2026
@jvlxz @cnvergence
fix(status): fall back to service externalIPs for Gateway addresses (e…
421a8c0 
…nvoyproxy#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes envoyproxy#8987

Signed-off-by: Jules Dutel <[email protected]>
(cherry picked from commit f2c0921)
Signed-off-by: jvlxz <[email protected]>
cnvergence added a commit that referenced this pull request Jul 7, 2026
@cnvergence @rissson
@zhaohuabing @nobbs @arkodg @zirain @immanuwell @jvlxz @MengjiaLiang @nimishamehta5 @jukie
[release/v1.7] cherry-pick for v1.7.5 (#9429)
50eb8f1 
* fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges (#9050)

* fix(validation): allow IPv6 to be specific in loadBalancerSourceRanges and loadBalancerIP

Signed-off-by: Marc 'risson' Schmitt <[email protected]>
(cherry picked from commit 3c1d7b9)

* fix: allow Backend TLS  to disable ALPN with an empty list (#9162)

* Fixed Backend TLS  to disable upstream ALPN instead of inheriting EnvoyProxy BackendTLS defaults.

Signed-off-by: Huabing Zhao <[email protected]>

* add test case for envoyproxy without tls

Signed-off-by: Huabing Zhao <[email protected]>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>

* address comments

Signed-off-by: Huabing Zhao <[email protected]>

---------

Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
(cherry picked from commit 21eb101)

* fix(gatewayapi): sort api key auth credentials (#9042)

* fix(gatewayapi): sort api key auth credentials

Signed-off-by: Alexej Disterhoft <[email protected]>

* docs(release-notes): add api key auth fix note

Signed-off-by: Alexej Disterhoft <[email protected]>

---------

Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: zirain <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: zirain <[email protected]>
(cherry picked from commit b96a2d3)

* fix(egctl): correct user-facing grammar in help text (#9217)

Signed-off-by: immanuwell <[email protected]>
(cherry picked from commit ef1d118)
Signed-off-by: Immanuel Tikhonov <[email protected]>

* fix: reject  ExternalName Service as a route backend (#9190)

fix: reject  Service as a route backend

Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
(cherry picked from commit ee16b3f)

* fix(status): fall back to service externalIPs for Gateway addresses (#9209)

When the Envoy service is of type LoadBalancer but no load balancer
controller assigns an ingress address (e.g. bare-metal clusters), the
Gateway status had no addresses and stayed Programmed=False with reason
AddressNotAssigned, even when reachable addresses were configured via
spec.externalIPs (e.g. through an EnvoyProxy service patch).

Use spec.externalIPs as a fallback when the load balancer ingress list
is empty. Ingress addresses keep priority when present, so behavior is
unchanged for clusters with a working load balancer controller.

Fixes #8987

Signed-off-by: Jules Dutel <[email protected]>
(cherry picked from commit f2c0921)
Signed-off-by: jvlxz <[email protected]>

* fix: correct the config hot reload validation order (#9214)

Co-authored-by: Nimisha Mehta <[email protected]>
(cherry picked from commit 7e4492d)
Signed-off-by: Mengjia Liang <[email protected]>

* fix: panic with empty deploy (#9365)

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 42a0c2c)

* fix: DaemonSet pod not using the configured custom ServiceAccount name (#9347)

* add test case

Signed-off-by: zirain <[email protected]>

* fix daemonset pod serviceaccount name

Signed-off-by: zirain <[email protected]>

* release notes

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: zirain <[email protected]>
(cherry picked from commit 59a0cab)

* fix: use int64 format for ratelimit Requests field (#9377)

Signed-off-by: jukie <[email protected]>
(cherry picked from commit 6916245)
Signed-off-by: Isaac Wilson <[email protected]>

* [release/v1.7] bump envoy to 1.37.5 and ratelimit to f2fb1577

Signed-off-by: Karol Szwaj <[email protected]>

* [release/v1.7] add release notes for v1.7.5

Signed-off-by: Karol Szwaj <[email protected]>

* fix gen

Signed-off-by: Karol Szwaj <[email protected]>

* fix rn

Signed-off-by: Karol Szwaj <[email protected]>

---------

Signed-off-by: Marc 'risson' Schmitt <[email protected]>
Signed-off-by: Huabing Zhao <[email protected]>
Signed-off-by: Huabing (Robin) Zhao <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: Alexej Disterhoft <[email protected]>
Signed-off-by: zirain <[email protected]>
Signed-off-by: immanuwell <[email protected]>
Signed-off-by: Immanuel Tikhonov <[email protected]>
Signed-off-by: Jules Dutel <[email protected]>
Signed-off-by: jvlxz <[email protected]>
Signed-off-by: Mengjia Liang <[email protected]>
Signed-off-by: jukie <[email protected]>
Signed-off-by: Isaac Wilson <[email protected]>
Signed-off-by: Karol Szwaj <[email protected]>
Co-authored-by: Marc 'risson' Schmitt <[email protected]>
Co-authored-by: Huabing (Robin) Zhao <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Co-authored-by: Alexej Disterhoft <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: zirain <[email protected]>
Co-authored-by: Immanuel Tikhonov <[email protected]>
Co-authored-by: jvlxz <[email protected]>
Co-authored-by: Mengjia Liang <[email protected]>
Co-authored-by: Nimisha Mehta <[email protected]>
Co-authored-by: Isaac Wilson <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zirain zirain zirain approved these changes
@kkk777-7 kkk777-7 kkk777-7 approved these changes

Assignees

No one assigned

Labels

cherrypick/release-v1.7.5 cherrypick/release-v1.8.2

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Gateway stays Programmed=False when Envoy Svc externalIPs is set via EnvoyProxy patch

4 participants

@jvlxz @kkk777-7 @jukie @zirain