Skip to content

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering"#8471

Merged
zhaohuabing merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:revert-8009
Mar 11, 2026
Merged

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering"#8471
zhaohuabing merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:revert-8009

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

@zhaohuabing zhaohuabing commented Mar 10, 2026

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering" (#8009)

This reverts commit a97d57a.

Release Notes: No - the SourceCIDRs was marked as notImplementedHide, so no user-visible change.

Why this API should be reverted: the issue with putting this in SP instead of CTP is that SP can be applied per-route. That makes L4 IP filtering tricky, since different routes could end up with SecurityPolicies with/without/different SourceCIDRs.

Background:
#7825 (comment)
#7825 (comment)

…ing (envoyproxy#8009)"

This reverts commit a97d57a.

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
@zhaohuabing zhaohuabing requested a review from a team as a code owner March 10, 2026 04:56
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 10, 2026

Deploy Preview for cerulean-figolla-1f9435 canceled.

Name Link
🔨 Latest commit 4a32ce2
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/69afa4758a30d1000899572d

@zhaohuabing zhaohuabing changed the title Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filter… Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering" Mar 10, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Mar 10, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.13%. Comparing base (a470576) to head (4a32ce2).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #8471   +/-   ##
=======================================
  Coverage   74.13%   74.13%           
=======================================
  Files         242      242           
  Lines       37579    37579           
=======================================
+ Hits        27859    27860    +1     
  Misses       7778     7778           
+ Partials     1942     1941    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@zhaohuabing zhaohuabing merged commit 7c16b05 into envoyproxy:main Mar 11, 2026
57 of 59 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants