Skip to content

fix: ratelimit not working with both headers and cidr matches #4377

Merged
arkodg merged 8 commits intoenvoyproxy:mainfrom
shawnh2:fix-rl
Oct 21, 2024
Merged

fix: ratelimit not working with both headers and cidr matches #4377
arkodg merged 8 commits intoenvoyproxy:mainfrom
shawnh2:fix-rl

Conversation

@shawnh2
Copy link
Copy Markdown
Contributor

@shawnh2 shawnh2 commented Oct 1, 2024

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #4351

@shawnh2 shawnh2 requested a review from a team as a code owner October 1, 2024 04:22
@codecov
Copy link
Copy Markdown

codecov bot commented Oct 1, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.85%. Comparing base (26ec49a) to head (6c2b20f).
Report is 49 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4377      +/-   ##
==========================================
+ Coverage   65.83%   65.85%   +0.01%     
==========================================
  Files         203      203              
  Lines       30699    30700       +1     
==========================================
+ Hits        20212    20216       +4     
+ Misses       9335     9333       -2     
+ Partials     1152     1151       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

arkodg
arkodg previously approved these changes Oct 18, 2024
Copy link
Copy Markdown
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM thanks !

@arkodg arkodg requested review from a team October 18, 2024 02:08
zhaohuabing
zhaohuabing previously approved these changes Oct 18, 2024
Copy link
Copy Markdown
Member

@zhaohuabing zhaohuabing left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks for the fix! Could you also modify the headerMatch in the test and add an example in the comment to help future readers to better understand the code?

Signed-off-by: shawnh2 <shawnhxh@outlook.com>
Signed-off-by: shawnh2 <shawnhxh@outlook.com>
@shawnh2 shawnh2 dismissed stale reviews from zhaohuabing and arkodg via d7553b3 October 19, 2024 07:58
@shawnh2 shawnh2 requested review from a team, arkodg and zhaohuabing October 19, 2024 07:58
@shawnh2
Copy link
Copy Markdown
Contributor Author

shawnh2 commented Oct 20, 2024

/retest

@arkodg arkodg merged commit 66c0b51 into envoyproxy:main Oct 21, 2024
@shawnh2 shawnh2 deleted the fix-rl branch October 22, 2024 00:26
guydc pushed a commit to guydc/gateway that referenced this pull request Oct 31, 2024
…roxy#4377)

* fix ratelimit descriptors do not respect both headers and cidr match for one rule

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* fix gen-check and lint

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* fix ratelimit e2e test

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* add more comment and update test case

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

---------

Signed-off-by: shawnh2 <shawnhxh@outlook.com>
Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com>
(cherry picked from commit 66c0b51)
Signed-off-by: Guy Daich <guy.daich@sap.com>
guydc added a commit that referenced this pull request Oct 31, 2024
* build(deps): bump github.com/docker/docker from 27.2.0+incompatible to 27.3.1+incompatible (#4303)

build(deps): bump github.com/docker/docker

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 27.2.0+incompatible to 27.3.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v27.2.0...v27.3.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com>
(cherry picked from commit cd4e9b1)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* bugfix: EG loglevel error for admin and metrics module (#4340)

* bugfix: EG loglevel error for admin and metrics module

Signed-off-by: qicz <qiczzhu@gmail.com>

* fix ut

Signed-off-by: qicz <qiczzhu@gmail.com>

* polish

Signed-off-by: qicz <qiczzhu@gmail.com>

---------

Signed-off-by: qicz <qiczzhu@gmail.com>
(cherry picked from commit 9b161ee)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: some status updates are discarded by the status updater (#4337)

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
(cherry picked from commit 14830c7)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: Unsupported listener protocol type error for nil supportKinds assign gateway status. (#4345)

(cherry picked from commit 7babca9)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* set invalid Listener.SupportedKinds to empty list (#4352)

* set invalid Listener.SupportedKinds to empty list

Fixes: #4216

Relates to https://kubernetes.slack.com/archives/CR0H13KGA/p1727457195236889

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* lint

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

---------

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
(cherry picked from commit 2fdf069)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* bugfix: ignore some unnecessary requests to apiserver. (#4362)

Signed-off-by: qicz <qiczzhu@gmail.com>
Co-authored-by: zirain <zirain2009@gmail.com>
(cherry picked from commit fe1e8bd)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: rateLimitDeployment ignoring pod labels and annotation merge (#4228)

* fix labels and annotation merges for rate limit deployment

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* fix tests and label merge

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* fix annotation merge if prometheus was disabled and annotations were defined

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* renamed labels and annotations to specify they apply to pods only

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* linter

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* fix resource provider tests to new annotation behavior

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* go linter

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* fix gen-check

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

* pod labels selector comment

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>

---------

Signed-off-by: Oscar Boher <oscar.boher@scopely.com>
Co-authored-by: zirain <zirain2009@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
(cherry picked from commit cf84927)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix dashboard typos (#4422)

Signed-off-by: haorenfsa <haorenfsa@gmail.com>
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: ratelimit not working with both headers and cidr matches  (#4377)

* fix ratelimit descriptors do not respect both headers and cidr match for one rule

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* fix gen-check and lint

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* fix ratelimit e2e test

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

* add more comment and update test case

Signed-off-by: shawnh2 <shawnhxh@outlook.com>

---------

Signed-off-by: shawnh2 <shawnhxh@outlook.com>
Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com>
(cherry picked from commit 66c0b51)
Signed-off-by: Guy Daich <guy.daich@sap.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Guy Daich <guy.daich@sap.com>
Signed-off-by: qicz <qiczzhu@gmail.com>
Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: Oscar Boher <oscar.boher@scopely.com>
Signed-off-by: haorenfsa <haorenfsa@gmail.com>
Signed-off-by: shawnh2 <shawnhxh@outlook.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com>
Co-authored-by: qi <qiczzhu@gmail.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: zirain <zirain2009@gmail.com>
Co-authored-by: Oscar Boher <oscar.boher@scopely.com>
Co-authored-by: shaoyue <haorenfsa@gmail.com>
Co-authored-by: sh2 <shawnhxh@outlook.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ratelimiting doesn't work with both clientSelectors (i.e. headers and sourceCIDR) enabled

3 participants