…same (envoyproxy#23005)

Signed-off-by: giantcroc <[email protected]>

…3071)

Risk Level: low
Testing: integration tested
Docs Changes: n/a
Release Notes: inline
Part of envoyproxy#10455

Signed-off-by: Alyssa Wilk <[email protected]>

…c-bridge/client (envoyproxy#23112)

build(deps): bump python in /examples/grpc-bridge/client

Bumps python from `c212a18` to `6de22c9`.

---
updated-dependencies:
- dependency-name: python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…oxy#23134)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.23.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b398f52...6a38b7d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…dency (envoyproxy#23133)

build(deps): bump certifi in /tools/dependency

Bumps [certifi](https://github.com/certifi/python-certifi) from 2022.6.15 to 2022.9.14.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](certifi/python-certifi@2022.06.15...2022.09.14)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

envoyproxy#23137)

Bumps mysql from `cdf3b62` to `b9532b1`.

---
updated-dependencies:
- dependency-name: mysql
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This has landed upstream, but updating googletest proved harder than
expected. This fixes envoyproxy#22758 in
the meantime.

Signed-off-by: Keith Smiley <[email protected]>

Signed-off-by: Adam Kotwasinski <[email protected]>

…idge/client (envoyproxy#23107)

build(deps): bump protobuf in /examples/grpc-bridge/client

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.20.1 to 3.20.2.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py)
- [Commits](protocolbuffers/protobuf@v3.20.1...v3.20.2)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Xiao, Ziyang <[email protected]>

Signed-off-by: wangkai19 <[email protected]>

Signed-off-by: Alyssa Wilk <[email protected]>

We've seen upstream connection is closed between response start and response end, which closes downstream connection and leads SR drop.

This disconnection is an intentional behavior from the service since thrift doesn't have a RST semantic.

In this diff, we do local reply to downstream instead of resetting it since we haven't sent any byte to downstream.

Risk Level: low
Testing: unit
Signed-off-by: kuochunghsu <[email protected]>

https://github.com/google/quiche/compare/c2576eff3..3743c9285

$ git log c2576eff3..3743c9285 --date=short --no-merges --format="%ad %al %s"

2022-09-13 renjietang Use NiceMock for MockRandom to fix test failures in Envoy.
2022-09-12 quiche-dev Internal change
2022-09-12 quiche-dev Internal change
2022-09-12 martinduke ConnectionIdGenerator that uses QUIC-LB or HASH_QUIC depending on config.
2022-09-12 birenroy Makes the FLAGS_ prefix implicit in calls to GetQuicFlag().
2022-09-09 wub Internal change
2022-09-09 martinduke Internal change
2022-09-09 vasilvv Migrate QuicGoogleClient to use QuicEventLoop.
2022-09-09 quiche-dev Collapse InformationalResponseInternal class into public InformationalResponse.
2022-09-09 wub Allow caller of QuicFramer::BuildIetfStatelessResetPacket to provide a random bytes generator.
2022-09-09 quiche-dev Internal change
2022-09-09 quiche-dev Pass QUIC client connection ID to ProofSource.
2022-09-08 ramosalex Add bind to interface socket option support to QuicClientDefaultNetworkHelper.
2022-09-08 renjietang Populate stats needed for multi-port.
2022-09-07 diannahu Drop buffered metadata for a stream in ForgetStream().
2022-09-06 martinduke Fix incorrect flag checks in quic_connection_test.
2022-09-06 bnc Move QuicIpAddress and IpAddressFamily to third_party/quiche.
2022-09-06 martinduke Fix broken tests.
2022-09-06 quiche-dev Make binary_http library available to external bazel users.
2022-09-06 bnc Enabling rolled out flags.
2022-09-06 martinduke Extend LoadBalancerEncoder to support ConnectionIdGeneratorInterface.
2022-09-06 bnc Add missing includes.
2022-09-06 martinduke Automated g4 rollback of changelist 471573005.
2022-09-06 vasilvv Remove the use of QuicEpoll in qbone_session_test
2022-09-02 quiche-dev Fix file descriptor leak (on bind() failure) in QUIC client.
2022-09-02 ericorth Simplify higher-level socket interfaces
2022-09-02 quiche-dev Convert quic_bounded_crypto_send_buffer to a QUIC_PROTOCOL_FLAG
2022-09-01 quiche-dev Fix broken bazel build.
2022-09-01 quiche-dev Add absl/cleanup to dependencies for quiche_core.
2022-09-01 fayang Deprecate gfe2_reloadable_flag_quic_fix_bytes_accounting_for_buffered_coalesced_packets.
2022-09-01 martinduke Change LoadBalancerEncoder::Create to return unique_ptr.
2022-09-01 martinduke Update QuicConnection to Use ConnectionIdGeneratorInterface.
2022-09-01 quiche-dev Stop calling memcpy when bytes_to_copy is 0
2022-08-31 vasilvv Split quic_client_lib into quic_client_lib and quic_epoll_client_lib
2022-08-31 wub Internal change
2022-08-30 quiche-dev Open source Binary Http.
2022-08-30 vasilvv Fix and re-enable tests disabled in cl/468791547

Risk Level: Low
Testing: Existing tests
Docs Changes: n/a
Release Notes: n/a
Platform Specific Features: n/a

…oxy#23149)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.23 to 2.1.24.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@6a38b7d...904260d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Risk Level: N/A
Testing: N/A
Docs Changes: This is a small docs change

Signed-off-by: Dhi Aurrahman <[email protected]>

…recation (envoyproxy#23098)

Signed-off-by: Jiayu Wu <[email protected]>

When the proxy filter was implemented it did direct string checks to ensure a 200 response. This addresses a TODO to accept any well formed 200 response.

Risk Level: low
Testing: new unit tests, integration tests
Docs Changes: n/a
Release Notes: n/a
Part of envoyproxy/envoy-mobile#1622

Signed-off-by: Alyssa Wilk <[email protected]>

Signed-off-by: silverstar195 <[email protected]>

…envoyproxy#23136)

Signed-off-by: Raven Black <[email protected]>

Signed-off-by: silverstar195 <[email protected]>

Signed-off-by: silverstar195 <[email protected]>

Risk Level: low
Testing: n/a
Docs Changes: n/a
Release Notes: n/a
envoyproxy/envoy-mobile#1622

Signed-off-by: Alyssa Wilk <[email protected]>

…ters, and cluster_header (envoyproxy#23042)

Signed-off-by: Paul Gallagher <[email protected]>

Risk Level: low
Testing: n/a
Docs Changes: n/a
Release Notes: n/a
envoyproxy/envoy-mobile#1622

