Conversation
Signed-off-by: Guy Daich <guy.daich@sap.com>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #3843 +/- ##
==========================================
- Coverage 69.30% 69.25% -0.06%
==========================================
Files 176 176
Lines 21740 21740
==========================================
- Hits 15067 15056 -11
- Misses 5584 5593 +9
- Partials 1089 1091 +2 ☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
could you help me understand the real use case about this, client --http--> GW --tls--> backend?
There was a problem hiding this comment.
Client ==HTTP/S==> GW ==MTLS==> Backend
in this task, for simplicity, we don't configure downstream TLS.
There was a problem hiding this comment.
all then backends share same/one cert for MTLS?
|
/retest |
| ``` | ||
|
|
||
| ## Configure Envoy Proxy to use a client certificate | ||
|
|
There was a problem hiding this comment.
can we add a config highlighting how to link this EnvoyProxy to the Gqteway ?
Signed-off-by: Guy Daich <guy.daich@sap.com>
|
/retest |
|
Non-blocking nit: should we just use one md file for both tls and mtls? When I look into mtls docs, I expect to see the guide for both the server and client-side tls settings. |
* add backend tls docs Signed-off-by: Guy Daich <guy.daich@sap.com> * fix links Signed-off-by: Guy Daich <guy.daich@sap.com> * add gateway paramsref Signed-off-by: Guy Daich <guy.daich@sap.com> * nit Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com>
* fix quickstart link in helm chart (#3793) Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 (#3780) Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.21.0 to 0.22.0. - [Commits](golang/sys@v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * build(deps): bump distroless/static from `e9ac71e` to `8dd8d3c` in /tools/docker/envoy-gateway (#3778) build(deps): bump distroless/static in /tools/docker/envoy-gateway Bumps distroless/static from `e9ac71e` to `8dd8d3c`. --- updated-dependencies: - dependency-name: distroless/static dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * build(deps): bump fortio.org/log from 1.12.2 to 1.14.0 (#3782) Bumps [fortio.org/log](https://github.com/fortio/log) from 1.12.2 to 1.14.0. - [Release notes](https://github.com/fortio/log/releases) - [Commits](fortio/log@v1.12.2...v1.14.0) --- updated-dependencies: - dependency-name: fortio.org/log dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 (#3783) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.65.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.64.0...v1.65.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * docs: move release-notes out of version (#3765) * move release-notes out of version Signed-off-by: zirain <zirain2009@gmail.com> * fix Signed-off-by: zirain <zirain2009@gmail.com> * update release-notes Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * ci: update cherry-pick v1.1.0 (#3803) Signed-off-by: Guy Daich <guy.daich@sap.com> * doc: how to build a wasm image (#3806) * docs for building wasm images Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * minor change Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * Use Wasm instead of WASM (#3812) * Use Wasm instead of WASM Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com> * part2 Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com> --------- Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com> * docs: generate v1.1.0-rc.1 release note (#3794) * chore: release-notes-docs be part of generate (#3815) * fix: enable client timeout test (#3811) * enable client timeout test Signed-off-by: Guy Daich <guy.daich@sap.com> * fix target of policy Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com> * chore: add benchmark report into release artifacts (#3756) * add benchmark report save dir Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add benchmark report to latest release Signed-off-by: shawnh2 <shawnhxh@outlook.com> * separate benchmark-test push and pull_request event Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add benchmark report to release workflow Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix lint and update doc Signed-off-by: shawnh2 <shawnhxh@outlook.com> * move out resource limit unit Signed-off-by: shawnh2 <shawnhxh@outlook.com> --------- Signed-off-by: shawnh2 <shawnhxh@outlook.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * docs: fix grafana link (#3818) Signed-off-by: zirain <zirain2009@gmail.com> * e2e: make sure ALS server is ready (#3816) Signed-off-by: zirain <zirain2009@gmail.com> * Revert "docs: fix grafana link" (#3822) Revert "docs: fix grafana link (#3818)" This reverts commit 0af2f9f. Signed-off-by: zirain <zirain2009@gmail.com> * feat: support target selectors on Envoy Gateway Extension Server policies (#3800) * Support target selectors on Envoy Gateway Extension Server policies Signed-off-by: Lior Okman <lior.okman@sap.com> * Fixed the linter errors Signed-off-by: Lior Okman <lior.okman@sap.com> --------- Signed-off-by: Lior Okman <lior.okman@sap.com> * docs: updating the documentation for Extension Servers and adding an example extension server (#3788) * Updating the documentation for Extension Servers and adding an example extension server. Signed-off-by: Lior Okman <lior.okman@sap.com> * Make the docs linter happy Signed-off-by: Lior Okman <lior.okman@sap.com> * Add license headers to every new source file, and make the yaml linter ignore the extension-server chart Signed-off-by: Lior Okman <lior.okman@sap.com> * Add the boilerplate license for generated files. Signed-off-by: Lior Okman <lior.okman@sap.com> --------- Signed-off-by: Lior Okman <lior.okman@sap.com> * docs for ip allowlist/denylist (#3784) * docs for ip whitelisting/blacklisting Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * replace terms based on CNCF INI doc Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * docs: gRPC Access Log Service (ALS) sink (#3768) * docs: gRPC Access Log Service (ALS) sink Signed-off-by: zirain <zirain2009@gmail.com> * ignore githubusercontent.com Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * docs: update v1.1.0-rc.1 release notes (#3821) update v1.1.0-rc.1 release notes Signed-off-by: Guy Daich <guy.daich@sap.com> * docs: add task for wasm extensions (#3796) * docs for wasm extensions Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * minor change Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * community: promote shawnh2 to maintainer and move qicz to emeritus (#3760) Signed-off-by: bitliu <bitliu@tencent.com> * chore: report a translate error to errChan to make it observed correctly (#3827) Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * chore: upgrade to golang v1.22.5 (#3829) * chore: golang v1.22.5 Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * chore: update golang version in example manifest Signed-off-by: Kensei Nakada <handbomusic@gmail.com> --------- Signed-off-by: Kensei Nakada <handbomusic@gmail.com> Co-authored-by: zirain <zirain2009@gmail.com> * chore: add `make lint.fix-golint` to address auto fixable lint issues (#3828) * chore: add make lint.fix to address auto fixable lint issues Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * chore: rename to lint.fix-golint Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * chore: golang v1.22.5 Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * fix: correct a mistake on the name Signed-off-by: Kensei Nakada <handbomusic@gmail.com> --------- Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * docs: patch field within EnvoyService (#3820) * add docs for patching field within EnvoyService Signed-off-by: shawnh2 <shawnhxh@outlook.com> * update path service example Signed-off-by: shawnh2 <shawnhxh@outlook.com> --------- Signed-off-by: shawnh2 <shawnhxh@outlook.com> * accesslog: remove ALS gRPC initialMetadata (#3751) remove ALS gRPC initialMetadata Signed-off-by: zirain <zirain2009@gmail.com> * docs: add fixed links to the current version of eg docs (#3819) * rename v1.0.2 to docs Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * retain v1.0.2 directory to avoid dead links Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix link Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix link Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * copy v1.0.2 to docs in make file Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * test auto copy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * test auto copy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * test auto copy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * test auto copy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * test auto copy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * copy latest version docs to docs directory Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: zirain <zirain2009@gmail.com> * fix: backendtls minversion (#3835) fix backendtls Signed-off-by: Guy Daich <guy.daich@sap.com> * fix: enable use-client-protocol test (#3825) * enable use-client-protocol test Signed-off-by: Guy Daich <guy.daich@sap.com> * add retries to basic auth tests Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com> * fix: backendtls client cert (#3839) fix backendtls client cert Signed-off-by: Guy Daich <guy.daich@sap.com> * fix: prevent xdsIR updates from overwriting RateLimit configs from other xdsIR (#3771) * fix: prevent xdsIR updates from overwriting RateLimit configs from other xdsIR Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * fix: handle deletion events appropriately Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * test: add a unit test for subscribeAndTranslate Signed-off-by: Kensei Nakada <handbomusic@gmail.com> * chore: sort import order Signed-off-by: Kensei Nakada <handbomusic@gmail.com> --------- Signed-off-by: Kensei Nakada <handbomusic@gmail.com> Co-authored-by: zirain <zirain2009@gmail.com> * docs: use v[x.y] instead of v[x.y.z] (#3836) * docs: use vx.y instead of vx.y.z Signed-off-by: zirain <zirain2009@gmail.com> * fix deadlink Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * e2e: fix basic auth flaky (#3833) Signed-off-by: zirain <zirain2009@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * design: add wasm extension supports OCI image code source (#3313) * desing docs for wasm oci support Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * Update site/content/en/contributions/design/wasm-extension.md Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com> Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * minor wording Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * authn consideration Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * minor wording Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * minor