Skip to content

feat: support targetRef in backend security policy#762

Merged
mathetake merged 13 commits intoenvoyproxy:mainfrom
Xunzhuo:feat-use-targetref
Jul 26, 2025
Merged

feat: support targetRef in backend security policy#762
mathetake merged 13 commits intoenvoyproxy:mainfrom
Xunzhuo:feat-use-targetref

Conversation

@Xunzhuo
Copy link
Copy Markdown
Member

@Xunzhuo Xunzhuo commented Jun 24, 2025

Description

This commit adds a new targetRefs field to BackendSecurityPolicy to match the recommended pattern of GWAPI. This means that we will deprecate backendSecurityPolicyRef of AIServiceBackend. It will continue working as-is, but the API will be dropped after v0.3 is released. Users are advised to migrate to the new API with the instruction in the documentation.

Related Issues/PRs (if applicable)

Fixes: #549

@Xunzhuo Xunzhuo requested a review from a team as a code owner June 24, 2025 08:25
@Xunzhuo Xunzhuo force-pushed the feat-use-targetref branch from d224f4e to f59d331 Compare June 24, 2025 08:33
Signed-off-by: bitliu <bitliu@tencent.com>
@Xunzhuo Xunzhuo force-pushed the feat-use-targetref branch from f59d331 to 126cc7b Compare June 24, 2025 08:39
@mathetake
Copy link
Copy Markdown
Member

thank for the work here... but i think this involves the API refactoring discussion we have in like #675 , so let's wait for it to reach the consensus cc @missBerg

@Xunzhuo
Copy link
Copy Markdown
Member Author

Xunzhuo commented Jun 26, 2025

Yes, I did this earlier than the discussion, so let us hold.

@mathetake mathetake added this to the v0.3.0 milestone Jul 2, 2025
@mathetake mathetake self-assigned this Jul 18, 2025
@mathetake
Copy link
Copy Markdown
Member

i will take over this pr

mathetake added 10 commits July 25, 2025 14:54
# Conflicts:
#	api/v1alpha1/api.go
#	internal/controller/ai_service_backend.go
#	internal/controller/backend_security_policy_test.go
#	tests/controller/controller_test.go
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
@mathetake
Copy link
Copy Markdown
Member

i pushed some changes. PTAL @Xunzhuo

@Xunzhuo
Copy link
Copy Markdown
Member Author

Xunzhuo commented Jul 26, 2025

thanks @mathetake!

mathetake and others added 2 commits July 25, 2025 18:11
Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
@mathetake mathetake merged commit 7318be6 into envoyproxy:main Jul 26, 2025
23 checks passed
mathetake added a commit that referenced this pull request Jul 30, 2025
**Description**

backendSecurityPolicyRef has been marked deprecated, so this cleans up
the remaining reference of backendSecurityPolicyRef in various places.

**Related Issues/PRs (if applicable)**

Follow up on #762

Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BackendSecurityPolicy should target AIServiceBackend

2 participants