Signed-off-by: Alyssa Wilk <[email protected]>

This test sends a large number of metadata frames in order to trigger a disconnect. However, it was possible for the disconnect to happen and the connection to be torn down before all the metadata frames had been sent. If that happened, ASAN detected a UAF:
```
==95==ERROR: AddressSanitizer: heap-use-after-free on address 0x60700037e5a0 at pc 0x000004811f9e bp 0x7ffc903af990 sp 0x7ffc903af988
READ of size 8 at 0x60700037e5a0 thread T0
    #0 0x4811f9d in Envoy::IntegrationCodecClient::sendMetadata(Envoy::Http::RequestEncoder&, Envoy::Http::MetadataMap) /proc/self/cwd/test/integration/http_integration.cc:168:3
    #1 0x46ed711 in Envoy::Http2FloodMitigationTest_RequestMetadata_Test::TestBody() /proc/self/cwd/test/integration/http2_flood_integration_test.cc:1486:20
    wangfakang#2 0xd380e64 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2580:10
    wangfakang#3 0xd348dc2 in testing::Test::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2655:5
    wangfakang#4 0xd34a927 in testing::TestInfo::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2832:11
    wangfakang#5 0xd34ccc4 in testing::TestSuite::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2986:28
    wangfakang#6 0xd36f07a in testing::internal::UnitTestImpl::RunAllTests() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:5697:44
    wangfakang#7 0xd384e63 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) /proc/self/cwd/external/com_google_googletest/googletest/src/
gtest.cc:2580:10
    wangfakang#8 0xd36dd86 in testing::UnitTest::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:5280:10
    wangfakang#9 0xa0e53a4 in Envoy::TestRunner::RunTests(int, char**) /proc/self/cwd/external/com_google_googletest/googletest/include/gtest/gtest.h:2485:46
    wangfakang#10 0xa0e0af7 in main /proc/self/cwd/test/main.cc:34:10
    wangfakang#11 0x7f442ef69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 1878e6b475720c7c51969e69ab2d276fae6d1dee)
    wangfakang#12 0x45ed36d in _start (/mnt/ssd/cas/work/1/exec/bazel-out/k8-dbg/bin/test/integration/http2_flood_integration_test.runfiles/envoy/test/integration/http2_flood_integration_test+0x45ed36d)

0x60700037e5a0 is located 48 bytes inside of 80-byte region [0x60700037e570,0x60700037e5c0)
freed by thread T0 here:
    #0 0x466f7d2 in free /local/mnt/workspace/bcain_clang_hu-bcain-lv_22036/final/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:52:3
    #1 0x831dde8 in Envoy::Http::CodecClient::ActiveRequest::~ActiveRequest() /proc/self/cwd/./source/common/http/codec_client.h:220:10
    wangfakang#2 0x5aa33f9 in std::__1::unique_ptr<Envoy::Event::DeferredDeletable, std::__1::default_delete<Envoy::Event::DeferredDeletable> >::reset(Envoy::Event::DeferredDeletable*) /opt/llvm/bin/../include/c++/v1/__memory/unique_ptr.h:54:5
    wangfakang#3 0xa3218e8 in Envoy::Event::DispatcherImpl::clearDeferredDeleteList() /proc/self/cwd/source/common/event/dispatcher_impl.cc:142:21
    wangfakang#4 0xa3348df in void std::__1::__invoke_void_return_wrapper<void, true>::__call<Envoy::Event::DispatcherImpl::DispatcherImpl(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, Envoy::Thread::ThreadFactory&, Envoy::TimeSource&
, Envoy::Random::RandomGenerator&, Envoy::Filesystem::Instance&, Envoy::Event::TimeSystem&, std::__1::function<std::__1::unique_ptr<Envoy::Event::ScaledRangeTimerManager, std::__1::default_delete<Envoy::Event::ScaledRangeTimerManager> > (Envoy::Event::Dispatcher&)> const&
, std::__1::shared_ptr<Envoy::Buffer::WatermarkFactory> const&)::$_2&>(Envoy::Event::DispatcherImpl::DispatcherImpl(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, Envoy::Thread::ThreadFactory&, Envoy::TimeSource&, Envoy::Rand
om::RandomGenerator&, Envoy::Filesystem::Instance&, Envoy::Event::TimeSystem&, std::__1::function<std::__1::unique_ptr<Envoy::Event::ScaledRangeTimerManager, std::__1::default_delete<Envoy::Event::ScaledRangeTimerManager> > (Envoy::Event::Dispatcher&)> const&, std::__1::s
hared_ptr<Envoy::Buffer::WatermarkFactory> const&)::$_2&) /proc/self/cwd/source/common/event/dispatcher_impl.cc:79:30
    wangfakang#5 0xa334603 in std::__1::__function::__func<Envoy::Event::DispatcherImpl::DispatcherImpl(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, Envoy::Thread::ThreadFactory&, Envoy::TimeSource&, Envoy::Random::RandomGenerator&,
Envoy::Filesystem::Instance&, Envoy::Event::TimeSystem&, std::__1::function<std::__1::unique_ptr<Envoy::Event::ScaledRangeTimerManager, std::__1::default_delete<Envoy::Event::ScaledRangeTimerManager> > (Envoy::Event::Dispatcher&)> const&, std::__1::shared_ptr<Envoy::Buffe
r::WatermarkFactory> const&)::$_2, std::__1::allocator<Envoy::Event::DispatcherImpl::DispatcherImpl(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, Envoy::Thread::ThreadFactory&, Envoy::TimeSource&, Envoy::Random::RandomGenera
tor&, Envoy::Filesystem::Instance&, Envoy::Event::TimeSystem&, std::__1::function<std::__1::unique_ptr<Envoy::Event::ScaledRangeTimerManager, std::__1::default_delete<Envoy::Event::ScaledRangeTimerManager> > (Envoy::Event::Dispatcher&)> const&, std::__1::shared_ptr<Envoy:
:Buffer::WatermarkFactory> const&)::$_2>, void ()>::operator()() /opt/llvm/bin/../include/c++/v1/__functional/function.h:180:16
    wangfakang#6 0x4897039 in std::__1::__function::__value_func<void ()>::operator()() const /opt/llvm/bin/../include/c++/v1/__functional/function.h:507:16
    wangfakang#7 0xa8e6aa4 in Envoy::Event::SchedulableCallbackImpl::SchedulableCallbackImpl(Envoy::CSmartPtr<event_base, &(event_base_free)>&, std::__1::function<void ()>)::$_0::__invoke(int, short, void*) /opt/llvm/bin/../include/c++/v1/__functional/function.h:1184:12
    wangfakang#8 0xb557c5e in event_process_active_single_queue /mnt/ssd/cas/work/2/exec/external/com_github_libevent_libevent/event.c:1713:4
    wangfakang#9 0xb539252 in event_process_active /mnt/ssd/cas/work/2/exec/external/com_github_libevent_libevent/event.c
    wangfakang#10 0xb539252 in event_base_loop /mnt/ssd/cas/work/2/exec/external/com_github_libevent_libevent/event.c:2047:12
    wangfakang#11 0xa8e1e3c in Envoy::Event::LibeventScheduler::run(Envoy::Event::Dispatcher::RunType) /proc/self/cwd/source/common/event/libevent_scheduler.cc:60:3
    wangfakang#12 0xa32bd94 in Envoy::Event::DispatcherImpl::run(Envoy::Event::Dispatcher::RunType) /proc/self/cwd/source/common/event/dispatcher_impl.cc:299:19
    wangfakang#13 0x480faad in Envoy::IntegrationCodecClient::flushWrite() /proc/self/cwd/test/integration/http_integration.cc:100:29
    wangfakang#14 0x4811e94 in Envoy::IntegrationCodecClient::sendMetadata(Envoy::Http::RequestEncoder&, Envoy::Http::MetadataMap) /proc/self/cwd/test/integration/http_integration.cc:169:3
    wangfakang#15 0x46ed711 in Envoy::Http2FloodMitigationTest_RequestMetadata_Test::TestBody() /proc/self/cwd/test/integration/http2_flood_integration_test.cc:1486:20
    wangfakang#16 0xd380e64 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2580:10
    wangfakang#17 0xd348dc2 in testing::Test::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2655:5
    wangfakang#18 0xd34a927 in testing::TestInfo::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2832:11
    wangfakang#19 0xd34ccc4 in testing::TestSuite::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2986:28
    wangfakang#20 0xd36f07a in testing::internal::UnitTestImpl::RunAllTests() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:5697:44
    wangfakang#21 0xd384e63 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:2580:10
    wangfakang#22 0xd36dd86 in testing::UnitTest::Run() /proc/self/cwd/external/com_google_googletest/googletest/src/gtest.cc:5280:10
    wangfakang#23 0xa0e53a4 in Envoy::TestRunner::RunTests(int, char**) /proc/self/cwd/external/com_google_googletest/googletest/include/gtest/gtest.h:2485:46
    wangfakang#24 0xa0e0af7 in main /proc/self/cwd/test/main.cc:34:10
    wangfakang#25 0x7f442ef69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 1878e6b475720c7c51969e69ab2d276fae6d1dee)
```

To fix that, write all metadata frames at once.

Signed-off-by: Benjamin Peterson <[email protected]>

…ludes authn: Bearer id token (envoyproxy#22934)


Signed-off-by: Tianyu Xia <[email protected]>

…oyproxy#23164)

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.4.0...2.5.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ections (envoyproxy#23139)

* http: adding upstream address to stream info

Signed-off-by: Alyssa Wilk <[email protected]>

* Adds a debug log to help diagnose an issue.

Signed-off-by: Biren Roy <[email protected]>

https://github.com/google/quiche/compare/c9226caa6..44da7b642

$ git log c9226caa6..44da7b642 --date=short --no-merges --format="%ad %al %s"

2022-10-13 fayang Internal change
2022-10-12 fayang Remove unreachable branch in QuicUtils::IsConnectionIdLengthValidForVersion.
2022-10-12 martinduke Eliminate enum QuicConnectionIdLength.
2022-10-12 vasilvv Remove an unnecessary QUIC_BUG that causes unit tests to flake.
2022-10-11 martinduke Add a ConnectionIdLength() interface to ConnectionIdGeneratorInterface.
2022-10-10 peiwenhu Internal change
2022-10-10 martinduke Add test for server-generated stateless reset.
2022-10-10 vasilvv Fix QUICHE Bazel build.
2022-10-07 ericorth Create ConnectUdpTunnel
2022-10-07 fayang Combine two WriteOrBufferData to one while writing HEADERS frames.
2022-10-07 wub In QuicCryptoServerConfig::ParseConfigProtobuf, treat an empty SCID as the same as a missing one. i.e. return nullptr.
2022-10-07 ianswett Deprecate --gfe2_reloadable_flag_quic_unified_iw_options.
2022-10-06 martinduke Update tests to check that 1-RTT packets are also buffered when the connection ID is different.

Signed-off-by: Renjie Tang <[email protected]>

Signed-off-by: Ryan Northey <[email protected]>

and add a basic yamllint file

Signed-off-by: Ryan Northey <[email protected]>

Fix broken link in HTTP3 arch overview

Signed-off-by: Adam Anderson <[email protected]>

Signed-off-by: He Jie Xu <[email protected]>

Signed-off-by: wbpcode <[email protected]>

…the description (envoyproxy#23486)

Signed-off-by: Joshua Marantz <[email protected]>

Signed-off-by: Bing Han <[email protected]>

…nvoyproxy#23426)

Change the status of internal listener related extensions from wip to alpha.

Signed-off-by: Yanjun Xiang [email protected]

…proxy#23453)

* xds: add config for random and maglev load balancer extensions

Signed-off-by: wbpcode <[email protected]>

* update extension type to envoy.load_balancing_policies because envoy.clusters is extension type for custom cluster

Signed-off-by: wbpcode <[email protected]>

Signed-off-by: wbpcode <[email protected]>

…nvoyproxy#23434)

Signed-off-by: Dhi Aurrahman <[email protected]>

Signed-off-by: Alyssa Wilk <[email protected]>

Signed-off-by: Ryan Northey <[email protected]>

…voyproxy#23539)

Bumps [pytz](https://github.com/stub42/pytz) from 2022.4 to 2022.5.
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2022.4...release_2022.5)

---
updated-dependencies:
- dependency-name: pytz
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… field (envoyproxy#23518)

Signed-off-by: wbpcode <[email protected]>

Signed-off-by: Loong <[email protected]>

Signed-off-by: Alyssa Wilk <[email protected]>

Signed-off-by: William A Rowe Jr <[email protected]>

…y#23638)

Cherry-picked from:

- 9dcd806
- 8e73e50

Signed-off-by: Dhi Aurrahman <[email protected]>

…oxy#23635)

Signed-off-by: wbpcode <[email protected]>
Signed-off-by: Ryan Northey <[email protected]>

Signed-off-by: code <[email protected]>

Previously `/var/run/docker.sock` is readable/writable inside docker run because group ID of `envoygroup` coincidentally matches host docker group, while it is no longer true during rolling out new image. Fixing that by forcing `envoygroup` has host docker group ID.

Risk Level: Low
Testing: CI
Docs Changes:
Release Notes:
Platform Specific Features:

Signed-off-by: Lizan Zhou <[email protected]>
Signed-off-by: Ryan Northey <[email protected]>

… GitHub API (envoyproxy#23751)

Signed-off-by: Dhi Aurrahman <[email protected]>

Since the stat on mac missing the -c option, i.e.
stat: illegal option -- c
usage: stat [-FLnq] [-f format | -l | -r | -s | -x] [-t timefmt] [file ...]

Signed-off-by: doujiang24 <[email protected]>
Signed-off-by: Ryan Northey <[email protected]>

Prevent bitrot on release branches

Signed-off-by: Ryan Northey <[email protected]>

Signed-off-by: Ryan Northey <[email protected]>

…lang-extension-api-for-istio-proxy

…lang-extension-api-for-istio-proxy