wording Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * minor wording Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * minor wording Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * restrict access to priave images Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * minor change Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * move image to /img Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * fix: enable upgrade test (#3764) adapt upgrade test to v1.1 Signed-off-by: Guy Daich <guy.daich@sap.com> Co-authored-by: zirain <zirain2009@gmail.com> * chore: go mod tidy (#3842) Signed-off-by: zirain <zirain2009@gmail.com> * fix flaky authorization tests (#3844) Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 (#3849) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.26.0 to 0.27.0. - [Commits](golang/net@v0.26.0...v0.27.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump fortio.org/fortio from 1.65.0 to 1.66.0 (#3848) Bumps [fortio.org/fortio](https://github.com/fortio/fortio) from 1.65.0 to 1.66.0. - [Release notes](https://github.com/fortio/fortio/releases) - [Commits](fortio/fortio@v1.65.0...v1.66.0) --- updated-dependencies: - dependency-name: fortio.org/fortio dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump helm.sh/helm/v3 from 3.15.2 to 3.15.3 (#3850) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.2 to 3.15.3. - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.15.2...v3.15.3) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: move UDP test resources out of the base (#3857) delay the creation for non-shared udp test resources Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * chore: replace targetRef with targetRefs in e2e (#3858) * docs: Remove the older versions from linkinator ignore list (#3846) * upgrade hugo and postcss-cli Signed-off-by: zirain <zirain2009@gmail.com> * fix deadlink Signed-off-by: zirain <zirain2009@gmail.com> * remove linkinator timeout Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (#3854) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.23.0 to 0.24.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@7c2007b...6e7b7d1) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/norwoodj/helm-docs from 1.13.0 to 1.14.2 in /tools/src/helm-docs (#3847) build(deps): bump github.com/norwoodj/helm-docs in /tools/src/helm-docs Bumps [github.com/norwoodj/helm-docs](https://github.com/norwoodj/helm-docs) from 1.13.0 to 1.14.2. - [Release notes](https://github.com/norwoodj/helm-docs/releases) - [Changelog](https://github.com/norwoodj/helm-docs/blob/master/CHANGELOG.md) - [Commits](norwoodj/helm-docs@v1.13.0...v1.14.2) --- updated-dependencies: - dependency-name: github.com/norwoodj/helm-docs dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: move connection limit test resources out of the base (#3859) * delay the creation for non-shared test resources Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * build(deps): bump actions/setup-node from 4.0.2 to 4.0.3 (#3853) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.0.2 to 4.0.3. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@60edb5d...1e60f62) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump google/osv-scanner-action from 1.8.1 to 1.8.2 (#3851) Bumps [google/osv-scanner-action](https://github.com/google/osv-scanner-action) from 1.8.1 to 1.8.2. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@3c399db...7ac94f9) --- updated-dependencies: - dependency-name: google/osv-scanner-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> * build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 in /tools/github-actions/setup-deps (#3855) build(deps): bump actions/setup-go in /tools/github-actions/setup-deps Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.1 to 5.0.2. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@cdcb360...0a12ed9) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 (#3852) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.11 to 3.25.12. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b611370...4fa2a79) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> * docs: add backend tls docs (#3843) * add backend tls docs Signed-off-by: Guy Daich <guy.daich@sap.com> * fix links Signed-off-by: Guy Daich <guy.daich@sap.com> * add gateway paramsref Signed-off-by: Guy Daich <guy.daich@sap.com> * nit Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com> * chore: move zipkin test resources out of the base (#3864) move zipkin test resources out of the base Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * chore: move tcp test resources out of the base (#3863) move tcp test resources out of the base Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * docs: create concepts docs page and diagram (#3808) * Adding concept page with visual to docs site Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Fix EnvoyGatewayPatchPolicy to EnvoyPatchPolicy Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Fix ordering of columns and adding links. Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Adding to v1.0.2 as well Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Fixing links Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Added Backend resource to concept overview Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Tidy up and update docs for 1.0.2 Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * Update arrow from Route to route targets Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> * fix: wrong path & title and add diagram Signed-off-by: bitliu <bitliu@tencent.com> --------- Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> Signed-off-by: bitliu <bitliu@tencent.