Skip to content

[release/v1.6] cherry-pick for v1.6.6#8761

Merged
rudrakhp merged 13 commits intoenvoyproxy:release/v1.6from
rudrakhp:release/v1.6
Apr 16, 2026
Merged

[release/v1.6] cherry-pick for v1.6.6#8761
rudrakhp merged 13 commits intoenvoyproxy:release/v1.6from
rudrakhp:release/v1.6

Conversation

@rudrakhp
Copy link
Copy Markdown
Member

felipesabadini and others added 12 commits April 15, 2026 12:32
…oxy#8480)

* fix: avoid metric increments on no-op delete reconcile paths

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>

* Update internal/infrastructure/kubernetes/infra_resource_test.go

Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>

* Update internal/infrastructure/kubernetes/infra_resource_test.go

Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>

---------

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>
Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>
Co-authored-by: Isaac Wilson <isaac.wilson514@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…le (envoyproxy#8656)

Fixes envoyproxy#8651

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…paces (envoyproxy#8706)

* fix: helm secrets rbac for gateway namespace with watch list of namespaces

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* add release notes

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* review update

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

---------

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Co-authored-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…nvoyproxy#7556)

* progate the HTTPFilter validation errors to the outer layer

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
return 500 error for invalid filters

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…estRedirect filter together (envoyproxy#7474)

* fix: prevent configuring RequestMirror and DirectResponse filters together

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

check redirect respose filter

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

* address comments

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

* fix lint

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

---------

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
* fix bug with grpcroute mirror filter

Signed-off-by: Adam Buran <aburan@roblox.com>

* add indexers test

Signed-off-by: Adam Buran <aburan@roblox.com>

* add release note

Signed-off-by: Adam Buran <aburan@roblox.com>

---------

Signed-off-by: Adam Buran <aburan@roblox.com>
Signed-off-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…yproxy#8557)

Fixes envoyproxy#8554

Signed-off-by: stekole <stefan@sandnetworks.com>
Signed-off-by: stekole <30674956+stekole@users.noreply.github.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
…valid rules (envoyproxy#7625)

* set HTTPRoute Accepted condition as true with mixed invalid and valid rules

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
* fix basic auth validation

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
@rudrakhp rudrakhp requested a review from a team as a code owner April 15, 2026 07:57
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 74ab97f054

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +970 to +972
if irRoute.DirectResponse != nil || irRoute.Redirect != nil {
continue
}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Apply fail-closed 500 even when a route already has DirectResponse

When processFilterError != nil, this loop skips routes that already have DirectResponse/Redirect set, so an invalid GRPCRoute rule can continue serving its configured response instead of the intended 500 fail-closed response. This is reachable when one filter in a rule is invalid (for example, malformed header modifier) and another filter sets a direct response via ExtensionRef; in mixed valid/invalid routes, the invalid rule is still attached but not converted to 500.

Useful? React with 👍 / 👎.

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 15, 2026

Codecov Report

❌ Patch coverage is 83.54978% with 76 lines in your changes missing coverage. Please review.
✅ Project coverage is 73.18%. Comparing base (bb12141) to head (c0979bf).
⚠️ Report is 1 commits behind head on release/v1.6.

Files with missing lines Patch % Lines
internal/gatewayapi/filters.go 80.50% 44 Missing and 2 partials ⚠️
internal/gatewayapi/route.go 87.59% 14 Missing and 3 partials ⚠️
...ternal/infrastructure/kubernetes/infra_resource.go 83.58% 7 Missing and 4 partials ⚠️
internal/gatewayapi/securitypolicy.go 66.66% 1 Missing and 1 partial ⚠️
Additional details and impacted files
@@               Coverage Diff                @@
##           release/v1.6    #8761      +/-   ##
================================================
+ Coverage         72.99%   73.18%   +0.19%     
================================================
  Files               231      231              
  Lines             34540    34699     +159     
================================================
+ Hits              25211    25394     +183     
+ Misses             7480     7467      -13     
+ Partials           1849     1838      -11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

cnvergence
cnvergence previously approved these changes Apr 15, 2026
zirain
zirain previously approved these changes Apr 15, 2026
@rudrakhp rudrakhp dismissed stale reviews from zirain and cnvergence via 18e29b3 April 15, 2026 09:50
zhaohuabing
zhaohuabing previously approved these changes Apr 15, 2026
zirain
zirain previously approved these changes Apr 15, 2026
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
@rudrakhp rudrakhp dismissed stale reviews from zirain and zhaohuabing via c0979bf April 16, 2026 04:34
@rudrakhp
Copy link
Copy Markdown
Member Author

/retest

@rudrakhp rudrakhp merged commit 174c1d7 into envoyproxy:release/v1.6 Apr 16, 2026
22 of 25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants