Skip to content

policy: Remove generic L7 policy support#44610

Merged
jrajahalme merged 1 commit intocilium:mainfrom
jrajahalme:proxylib-cleanup
Mar 25, 2026
Merged

policy: Remove generic L7 policy support#44610
jrajahalme merged 1 commit intocilium:mainfrom
jrajahalme:proxylib-cleanup

Conversation

@jrajahalme
Copy link
Copy Markdown
Member

@jrajahalme jrajahalme commented Mar 3, 2026

Now that proxylib support has been removed, the only remaining generic L7 parser types are the experimental ones for MySQL and MongoDB. These have never been tested, documented, nor announced, so we remove them without deprecating them first.

Kafka, L7Proto and L7 fields are removed from CNP and CCNP CDRs.

Fixes: #43557

Proxylib related fields are removed from CNP and CCNP CRDs.

@jrajahalme jrajahalme requested review from a team as code owners March 3, 2026 14:39
@jrajahalme jrajahalme added the kind/cleanup This includes no functional changes. label Mar 3, 2026
@jrajahalme jrajahalme requested review from a team as code owners March 3, 2026 14:39
@jrajahalme jrajahalme added area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. sig/policy Impacts whether traffic is allowed or denied based on user-defined policies. labels Mar 3, 2026
@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Mar 3, 2026
@jrajahalme jrajahalme requested review from chancez and squeed March 3, 2026 14:39
@jrajahalme jrajahalme marked this pull request as draft March 3, 2026 14:39
@jrajahalme jrajahalme added the release-note/minor This PR changes functionality that users may find relevant to operating Cilium. label Mar 3, 2026
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Mar 3, 2026
@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 3, 2026

/test

@jrajahalme jrajahalme force-pushed the proxylib-cleanup branch 2 times, most recently from 77af919 to 6c363ba Compare March 3, 2026 15:19
@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 3, 2026

/test

@jrajahalme jrajahalme marked this pull request as ready for review March 3, 2026 15:43
@jrajahalme jrajahalme requested a review from a team as a code owner March 3, 2026 15:43
@jrajahalme jrajahalme requested a review from qmonnet March 3, 2026 15:43
qmonnet
qmonnet approved these changes Mar 3, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@qmonnet qmonnet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ack for doc update

HadrienPatte
HadrienPatte approved these changes Mar 3, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@HadrienPatte HadrienPatte left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

vendor LGTM

sayboras
sayboras approved these changes Mar 4, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@sayboras sayboras left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Discussed offline with Jarno as well 👍

@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 9, 2026

rebased to fix merge conflict.

@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 9, 2026

/test

1 similar comment
@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 10, 2026

/test

@jrajahalme
policy: Remove generic L7 policy support
02904c9 
Now that proxylib support has been removed, the only remaining generic L7
parser types are the experimental ones for MySQL and MongoDB. Remove them
as well.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
@jrajahalme jrajahalme requested a review from a team as a code owner March 10, 2026 08:38
@jrajahalme jrajahalme requested a review from tommyp1ckles March 10, 2026 08:38
@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 10, 2026

Added proxy port for TLS; TLS redirects used the generic type that was removed.

@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 10, 2026

/test

1 similar comment
@jrajahalme
Copy link
Copy Markdown
Member Author

jrajahalme commented Mar 10, 2026

/test

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Mar 25, 2026
@jrajahalme jrajahalme added this pull request to the merge queue Mar 25, 2026
Merged via the queue into cilium:main with commit 73be778 Mar 25, 2026
83 checks passed
@jrajahalme jrajahalme deleted the proxylib-cleanup branch March 25, 2026 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@squeed squeed squeed approved these changes

@chancez chancez chancez approved these changes

@tommyp1ckles tommyp1ckles tommyp1ckles approved these changes

@sayboras sayboras sayboras approved these changes

@HadrienPatte HadrienPatte HadrienPatte approved these changes

@qmonnet qmonnet qmonnet approved these changes

Assignees

No one assigned

Labels

area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. kind/cleanup This includes no functional changes. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/minor This PR changes functionality that users may find relevant to operating Cilium. sig/policy Impacts whether traffic is allowed or denied based on user-defined policies.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

8 participants

@jrajahalme @squeed @chancez @tommyp1ckles @sayboras @HadrienPatte @qmonnet @msune