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * benchmark: enable prometheus to scrape metrics from (#3772) * chore: move backend tls test resources out of the base (#3862) * move backend tls test resources out of the base Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add notice Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * print response body for debugging Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * print policy for debugging Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * increase timeout Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * chore: remove cherrypicker action (#3831) Signed-off-by: zirain <zirain2009@gmail.com> * chore: update linkinator comment (#3870) Signed-off-by: zirain <zirain2009@gmail.com> * chore: make format as part of gen-check (#3877) Signed-off-by: zirain <zirain2009@gmail.com> * chore: update LINKINATOR_IGNORE (#3879) * chore: update LINKINATOR_IGNORE Signed-off-by: zirain <zirain2009@gmail.com> * remove example.com Signed-off-by: zirain <zirain2009@gmail.com> * Revert "remove example.com" This reverts commit 0c6e44c. Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * return 500 error for failed SecurityPolicies to avoid unauthorized access to xRoutes (#3869) * return 500 error to avoid unauthorized access to xRoutes Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add e2e test for failed SecurityPolicy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add e2e test for failed SecurityPolicy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add e2e test for failed SecurityPolicy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add e2e test for failed SecurityPolicy Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * rename Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * rename Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * lint: update yamllint and codespell skip (#3882) * lint: update yamllint and codespell skip Signed-off-by: zirain <zirain2009@gmail.com> * end with newline Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * e2e: increase test timeout (#3883) Signed-off-by: zirain <zirain2009@gmail.com> * chore: client mtls test (#3874) client mtls test Signed-off-by: Guy Daich <guy.daich@sap.com> * fix: nil pointer err during hash load balancing build (#3886) fix nil pointer err in buildHashPolicy Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix override issue for EEP (#3881) * add test for empty policies Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add test for eep Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * add teset for eep Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * fix eep override issue Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> * accesslog: fix different CelMatches on AccessLog (#3885) * accesslog: fix different CelMatches on AccessLog Signed-off-by: zirain <zirain2009@gmail.com> * lint Signed-off-by: zirain <zirain2009@gmail.com> * text Signed-off-by: zirain <zirain2009@gmail.com> * lint Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> Co-authored-by: Guy Daich <guy.daich@sap.com> * rm gateway-api translation error message from direct response (#3878) * Responding back with an error message around translation errors may leak info to internet facing external clients around ingress internals Signed-off-by: Arko Dasgupta <arko@tetrate.io> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * GetParentReferences should use namespace from RouteContext (#3876) * GetParentReferences should use namespace from RouteContext Signed-off-by: zirain <zirain2009@gmail.com> * lint Signed-off-by: zirain <zirain2009@gmail.com> * add test Signed-off-by: zirain <zirain2009@gmail.com> * fix test Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> * add negative case Signed-off-by: zirain <zirain2009@gmail.com> * address review comment Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * Add e2e test for load balancing (#3868) * update api doc and e2e test env for lb Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add e2e test for round robin lb Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix gen-check Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add e2e test for source ip consistent hash lb Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add e2e test for header consistent hash lb Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add e2e test for cookie consistent hash lb Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add deployment only for lb test case Signed-off-by: shawnh2 <shawnhxh@outlook.com> * rename deployment for different test setup Signed-off-by: shawnh2 <shawnhxh@outlook.com> * wait deployment to have available replicas Signed-off-by: shawnh2 <shawnhxh@outlook.com> --------- Signed-off-by: shawnh2 <shawnhxh@outlook.com> Co-authored-by: zirain <zirain2009@gmail.com> * egctl: introduce `egctl x collect` (#3775) * e2e: add e2e test for cookie based consistent hash load balancing (#3890) * add e2e test for cookie based consistent hash load balancing Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix lint Signed-off-by: shawnh2 <shawnhxh@outlook.com> * lower the round robin lb test boundary Signed-off-by: shawnh2 <shawnhxh@outlook.com> * add case for generated cookie Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix lint Signed-off-by: shawnh2 <shawnhxh@outlook.com> * remove response dump Signed-off-by: shawnh2 <shawnhxh@outlook.com> --------- Signed-off-by: shawnh2 <shawnhxh@outlook.com> * enable HTTPRouteBackendRequestHeaderModifier test (#3891) * enable HTTPRouteBackendRequestHeaderModifier test already supported with #3246 Signed-off-by: Arko Dasgupta <arko@tetrate.io> * make testdata Signed-off-by: Arko Dasgupta <arko@tetrate.io> --------- Signed-off-by: Arko Dasgupta <arko@tetrate.io> * disable writing into GatewayClass.Status.SupportedFeatures disable until the field moves from experiemental to stable so status writes for a GatewayClass dont fail when the datatypes differ Signed-off-by: Arko Dasgupta <arko@tetrate.io> * comment out test snippet Signed-off-by: Arko Dasgupta <arko@tetrate.io> * validate for reconcile should check reference from EnvoyProxy (#3895) validateEndpointSliceForReconcile should check reference from EnvoyProxy Signed-off-by: zirain <zirain2009@gmail.com> * chore: add grafonnet dashboards support (#3785) * add grafonnet lib and support for resources monitor dashboard Signed-off-by: shawnh2 <shawnhxh@outlook.com> * update helm-generate to support grafonnet generate dashboards Signed-off-by: shawnh2 <shawnhxh@outlook.com> * update doc Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix doc-lint and osv-scan Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix tools path Signed-off-by: shawnh2 <shawnhxh@outlook.com> * resolve conflicts Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix gen-check Signed-off-by: shawnh2 <shawnhxh@outlook.com> * fix doc-lint Signed-off-by: shawnh2 <shawnhxh@outlook.com> --------- Signed-off-by: shawnh2 <shawnhxh@outlook.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * add startupProbe to all provisioned containers (#3893) * This ensures the readinessProbe kicks in only after the container has started * max startup time is 300s - 30 (failureThreshold) x 10 (periodSeconds). After this the container is killed and the `restartPolicy` kicks in https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/#startup-probe Fixes: #3511 Signed-off-by: Arko Dasgupta <arko@tetrate.io> * e2e: move als test resources out of the base (#3884) Signed-off-by: zirain <zirain2009@gmail.com> * e2e: fix ZipkinTracing flaky (#3899) * e2e: make sure OTel-collector is ready Signed-off-by: zirain <zirain2009@gmail.com> * fix gen Signed-off-by: zirain <zirain2009@gmail.com> * fix retry Signed-off-by: zirain <zirain2009@gmail.com> * remove infrastructure.parametersRef from all-namespace Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> * lint Signed-off-by: zirain <zirain2009@gmail.com> * fix bad request Signed-off-by: zirain <zirain2009@gmail.com> * increase time of one cycle Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * doc: add load balancing usage (#3903) add load balancing usage Signed-off-by: shawnh2 <shawnhxh@outlook.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> * fix: typos in release notes (#3909) Signed-off-by: bitliu <bitliu@tencent.com> * fix: fix the CEL definitions to allow policies that use target selectors without explicit targetRefs (#3904) Fix the CEL definitions to allow policies that use target selectors without explicit targetRefs Signed-off-by: Lior Okman <lior.okman@sap.com> * feat(logger): Add tlog for better test logging (#3913) Add tlog.Logf() logger Signed-off-by: Manoramsharma <img_2020037@iiitm.ac.in> * e2e: add hook to debug OIDC fail (#3914) * e2e: refactor and improve lb test (#3912) * e2e: refactor and improve lb test Signed-off-by: zirain <zirain2009@gmail.com> * tlog Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> * lint Signed-off-by: zirain <zirain2009@gmail.com> * nit Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> * tools: remove sphinx (#3927) Signed-off-by: zirain <zirain2009@gmail.com> * release v1.1.0 (#3932) * release v1.1.0 Signed-off-by: Guy Daich <guy.daich@sap.com> * update release notes with delta from v1.1.0-rc.1 Signed-off-by: Guy Daich <guy.daich@sap.com> * fix lint Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: zirain <zirain2009@gmail.com> Signed-off-by: Guy Daich <guy.daich@sap.com> Signed-off-by: Takeshi Yoneda <t.y.mathetake@gmail.com> Signed-off-by: shawnh2 <shawnhxh@outlook.com> Signed-off-by: Lior Okman <lior.okman@sap.com> Signed-off-by: bitliu <bitliu@tencent.com> Signed-off-by: Kensei Nakada <handbomusic@gmail.com> Signed-off-by: huabing zhao <zhaohuabing@gmail.com> Signed-off-by: Erica Hughberg <erica.sundberg.90@gmail.com> Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: Manoramsharma <img_2020037@iiitm.ac.in> Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> Co-authored-by: Takeshi Yoneda <t.y.mathetake@gmail.com> Co-authored-by: sh2 <shawnhxh@outlook.com> Co-authored-by: Lior Okman <lior.okman@sap.com> Co-authored-by: Kensei Nakada <handbomusic@gmail.com> Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com> Co-authored-by: Erica Hughberg <erica.sundberg.90@gmail.com> Co-authored-by: Arko Dasgupta <arko@tetrate.io> Co-authored-by: Manoramsharma <84619980+Manoramsharma@users.noreply.github.com>
What type of PR is this?
What this PR does / why we need it:
Which issue(s) this PR fixes:
fixes #3789